Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8040e05-2a40-3768-b2ad-fd64fa42f55a.roa
File: e8040e05-2a40-3768-b2ad-fd64fa42f55a.roa (raw, json)
Hash identifier: tGlc5vAL6P4GvwfGs7THx8ZiQjvinLlFF0f4SgjB278=
Subject key identifier: 35:12:26:65:E7:53:F8:E3:66:DD:A4:CA:5F:A4:94:01:A3:3A:FE:4E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E218DBF8D2E0FF8E6FF985C00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8040e05-2a40-3768-b2ad-fd64fa42f55a.roa
Signing time: Fri 03 Jun 2022 12:00:00 +0000
ROA not before: Fri 03 Jun 2022 12:00:00 +0000
ROA not after: Sat 09 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.179.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:21:8d:bf:8d:2e:0f:f8:e6:ff:98:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 3 12:00:00 2022 GMT
Not After : Jul 9 04:00:00 2022 GMT
Subject: CN=7fd313f7-46fa-458f-b820-c615935c131c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2e:b2:42:e4:98:53:98:f5:80:11:f4:3a:6e:
ec:8b:4c:2b:8e:40:35:b1:3d:71:92:6a:fe:b8:4d:
da:2a:b3:2a:98:6d:bd:f5:d6:5a:80:82:a2:56:dc:
c8:bd:84:b0:76:d0:3e:ab:5f:e5:e9:08:1e:02:bb:
20:5d:5e:d5:7d:8d:2b:f2:a4:4c:46:5d:65:fb:32:
ce:fa:9b:c4:6a:84:a6:4b:cd:d1:9a:b0:6a:8e:87:
58:ad:92:11:ea:02:5a:21:77:d7:89:9a:58:32:76:
b2:01:ae:b9:32:43:62:d9:1b:62:43:3e:5f:44:f2:
34:46:26:0c:a9:99:86:8f:44:3b:41:b2:fa:e8:c6:
71:e2:31:86:59:e6:8a:36:df:3c:3d:85:0f:15:7e:
00:28:4d:90:6d:7b:bd:ac:13:10:32:0b:10:c3:19:
54:72:02:5d:0e:64:b0:da:b6:8e:65:69:8a:85:b5:
9f:c0:56:f9:c5:05:3a:0b:3a:ee:33:21:4c:dc:84:
b4:2c:6e:a5:79:52:32:03:e5:df:ce:80:ce:06:88:
fd:df:bf:5b:ff:50:ae:27:13:04:15:06:81:80:81:
20:55:bb:3b:ea:27:02:46:ac:36:a7:d3:ce:8a:a1:
bc:fa:5f:c0:7d:cf:84:23:ff:74:3e:a7:5a:c8:94:
ef:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:12:26:65:E7:53:F8:E3:66:DD:A4:CA:5F:A4:94:01:A3:3A:FE:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8040e05-2a40-3768-b2ad-fd64fa42f55a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.179.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:2a:41:72:01:86:4f:f0:5f:d4:56:15:f0:fd:f5:12:8d:49:
7a:62:d1:82:cf:e6:27:c7:98:e4:70:15:86:21:f5:77:c3:83:
d2:c9:f7:33:89:a1:ed:5d:f2:19:e5:aa:0d:41:d0:32:1e:81:
3a:65:48:3f:2f:04:2c:0c:1c:fb:c6:0f:12:dc:f2:a0:09:30:
58:f7:26:38:9b:51:12:13:91:83:84:ee:72:67:1e:5e:90:14:
aa:1b:20:da:ba:c8:0a:92:43:84:76:c4:76:8a:3f:5e:75:74:
58:53:d6:76:19:6f:ef:f4:bf:73:2e:6f:e1:99:29:6a:28:c5:
82:60:72:02:a0:fb:a2:aa:d8:13:59:4a:28:45:32:5f:3d:40:
8d:c9:1e:69:d2:e6:49:0b:bb:4b:78:f1:ba:17:aa:98:9a:69:
9b:8f:53:75:9d:13:24:0e:73:96:25:7b:54:87:8a:1d:95:43:
0c:1e:c9:65:eb:be:2e:3f:00:d1:6a:fb:2a:b6:10:e3:1e:b8:
c7:b4:0e:92:0a:76:5f:d5:5f:88:1c:7e:b3:c1:51:ea:84:e3:
b8:7f:29:e0:da:28:69:da:ca:ab:d2:7e:f4:4b:29:64:87:14:
83:ca:2c:2b:2b:eb:d8:92:f5:c1:36:bb:12:5d:b1:31:1b:50:
7f:be:ca:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:55:19 2025 by rpki-client