Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e2180a0d-b2dc-3f3a-accd-bbc38cabf8dc.roa
File: e2180a0d-b2dc-3f3a-accd-bbc38cabf8dc.roa (raw, json)
Hash identifier: fggA6wR2U9f33bGpDUe1LvAzB35/+eJJIVHacEQb/Gg=
Subject key identifier: 12:1A:6F:48:7C:D7:65:D2:AF:C8:03:23:BF:D4:0B:72:61:BF:51:20
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E70732387FC7FF7EF2F7DEB40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e2180a0d-b2dc-3f3a-accd-bbc38cabf8dc.roa
Signing time: Sat 02 Jul 2022 12:00:00 +0000
ROA not before: Sat 02 Jul 2022 12:00:00 +0000
ROA not after: Sun 07 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.86.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:70:73:23:87:fc:7f:f7:ef:2f:7d:eb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 2 12:00:00 2022 GMT
Not After : Aug 7 04:00:00 2022 GMT
Subject: CN=e423c595-8d89-4c5e-a310-1fd58582f7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:53:74:ea:f7:9a:1a:a0:f9:1c:19:18:4b:99:
37:ec:06:34:36:cf:e3:8a:56:78:6f:20:ea:10:a8:
4f:81:f8:1f:f4:e0:db:a8:09:ca:0b:55:61:81:f4:
2d:a7:0a:45:08:12:b6:3a:d6:a1:2f:7f:67:6e:4a:
f5:5f:81:b1:8e:5f:00:4d:3d:6c:90:2a:e1:1e:db:
31:1b:08:91:a3:63:08:8f:d0:1f:f9:b4:18:70:b1:
a6:2e:2f:82:7c:a6:ed:b5:a4:38:37:0f:7f:0e:ea:
cc:16:73:d4:a9:52:42:6b:16:31:22:13:1d:c1:24:
d8:96:fa:5f:0c:99:4e:87:b9:1c:35:47:a5:ca:e0:
d0:1c:23:00:36:2a:d9:fc:ec:cc:7e:36:3c:95:c8:
75:48:02:43:96:9b:88:b4:f2:2e:ee:4a:dc:72:86:
7a:80:c6:47:53:6e:52:be:d8:60:34:f3:37:ba:13:
35:d7:85:c8:2b:02:52:1c:3e:7b:84:e9:ac:20:5e:
57:87:70:bb:52:3b:f3:59:ab:c8:37:e2:3c:6c:4f:
eb:8e:67:cd:f2:5a:6d:ba:80:f6:c3:ec:f6:bc:6a:
ef:45:e5:d0:0c:b4:5b:e1:86:fe:bc:95:8f:c3:7e:
f6:23:12:fd:d3:ce:9a:5e:c2:0c:6e:55:7b:89:0e:
76:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1A:6F:48:7C:D7:65:D2:AF:C8:03:23:BF:D4:0B:72:61:BF:51:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e2180a0d-b2dc-3f3a-accd-bbc38cabf8dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:09:b4:c0:df:f6:14:64:7d:32:61:ed:6a:bd:56:14:be:e2:
78:d6:5b:89:6c:19:2e:5f:40:1c:66:5b:51:da:51:ed:a3:1d:
33:76:6a:b1:86:89:f5:a0:07:3b:f6:71:de:7f:2b:fd:34:e6:
dc:34:d7:ac:09:59:52:8c:3b:40:73:9a:19:8e:60:15:56:2a:
06:c1:e6:d7:0f:fc:66:d7:bf:ec:1a:0c:bd:ff:22:8c:20:8a:
c1:d6:59:33:f9:71:0a:ff:90:91:04:46:59:df:db:25:a3:95:
98:d4:d6:e1:be:f3:71:dc:d7:6e:cc:ae:90:09:73:48:27:51:
55:af:d2:13:20:9e:9b:c6:c6:37:16:f1:fd:7f:57:48:e4:ed:
62:5c:32:45:4f:ae:4b:47:20:c7:f2:b4:6c:68:3e:4d:dc:6f:
ac:67:27:9a:8d:d8:a8:f0:c5:1a:be:9d:36:03:f7:21:0c:0d:
f4:86:09:51:55:94:df:b9:b0:77:f8:8c:96:32:17:7c:4e:b3:
35:ac:0c:63:8b:03:33:48:7f:a9:c2:e3:26:fe:66:c9:37:bf:
5a:89:6b:14:d4:43:96:3b:c1:9e:44:87:77:c4:1a:74:74:60:
32:33:45:d0:93:2d:06:ea:cf:ce:20:11:ce:b9:bc:1d:37:85:
f3:47:99:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:12:25 2025 by rpki-client