Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dfc43abe-bde4-3955-86e2-a39493bff354.roa
File: dfc43abe-bde4-3955-86e2-a39493bff354.roa (raw, json)
Hash identifier: /+QHR1Gx8ZdVk/sDUUlLknLZRRuWHjO0zk9+0ZoWzrY=
Subject key identifier: D2:D8:E6:87:23:94:74:C3:48:EC:65:00:E5:D6:7A:6D:48:4C:01:E3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B327ED5FDD140C836C81800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dfc43abe-bde4-3955-86e2-a39493bff354.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.86.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:32:7e:d5:fd:d1:40:c8:36:c8:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=cf365411-50a4-4486-b57b-09a283992ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a0:04:50:01:88:86:eb:3e:a0:32:c8:71:47:
dc:37:ca:7f:f8:28:49:3e:af:c8:ed:a2:05:96:96:
d0:54:58:17:7a:3b:a1:6c:2b:b4:b5:31:e2:35:f6:
1c:f6:ee:49:72:59:c8:69:6b:7c:a7:a3:48:87:2a:
b1:12:63:cd:2f:bd:52:e7:50:27:d4:73:15:1e:05:
bc:57:f8:9d:d5:b6:0e:2b:bf:96:61:54:0e:d7:f1:
5c:f2:8e:f3:ae:9c:b6:04:6b:f4:2a:50:0d:86:c4:
16:ab:37:8d:e5:18:c1:28:0c:00:69:95:86:7d:15:
cc:76:03:16:2e:24:6a:0b:5d:64:6b:cd:0f:9e:2d:
a9:2f:5a:e8:43:8f:0d:16:94:25:14:10:a4:ba:ca:
49:11:b3:0b:92:68:ec:cf:40:40:bb:a6:e3:14:f1:
d8:e6:c7:5f:0c:12:7b:e1:b5:a5:02:5a:8f:19:6b:
aa:48:47:79:e6:cd:0f:17:b7:4d:99:36:fc:8c:52:
33:98:e2:ed:59:65:df:bc:63:a9:06:36:23:d6:db:
ef:c3:12:7d:9c:69:ef:d8:86:f5:76:9b:77:f9:46:
b4:14:3a:b7:d6:66:c6:a5:58:9b:41:5a:d6:e6:34:
ea:d6:ae:ac:ed:a1:ae:91:f7:a2:3b:f3:30:78:42:
c9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D8:E6:87:23:94:74:C3:48:EC:65:00:E5:D6:7A:6D:48:4C:01:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dfc43abe-bde4-3955-86e2-a39493bff354.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:4f:15:07:31:66:79:ff:6a:aa:3c:fc:94:50:fd:ec:02:18:
59:81:b6:93:17:95:f8:e8:5f:39:a0:d3:50:9c:ca:9e:80:66:
f4:a4:df:8b:ec:75:82:74:a6:20:3b:c1:52:59:f3:3c:5d:1f:
0b:d3:22:41:6b:6e:ab:c5:2f:a2:09:2c:7f:40:20:e7:b6:9d:
42:88:6a:d1:92:70:55:74:da:46:ab:07:71:97:82:01:42:bf:
0d:17:e8:f4:14:d7:4e:ce:10:5d:ab:72:2f:a4:9e:62:f6:89:
03:cf:bb:d6:ab:09:3a:b5:6a:a1:9d:58:96:0b:8d:23:3a:e6:
39:0c:c8:d4:07:5b:ce:11:4b:f3:9d:96:68:54:4d:28:b4:70:
b6:7c:e3:05:3d:46:c4:91:14:20:7a:ba:30:d0:56:be:dc:cb:
02:ed:82:d7:56:f8:cf:be:7d:04:4d:38:db:b6:0e:a4:3c:26:
26:c9:2f:4a:6c:41:cd:58:57:ec:8c:11:61:1f:24:c1:ac:5a:
20:c6:a3:fe:b0:95:71:99:07:0f:c7:a9:7d:61:08:43:96:ae:
e2:3b:2b:0a:73:0a:b7:ff:38:9a:6e:e5:43:27:2a:a8:9d:48:
ab:b6:f0:04:f4:03:85:8b:74:5a:86:72:21:98:00:1d:f5:30:
ef:26:19:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:43:02 2025 by rpki-client