Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e0392c9d-f8a4-3346-8e64-d77b32bf73b7.roa
File: e0392c9d-f8a4-3346-8e64-d77b32bf73b7.roa (raw, json)
Hash identifier: c+690OtLQyW6TTsmhzAEEb0+9R6Y44EpVh1SPi8lbq4=
Subject key identifier: 73:FC:DB:08:AB:63:12:58:73:9C:64:23:96:AD:0B:C4:C5:D3:0E:66
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6B2842CD7CDE3A22918B1F40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e0392c9d-f8a4-3346-8e64-d77b32bf73b7.roa
Signing time: Thu 30 Jun 2022 12:00:00 +0000
ROA not before: Thu 30 Jun 2022 12:00:00 +0000
ROA not after: Fri 05 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.32.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6b:28:42:cd:7c:de:3a:22:91:8b:1f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 30 12:00:00 2022 GMT
Not After : Aug 5 04:00:00 2022 GMT
Subject: CN=6cc01f69-cd06-404b-8f2d-c2dec55784b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:12:16:f5:b4:d0:61:62:9b:f4:f1:b7:f8:3e:
97:8d:c5:58:03:62:42:68:5f:89:04:3f:e7:e6:ad:
d0:04:59:b4:c6:6a:a0:48:51:12:83:f5:45:de:7b:
bd:9d:83:ed:24:d1:19:ba:e2:24:c6:2f:64:17:9f:
c8:ab:fa:b9:af:91:24:96:8a:e6:8a:62:35:05:f4:
79:a0:6b:07:82:46:c9:e3:61:4e:1e:27:98:ef:d0:
09:1a:a7:49:fe:7c:67:dd:37:42:cd:94:85:ea:1f:
73:1f:04:22:92:d9:ed:58:1d:7a:10:e4:a6:f4:fd:
40:0d:bd:58:27:47:1f:93:88:0f:91:e6:0d:b9:f0:
fe:56:99:7e:44:a9:52:c6:b6:48:34:64:8b:e5:f8:
90:b4:6c:7f:f6:f9:b5:57:74:81:ed:96:d6:f7:ea:
e6:63:43:42:e2:47:9b:6d:d1:7a:9a:18:cc:f7:16:
96:0f:28:bf:74:bd:64:67:a7:09:ee:b9:10:89:bb:
a2:9e:60:78:56:ac:14:d7:48:a6:2e:8a:20:06:f6:
38:5e:30:4d:2e:c2:d7:fb:97:7d:ee:b6:5f:64:05:
38:12:b4:1c:2d:fc:d6:1b:2f:5f:91:e5:0f:0e:95:
b3:42:0e:65:40:b9:ce:8d:0f:c6:c1:4f:69:84:47:
28:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FC:DB:08:AB:63:12:58:73:9C:64:23:96:AD:0B:C4:C5:D3:0E:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e0392c9d-f8a4-3346-8e64-d77b32bf73b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.32.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:fb:1f:8b:a8:cf:1c:b2:74:47:8e:c3:86:9b:c4:6a:46:b5:
dd:ac:e9:4a:30:da:a3:07:6f:74:5a:8d:6c:55:53:5e:d2:ec:
30:1c:a7:b5:e9:c5:a8:48:a9:dd:66:7e:25:ef:bc:fb:d1:5f:
54:81:34:3f:61:ae:8e:2f:9d:7a:d9:5e:d0:c9:be:2d:5d:54:
fd:aa:71:61:11:e1:2a:69:bd:33:c0:12:f6:03:b1:4e:64:39:
1b:9b:32:7b:55:56:3d:4a:74:4a:c2:c7:02:7e:21:dc:dc:ef:
e3:70:02:23:02:73:76:93:81:b3:39:98:d4:fa:50:f9:f6:7d:
ff:bc:55:4f:04:e8:de:de:e6:de:d8:40:49:81:da:38:2f:6a:
30:22:b2:2f:ff:fd:35:54:47:7e:f0:26:10:6d:58:b0:16:a8:
7d:2e:63:07:5e:6b:5c:8a:20:5b:ac:ad:a2:c7:c1:72:4b:ab:
73:e6:2d:34:41:2f:27:51:10:40:2a:1f:19:94:a7:9f:ab:1b:
2d:be:d6:41:df:a7:10:94:58:9b:bc:88:d8:b9:ae:33:96:f2:
08:bb:08:52:4c:84:a7:4d:30:08:11:86:09:a7:a0:8c:bd:37:
26:0e:2e:6e:3f:1c:c9:b3:4a:59:f9:1f:82:e2:9b:82:64:5b:
a0:cf:07:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:49:39 2025 by rpki-client