Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/de4c81b9-bb91-32f0-93e4-e54d1bdcc3ef.roa
File: de4c81b9-bb91-32f0-93e4-e54d1bdcc3ef.roa (raw, json)
Hash identifier: kZuorHCI6QgbH3IAW2+lNovWZGKdhMdpML166pkey4o=
Subject key identifier: 17:D1:3E:16:8B:17:5C:7A:3C:19:D3:7A:C5:5C:01:53:C5:19:13:D1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE5E7D350A2DDFD41732390D3
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/de4c81b9-bb91-32f0-93e4-e54d1bdcc3ef.roa
Signing time: Sat 13 Aug 2022 12:00:00 +0000
ROA not before: Sat 13 Aug 2022 12:00:00 +0000
ROA not after: Sun 18 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.58.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e5:e7:d3:50:a2:dd:fd:41:73:23:90:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 13 12:00:00 2022 GMT
Not After : Sep 18 04:00:00 2022 GMT
Subject: CN=7667a76f-e246-4ac5-af8e-68e631773dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:81:9f:ea:4b:a8:c4:be:ae:1c:de:c6:4a:
9b:79:91:18:db:0a:f8:4f:43:b2:81:33:8b:b8:b7:
77:cf:16:53:b8:c5:6e:60:1b:de:75:7a:94:82:62:
f5:eb:9e:09:74:f8:3b:f3:a1:bc:9e:e0:fc:44:95:
79:da:c9:e7:04:df:ad:7e:c7:42:01:67:73:46:48:
2d:5d:d4:c6:9a:21:15:0f:b2:ef:35:c1:37:48:05:
19:56:eb:15:4c:ac:95:7a:4e:97:d9:d4:b0:89:f6:
19:37:05:fe:55:67:43:90:ae:1e:7f:d6:fb:f7:ec:
bd:5d:34:8e:74:52:1e:2a:b6:c1:86:f3:d9:0a:57:
a0:77:31:1d:a0:81:bc:25:d6:61:33:f9:7d:64:3a:
5e:f2:aa:aa:86:a2:27:05:5b:b9:e7:09:b4:2d:57:
03:1d:4f:a5:60:eb:66:6e:0e:f9:ec:5d:b5:bf:08:
1d:f1:e8:0d:d8:67:0c:bc:15:7c:24:3b:e2:e6:e6:
7a:36:d6:11:8d:0b:ae:83:ac:e9:c1:ae:ff:b7:42:
80:6f:19:9d:b7:3b:bc:d9:12:48:3d:6f:8b:50:6b:
24:47:3a:ca:e2:1f:7e:5c:e8:83:6a:8d:b9:90:7b:
35:04:9c:7c:6d:39:8a:53:73:da:07:b1:e3:92:d2:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D1:3E:16:8B:17:5C:7A:3C:19:D3:7A:C5:5C:01:53:C5:19:13:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/de4c81b9-bb91-32f0-93e4-e54d1bdcc3ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.58.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:dd:91:b0:da:31:1d:e7:da:b5:7e:40:a5:ea:f5:c4:bb:85:
38:30:3c:4b:f2:23:2c:3c:2f:44:12:0a:51:a3:62:6f:ea:36:
7e:7d:65:74:f1:ca:dd:e7:82:d4:67:49:c6:7a:f7:6a:87:7b:
e3:05:88:e3:2e:0d:8d:b3:ce:2f:27:b3:41:e6:a0:fb:aa:39:
b8:45:53:18:c8:15:50:a1:5a:a6:19:8c:33:09:a4:da:64:60:
d2:b0:49:78:59:c8:3e:dd:15:31:fe:f4:74:53:b7:ee:b8:e7:
7d:13:ba:92:1b:73:a4:25:a1:ce:d1:e3:54:d3:52:5a:18:56:
94:2e:7b:03:fb:0f:e3:c4:30:60:9e:57:24:7b:86:5e:50:f2:
8a:ef:cd:b9:6d:cb:81:ff:51:bd:18:5b:82:2d:e4:a9:a5:24:
bd:6a:12:78:7e:be:9f:e2:ab:86:e3:66:94:62:2a:e2:a2:54:
e7:f2:87:cf:f9:66:6b:d1:45:ae:9f:85:83:ce:66:bb:8f:be:
02:be:7d:82:01:f0:21:74:a0:07:e7:97:5c:ce:d0:a0:49:60:
f0:a7:3d:ca:cd:aa:ca:83:c9:d8:1d:1d:26:65:f1:17:45:01:
cd:53:51:51:6f:a1:0d:a6:ab:e5:08:d3:97:6c:65:49:66:59:
67:76:5e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:56:35 2025 by rpki-client