Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e3e9e612-0e80-3f53-8937-6b2a7e1f98d4.roa
File: e3e9e612-0e80-3f53-8937-6b2a7e1f98d4.roa (raw, json)
Hash identifier: 9vMGx1C0YjARptK0AjTplTEdfUFUawcsuIPsAqqG294=
Subject key identifier: C0:E6:A6:3A:50:E7:16:87:EB:40:DF:91:D3:28:A2:B3:DA:C2:54:87
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E1D1365B08D5730A7ACE6CA80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e3e9e612-0e80-3f53-8937-6b2a7e1f98d4.roa
Signing time: Thu 02 Jun 2022 12:00:00 +0000
ROA not before: Thu 02 Jun 2022 12:00:00 +0000
ROA not after: Fri 08 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.93.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1d:13:65:b0:8d:57:30:a7:ac:e6:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 2 12:00:00 2022 GMT
Not After : Jul 8 04:00:00 2022 GMT
Subject: CN=dd389f1f-eb88-4ad4-9db6-fa7911a731bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:c2:d9:e1:5c:72:a3:94:98:63:6b:70:4d:
6c:10:07:1c:5c:3f:41:b4:8a:46:36:f2:d0:bd:5c:
1b:97:3a:e1:1d:c9:7d:13:ec:dd:ef:d0:b3:93:57:
68:34:bf:ff:61:1b:27:fd:6a:fa:89:f0:64:61:f0:
00:5f:aa:6d:4e:16:b2:93:ee:27:52:42:e8:75:8b:
7b:08:76:ed:d8:ae:5c:a5:82:8c:e4:8f:51:1a:6c:
5b:c0:ea:70:09:71:9a:84:30:de:57:b1:27:3a:1e:
8a:23:73:4a:90:d8:8a:5d:dc:46:b2:a4:2c:47:62:
26:70:db:15:1c:91:c3:bb:3b:4a:c3:50:62:ff:5b:
a8:c3:dc:10:41:f9:59:e0:2c:87:63:d9:db:cc:1d:
0b:dd:13:db:bd:4c:c6:8d:8c:85:59:2a:86:a3:c6:
17:ea:d7:58:1e:ca:1f:45:a2:66:76:bf:22:53:b8:
1e:b1:fe:a5:f4:3b:de:d4:ac:ed:34:d7:d3:bc:bb:
05:16:3d:28:06:e6:ca:ce:ed:6d:ca:cc:4c:e5:18:
e9:ed:58:80:3b:48:09:f8:63:08:07:7d:b2:b6:96:
14:9c:fc:0a:25:b5:71:a0:0f:d6:48:94:89:64:d2:
86:b8:c3:ee:88:94:45:f5:91:33:ef:c7:af:79:2f:
11:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E6:A6:3A:50:E7:16:87:EB:40:DF:91:D3:28:A2:B3:DA:C2:54:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e3e9e612-0e80-3f53-8937-6b2a7e1f98d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.93.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:64:01:56:f8:21:53:65:dc:a3:95:f3:84:15:20:e3:89:87:
08:f7:1b:20:8f:a0:3f:8f:de:02:45:98:6d:23:c4:30:ce:a3:
98:0d:e8:07:c7:6c:e8:ff:03:1c:78:f4:44:86:bd:04:ae:bd:
b8:30:9d:e8:2c:10:43:94:37:aa:4d:ec:0c:7a:b6:57:cd:01:
1a:96:bf:17:69:16:43:26:64:0e:fd:a1:1d:6e:25:79:ff:4f:
45:7d:e2:bc:40:b9:59:5f:00:2c:6f:00:d9:a1:f2:9f:84:cd:
c2:d1:8d:3d:cb:30:bc:1b:33:c9:35:9e:6a:09:e9:1e:60:60:
68:cf:fa:26:f3:a4:a1:3c:0a:3d:b8:85:77:07:17:94:db:1a:
fc:84:e7:ec:a9:17:58:bc:25:2f:f5:a6:94:38:6e:8c:57:ce:
54:40:5b:5d:5c:bb:04:5c:08:4e:3d:2c:7a:a6:b5:79:0b:ff:
f0:cf:76:89:fe:19:e5:a8:ce:91:aa:a5:88:0f:a3:6d:8c:1b:
b9:48:49:ed:74:17:0b:ec:84:45:a9:5d:f7:99:c2:a0:7b:e0:
4d:1e:24:5c:fc:72:6a:f6:ed:1d:bc:46:63:46:02:fc:77:f9:
ee:b2:41:98:ce:f0:de:b1:6a:fc:9a:11:2d:f7:74:1e:8c:c5:
7a:e3:46:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:15:36 2025 by rpki-client