Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e7b54b06-675e-3368-a8f3-6f0635817c68.roa
File: e7b54b06-675e-3368-a8f3-6f0635817c68.roa (raw, json)
Hash identifier: s5ukcrjgZOxqObBDLbLb8RcMuIH4gz1YiZS/q7lsMko=
Subject key identifier: EA:54:FD:1C:B6:C4:BF:7D:67:8C:43:2E:81:B4:4E:8B:EC:F0:1C:79
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6ED4900037209D9361E63B30
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e7b54b06-675e-3368-a8f3-6f0635817c68.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.95.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6e:d4:90:00:37:20:9d:93:61:e6:3b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=fcbe3012-e2e6-4bec-9e46-f58960dd25b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:15:43:4b:6d:61:0f:72:a8:4c:ec:51:d8:68:
9b:06:bc:13:bc:ea:08:5f:53:2e:0e:ad:bf:dc:e1:
64:cd:d5:0a:87:d7:aa:52:6f:d4:db:da:57:f4:a0:
4a:01:dc:42:30:8c:f7:b1:83:6a:47:4d:c2:77:cf:
44:d0:7a:59:b7:1c:20:00:93:ae:ea:f8:07:b5:de:
1b:c6:2a:56:c5:dd:98:5e:ae:69:d9:0a:42:69:a8:
fe:84:cf:95:b6:9e:13:29:0a:a6:b7:54:46:00:2a:
d1:cb:c8:4d:b8:de:65:24:a0:69:35:6a:80:2e:88:
24:3d:47:af:66:4f:bd:bb:ce:82:63:57:b3:c6:eb:
3e:ac:1a:5d:e2:a2:13:41:6a:55:1e:83:29:f6:d2:
a5:d7:1b:d7:7f:38:6c:87:79:ea:c4:32:09:09:41:
f4:4b:bc:6c:3c:30:b1:df:47:56:d7:f3:44:88:41:
d2:64:e0:e9:5d:8d:fa:0b:f0:20:38:1f:e1:21:96:
35:2d:b4:7f:b5:08:a8:0b:cb:83:db:f1:01:d9:64:
b6:1d:97:57:96:2e:29:8b:cc:06:70:ed:93:9b:f8:
7a:b7:c4:07:6d:95:68:03:d2:34:59:81:53:80:75:
1f:1b:ca:a9:74:03:7d:25:33:92:b6:bb:0f:8a:dc:
32:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:54:FD:1C:B6:C4:BF:7D:67:8C:43:2E:81:B4:4E:8B:EC:F0:1C:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e7b54b06-675e-3368-a8f3-6f0635817c68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.95.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:36:79:48:08:d7:84:d0:b5:8a:fc:4c:8f:e2:28:b5:88:ee:
b4:e9:83:f9:a3:39:93:2f:99:7f:00:ef:93:83:72:00:2c:c0:
aa:83:9a:a6:2b:d2:75:01:7f:64:3a:8c:9a:07:72:b0:a1:70:
fc:07:63:7a:dc:e8:a9:af:d8:27:1e:5f:78:65:c3:76:42:cf:
b7:38:8a:53:01:91:f3:ab:6d:38:ba:f7:30:d5:94:f6:ba:de:
51:74:ab:1d:95:3d:ad:b0:9a:e2:28:87:88:cc:70:f1:cb:c6:
7d:ea:6f:c3:17:0c:31:fa:96:d4:89:d8:23:f1:41:3f:d9:76:
16:35:4c:d9:bb:9f:9a:fd:c4:f3:ed:d2:f8:d4:f0:44:1f:d0:
ca:fa:77:42:9c:08:df:f6:23:e4:08:09:b7:c8:26:09:ad:9f:
9f:72:e6:7c:e0:c8:f8:44:85:ae:42:13:30:d4:6a:19:10:2e:
69:49:0a:96:12:49:59:98:f6:8b:00:03:58:70:b0:0a:49:20:
e4:a2:5e:20:6f:2d:88:1e:23:36:c5:d7:3c:96:76:87:21:e6:
53:09:50:13:a6:1d:91:ac:e4:33:8c:c8:34:60:0c:db:17:5f:
a5:57:5f:e8:78:e7:af:f1:8d:79:e8:d6:0d:b3:95:21:7c:3e:
a0:24:f0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:07:41 2025 by rpki-client