Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e339d962-9851-3a62-bcd5-91cb65cc8dfd.roa
File: e339d962-9851-3a62-bcd5-91cb65cc8dfd.roa (raw, json)
Hash identifier: MrcfanrLxfUjtmjnN/clXELuaLHv1dLgWN3c4MwIysk=
Subject key identifier: BB:E4:DB:EB:D6:5B:C3:FF:DA:F7:F8:15:83:65:BD:3E:E0:53:13:D1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C96174293C2D2CC65C8DA2EE0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e339d962-9851-3a62-bcd5-91cb65cc8dfd.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.163.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:17:42:93:c2:d2:cc:65:c8:da:2e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=1075adb1-5dd8-474b-ae13-8cca39db8f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f1:ac:42:75:db:5f:64:b0:d1:28:b9:13:c3:
ee:cf:2e:ca:99:73:53:f7:de:d2:40:1e:a8:44:f1:
82:3e:ca:f5:7e:47:c3:ab:9a:c4:b9:b9:63:a2:b3:
5d:36:b7:dd:37:b1:53:81:89:49:74:87:d2:4f:f5:
a6:3a:70:dc:8d:6e:ca:05:ef:34:d0:71:da:44:e6:
62:34:0f:11:16:43:0e:cc:e6:ff:12:27:e1:7f:cb:
a9:8c:fe:32:62:2b:a3:3d:35:ad:bb:6a:08:12:ee:
9f:dc:ab:9d:a3:a2:ae:2f:91:ca:72:24:b1:ca:05:
5a:78:8f:ff:cd:fc:3f:08:f1:ac:03:3f:4f:98:cb:
03:f9:71:b6:87:b2:ed:ec:3d:d4:72:4e:db:8b:ac:
eb:08:6b:bc:7a:49:ca:3e:b7:b3:ab:33:5b:e6:38:
5d:e7:69:13:e9:c3:45:f7:9c:5c:bf:00:fb:79:fe:
35:b0:82:64:7f:32:48:b2:29:f5:85:3a:28:a2:89:
20:36:9c:a6:70:2f:7f:a7:31:76:f0:3a:93:e6:ca:
48:f7:d9:d7:98:15:0b:74:8e:80:50:01:cf:97:a2:
b2:0a:33:f3:f4:13:3c:25:5b:3e:f2:0f:16:97:9a:
bc:55:d9:f4:e6:c5:b4:6b:21:89:8a:88:f2:70:83:
76:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E4:DB:EB:D6:5B:C3:FF:DA:F7:F8:15:83:65:BD:3E:E0:53:13:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e339d962-9851-3a62-bcd5-91cb65cc8dfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.163.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:dc:4a:1b:33:d2:6f:ab:a7:66:26:90:8d:ec:5d:3a:5b:2a:
eb:eb:71:96:14:08:20:90:4c:c1:60:13:4f:b5:a1:1d:1c:d6:
7f:ac:51:ca:bf:34:b4:a4:df:67:bf:bb:ab:6c:d9:e6:91:b6:
bc:3a:a4:b7:61:73:c8:2a:42:de:9c:de:e8:64:5f:54:7e:94:
b8:d7:86:0d:c9:43:90:96:9c:20:00:42:56:85:b8:7c:d2:b8:
ed:64:66:8c:d4:27:79:56:29:27:c2:82:c7:30:91:c0:ff:ba:
b2:11:f7:85:cd:9a:3c:9b:bc:9f:e3:ee:de:07:df:e3:b8:98:
50:e6:8b:0c:f7:f0:2b:7c:fa:61:8c:72:98:75:2e:16:23:98:
49:13:bc:dd:3c:24:8c:2e:eb:1a:5a:a1:9d:85:23:46:23:55:
66:a4:56:54:f0:02:7b:9c:5f:dc:ee:dd:d1:ca:ab:77:7f:e1:
5c:68:17:5b:12:03:38:55:6b:64:58:9a:1d:bd:e0:9a:0f:c1:
7e:45:0d:26:33:4c:af:54:f9:42:48:1e:97:eb:5d:c5:7b:a4:
40:06:3c:fd:38:95:67:e9:66:03:2b:21:b7:34:4e:8a:82:b4:
13:6e:ee:40:35:9e:2c:d8:01:c9:cd:f6:4d:21:b9:16:a8:e3:
3a:fa:46:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:07:25 2025 by rpki-client