Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d9bfa8a4-a6c3-33e6-a0cd-bea87a6de6a3.roa
File: d9bfa8a4-a6c3-33e6-a0cd-bea87a6de6a3.roa (raw, json)
Hash identifier: eRcQfBBupMalsTPW+46774MWnc69VxV5nPZ8VFvU8Ho=
Subject key identifier: F7:41:CA:C0:E1:CE:6B:3F:F6:C4:21:AB:EE:69:4F:39:5C:92:82:C4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DACCB7C23CD78F3D50A92B450
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d9bfa8a4-a6c3-33e6-a0cd-bea87a6de6a3.roa
Signing time: Sat 23 Apr 2022 12:00:00 +0000
ROA not before: Sat 23 Apr 2022 12:00:00 +0000
ROA not after: Sun 29 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.45.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ac:cb:7c:23:cd:78:f3:d5:0a:92:b4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 23 12:00:00 2022 GMT
Not After : May 29 04:00:00 2022 GMT
Subject: CN=385e8d54-e9d3-44da-b223-e4f597b121e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0d:da:c3:88:91:73:cf:a0:06:03:a1:29:c3:
f5:fa:64:c2:b2:19:79:c7:9d:bb:44:cf:5b:49:e2:
f8:de:ef:8c:83:2a:3a:54:4d:07:89:4b:57:25:77:
63:81:f2:7d:e6:3c:96:8b:1e:6b:e8:47:ba:dc:3d:
0f:c0:7a:ef:61:3f:46:81:ed:e1:24:fb:36:05:ea:
53:7f:a6:04:df:be:af:41:c3:1e:ae:35:3a:c9:19:
f4:a4:2d:ae:ae:06:e6:5e:0d:93:24:41:f1:05:7d:
aa:3a:69:ab:66:65:d6:07:b6:12:2c:65:22:3f:8d:
34:7a:f3:ed:c8:4e:e2:f1:75:ff:5f:29:39:80:bb:
fb:78:1e:58:c4:e1:83:77:9f:dc:2d:d4:61:91:99:
8d:29:f8:4c:19:10:5c:dc:4c:d9:6a:cd:ed:62:e8:
f6:da:20:d8:1c:fd:42:e8:7f:c3:77:ca:15:2a:a2:
fb:e4:9d:7a:75:f8:5a:e2:6a:d7:d3:17:e8:02:76:
ad:4b:44:82:59:7e:1c:fe:6e:a0:83:a0:ac:fa:29:
5b:6b:34:5d:0f:53:26:38:b4:bb:77:37:d8:69:e9:
c0:63:c9:cb:6f:56:8e:38:da:0b:56:1a:ca:06:5c:
c9:2e:8d:9a:97:a6:fc:d3:15:1a:7e:ae:ab:a3:27:
64:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:41:CA:C0:E1:CE:6B:3F:F6:C4:21:AB:EE:69:4F:39:5C:92:82:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d9bfa8a4-a6c3-33e6-a0cd-bea87a6de6a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.45.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:43:cc:90:30:0a:fb:bb:98:c9:cd:50:0e:a3:64:d8:20:1d:
1e:e3:36:3a:75:bc:da:92:93:21:72:89:07:81:3c:85:5b:f7:
d3:ca:fe:64:67:2e:b0:f2:cd:c8:e9:e1:18:17:56:3d:e3:56:
a9:19:41:de:85:57:95:f4:ab:d7:5a:95:c6:9c:04:0d:77:2a:
f3:97:9c:a7:08:d4:48:c1:4c:59:b3:a2:fc:8c:13:a6:68:fd:
69:b4:3c:8f:bc:bd:7f:62:36:03:76:57:07:38:05:2c:36:fa:
b4:47:c9:f4:a0:ce:29:61:4d:4c:8a:6a:31:f0:34:01:c6:da:
03:0c:7b:8c:f0:68:d4:11:95:71:9d:ba:a3:fa:3b:97:6f:d8:
62:f0:b6:a2:19:f7:05:29:2b:26:d7:dc:88:08:31:50:c0:c6:
b7:87:c6:f4:de:d9:1c:6d:f1:69:c0:1a:55:2f:fc:bc:ca:c4:
38:d0:66:40:51:b5:e4:3b:e1:64:18:72:c9:f8:71:ea:89:98:
f8:06:77:36:53:e8:44:11:32:0f:19:d0:03:d3:48:cf:b7:58:
3f:4a:95:18:5d:65:79:bd:86:59:16:59:a0:c0:3f:d2:b8:0e:
26:26:ac:b1:bc:1a:73:f6:d1:8f:6d:4d:49:9a:59:58:a4:6f:
e7:e1:8f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:07:04 2025 by rpki-client