Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e3a0d989-223b-38c9-826f-389322697305.roa
File: e3a0d989-223b-38c9-826f-389322697305.roa (raw, json)
Hash identifier: oeG31yRnJwJf+5aWMca47hq1YgJAGDpd6hcWRCVtTb4=
Subject key identifier: 06:20:E5:53:ED:07:52:5E:9C:4D:86:6E:F7:39:BE:10:CB:F0:7F:F0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E9754A4C9246277C76E56B820
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e3a0d989-223b-38c9-826f-389322697305.roa
Signing time: Sat 16 Jul 2022 12:00:00 +0000
ROA not before: Sat 16 Jul 2022 12:00:00 +0000
ROA not after: Sun 21 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.124.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:97:54:a4:c9:24:62:77:c7:6e:56:b8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 16 12:00:00 2022 GMT
Not After : Aug 21 04:00:00 2022 GMT
Subject: CN=865509e2-92b8-4fe2-a5fb-4d99e2109c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:29:8c:25:52:0a:96:a9:c8:c2:78:1e:ab:69:
f0:f8:0c:6c:8a:df:d6:06:74:c5:6b:18:19:97:d0:
e6:2b:1f:24:21:fc:4c:81:ac:59:bc:7e:60:e0:a2:
15:47:16:89:72:9a:0d:81:7a:11:8d:5c:16:8d:c1:
69:69:79:8a:39:e8:04:1d:da:90:6e:0d:6e:10:0c:
2a:89:f0:d2:b9:85:6f:78:0f:51:32:d0:55:cf:6f:
9c:02:b5:12:a3:01:c2:ef:09:d9:7d:0f:4e:48:c4:
eb:c6:d8:18:3b:18:29:bf:83:c8:01:45:68:eb:d0:
29:e1:59:1e:e6:3f:02:04:40:31:ff:40:75:ca:2a:
31:69:3b:e8:9b:80:20:a7:63:aa:15:94:e1:b9:cb:
8f:da:48:eb:09:32:62:fa:7c:55:74:d6:fc:d2:86:
3c:b3:e4:3a:8a:b9:f4:ad:23:38:5f:31:f7:0e:23:
90:73:69:f5:9a:ee:1d:1e:b6:0e:eb:64:5b:6c:fb:
68:b7:89:43:37:c2:29:ac:72:8a:4a:6b:6a:6f:12:
f6:04:0b:3a:05:5a:a7:b3:80:39:7c:e5:36:eb:f1:
9a:f5:10:bb:2a:be:2c:d8:59:95:4b:58:44:c9:53:
dc:0d:19:dd:71:e9:0c:28:83:e4:49:a2:f1:df:8a:
8e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:20:E5:53:ED:07:52:5E:9C:4D:86:6E:F7:39:BE:10:CB:F0:7F:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e3a0d989-223b-38c9-826f-389322697305.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.124.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:40:52:a4:64:b0:1b:d5:32:1d:00:48:23:25:a7:5f:6a:f2:
12:d9:df:46:89:b8:20:60:08:40:88:53:c3:24:b1:35:ea:11:
30:bb:86:ab:1b:83:ef:92:89:47:11:14:d0:1a:d7:a1:e5:11:
0b:84:f3:7a:b9:a1:5b:78:51:0c:c7:69:bd:a6:68:bd:50:b5:
ad:67:47:76:81:1a:fe:80:78:7a:9b:80:19:a5:3f:e6:ec:b6:
a2:c9:43:3b:3e:88:b9:f5:68:4a:c9:cd:0f:49:88:b4:84:db:
bb:88:42:c9:d6:6d:b1:99:3f:4e:4f:4a:f5:01:16:42:43:e8:
06:58:96:22:ac:7e:88:2f:ab:fe:5d:0f:a6:12:11:4f:a0:45:
ba:c1:34:f0:8e:b8:b1:c7:6f:7f:46:1f:58:02:71:e8:eb:1c:
e4:80:d4:ea:25:07:7f:ad:5a:b7:0f:d0:5f:fb:fe:b5:43:a3:
26:0b:91:46:9e:bd:fa:31:aa:43:8b:80:a4:f5:34:91:d7:78:
21:b8:c9:10:13:14:69:64:cd:df:be:69:38:9d:e4:08:57:24:
9b:05:ac:1a:0a:5a:66:5b:57:91:b3:c7:a6:dc:a3:26:40:fe:
9d:9a:be:b8:00:16:e5:fc:fa:28:01:28:dd:f5:25:06:e5:d4:
6a:65:98:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:20:13 2025 by rpki-client