Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dd1ec808-1849-331e-9682-4234c400e4c1.roa
File: dd1ec808-1849-331e-9682-4234c400e4c1.roa (raw, json)
Hash identifier: PtVQJiOOTcMevMmqLgTjA+a31a0JBQdOqkzsqJBKJdM=
Subject key identifier: 3D:E1:9A:F9:57:DB:38:FE:03:9A:CA:D2:30:9C:C0:86:6A:07:37:77
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0C16A0CE20EC0D94B9053D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dd1ec808-1849-331e-9682-4234c400e4c1.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.194.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0c:16:a0:ce:20:ec:0d:94:b9:05:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=3b25589e-380a-4998-b850-ca4d0b701901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:a0:c1:4c:13:1d:4b:a1:76:ff:49:65:c7:
8f:37:16:a2:52:7b:eb:b9:cb:2a:1b:7b:1d:eb:0a:
25:7c:4d:6a:21:e0:aa:6c:59:68:92:2a:93:16:20:
60:3b:f1:b8:de:89:b7:24:80:11:a7:00:54:42:75:
5f:b8:58:9b:64:fc:00:cb:85:bd:60:d7:63:21:bb:
dd:a7:36:6f:cf:d2:31:07:16:a4:8b:c4:53:51:10:
4b:46:66:16:d6:7d:df:a7:c3:10:63:31:ed:c7:db:
e5:10:ca:75:aa:52:40:9a:6d:cb:4e:ce:2d:28:4a:
52:ef:71:ab:53:6c:10:05:10:fc:2f:40:e6:11:0a:
f7:26:0a:c1:51:72:46:79:d6:00:57:07:02:d0:f1:
d6:8a:01:05:5d:59:33:de:2b:ec:78:00:ea:18:99:
48:6e:dd:d0:06:b3:96:32:69:0e:42:19:fd:a3:44:
dd:84:b2:5f:25:e6:1f:5d:9a:2f:f9:06:ba:0a:ed:
00:d7:f6:0a:8a:cc:07:57:74:48:8c:23:20:74:62:
ed:59:4e:13:04:e4:c3:4d:40:01:4c:33:40:48:f3:
c0:be:53:4b:14:fa:42:2a:ef:f8:d0:95:95:86:0d:
33:25:6f:a2:c6:41:5a:b4:0b:27:dd:87:22:7a:8c:
20:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E1:9A:F9:57:DB:38:FE:03:9A:CA:D2:30:9C:C0:86:6A:07:37:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dd1ec808-1849-331e-9682-4234c400e4c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.194.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:cc:d9:01:51:ff:1d:cc:c2:bb:76:01:9f:c7:77:98:1a:68:
d1:79:86:e6:e5:67:4b:5f:db:bf:cc:1b:c8:d1:fe:b8:44:cb:
c4:8f:b3:d4:1c:b3:15:3c:6b:7d:c0:68:46:f6:55:7a:de:72:
7b:0b:09:da:1f:a9:63:99:61:f5:34:91:3c:c2:0b:92:40:0c:
12:81:0b:e6:97:6c:1f:5d:f1:22:93:dd:8a:9d:0f:da:2d:d3:
2d:07:3f:14:15:06:0c:77:ec:b4:4a:33:85:5d:cf:49:68:ae:
0b:70:8f:7f:6b:69:ce:ac:a4:fd:5f:a8:f9:6f:4a:f3:9d:04:
18:f6:32:87:d0:e9:1b:b3:38:5f:24:45:f7:b3:62:e8:8f:0c:
9a:b2:52:36:c1:dc:1f:e4:7e:13:58:48:bf:2b:87:1d:7a:cd:
48:de:d0:5f:80:bd:13:b6:b6:5e:73:21:d9:75:d9:fd:b1:c0:
53:b8:24:c8:e9:a9:cf:95:a4:58:3d:67:a8:25:b2:5e:0c:fa:
8c:67:9e:1e:ab:d8:c7:df:37:7f:06:e5:e9:ec:ef:03:19:27:
d3:ad:1a:90:25:bf:63:d4:34:60:c5:b4:c8:70:b6:7d:f4:f9:
81:8f:0d:39:ab:00:39:98:50:c9:da:ff:da:b5:0e:76:7e:ef:
c9:4e:b7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:06:11 2025 by rpki-client