Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e3f33ca5-4bd6-3f0b-ab35-69136b5e1b1a.roa
File: e3f33ca5-4bd6-3f0b-ab35-69136b5e1b1a.roa (raw, json)
Hash identifier: Rqqz/sFpoRIABB2leRXO3gZNU1Aal5znB5J8j4DE7O0=
Subject key identifier: CA:35:38:96:53:C6:4F:22:58:DB:4C:73:75:68:62:3C:D1:61:23:C1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C961DDEEE9A5945E240D5E47C
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e3f33ca5-4bd6-3f0b-ab35-69136b5e1b1a.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.183.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:1d:de:ee:9a:59:45:e2:40:d5:e4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=9e4a3f09-953e-4f94-a45e-45d828a8488e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:2c:3c:0f:57:c8:43:8d:76:49:71:d9:03:
85:88:eb:ad:a8:9a:ca:af:1c:66:08:62:64:fc:06:
cd:a4:a7:de:bc:d1:9b:66:9e:6a:70:8c:2e:e0:5a:
ae:04:67:b2:ae:67:33:00:95:68:a7:55:bb:61:eb:
33:d4:18:b3:7e:0a:91:4d:52:64:43:3a:10:25:fb:
4e:32:9c:4e:5d:0a:9b:f5:11:07:67:76:61:78:d8:
89:12:c6:5d:de:45:1a:ae:a5:22:3b:aa:4e:52:2d:
c7:a1:27:05:57:87:cc:79:cb:a1:88:35:45:d5:32:
8f:34:7c:e4:1b:66:9f:8d:25:8d:68:8d:92:57:08:
e6:35:09:8f:88:76:69:e3:89:7d:e8:bb:73:b0:8f:
2b:2e:fe:5e:30:64:49:9b:77:72:1c:cf:49:8c:d9:
17:5a:f2:a4:09:ef:37:26:49:57:ca:f8:0e:da:73:
28:0c:21:ac:db:f3:b7:7d:94:8d:c9:8f:f8:5a:50:
c0:c5:32:bc:48:58:36:bd:78:b9:74:14:96:9f:45:
8b:14:ef:75:a5:72:8b:34:f8:16:7d:91:1c:a4:76:
4c:46:80:1d:ee:66:b3:77:9f:03:e6:92:56:ce:f9:
61:91:bc:9d:4b:4d:3d:23:da:48:96:b8:9d:e2:75:
e1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:35:38:96:53:C6:4F:22:58:DB:4C:73:75:68:62:3C:D1:61:23:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e3f33ca5-4bd6-3f0b-ab35-69136b5e1b1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.183.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:e7:b2:69:33:cc:88:e3:54:0f:c7:b5:f7:2d:14:9f:cb:a9:
e2:c4:24:d7:a6:e2:d0:6a:2a:8e:ec:fb:07:ac:2f:f5:02:7a:
91:b3:ae:78:29:64:d5:29:96:5f:62:73:20:4a:02:af:53:66:
9b:e4:d8:c5:7c:86:5e:c3:8d:0a:8e:02:eb:b0:89:6a:89:f9:
53:1d:3f:72:3e:33:a7:f4:6c:7e:75:c1:0e:f3:37:b8:df:e6:
5a:f8:15:ab:16:0c:8d:88:fe:8b:ca:98:6b:ee:ab:3c:9a:54:
81:1d:00:fb:de:07:ed:d3:c9:d0:60:ad:d5:9f:b0:04:d4:ad:
2f:41:9a:f6:b9:31:4d:7b:0c:52:65:b6:90:6b:f2:6f:54:5f:
ef:00:6e:fa:19:3f:da:62:e0:3d:f9:f5:77:f0:eb:f8:2e:f4:
5d:78:61:8f:28:fe:97:2f:e4:0d:c9:7c:5d:65:7e:a5:c7:6e:
7b:f2:f5:e1:da:5c:57:1e:fb:be:43:32:14:59:3d:70:1b:7f:
38:95:85:a0:f3:4a:41:00:32:20:64:35:b7:0d:7e:0b:18:44:
75:df:da:d3:ee:7a:17:c8:5a:f3:61:5a:84:67:12:8e:57:7f:
4f:90:bd:54:df:10:04:6f:60:14:bc:0a:cc:f9:80:ef:1a:bd:
d5:e5:73:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:54:34 2025 by rpki-client