Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8b156e4-b222-3860-8805-b625c28d5942.roa
File: e8b156e4-b222-3860-8805-b625c28d5942.roa (raw, json)
Hash identifier: /xA2npW7Gfj7FBonfhc3S4J3FlHCOHCAj+WIspRcm0I=
Subject key identifier: E3:AA:08:E7:3C:70:8F:B3:5B:F3:E8:D3:6C:FC:42:CD:AD:6B:1F:48
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D328357A150C05F7DE3AE6380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8b156e4-b222-3860-8805-b625c28d5942.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.160.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:83:57:a1:50:c0:5f:7d:e3:ae:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=a3aa9415-2d4a-4b6e-861f-a07ee8c14fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:61:e9:88:c2:91:db:c2:99:e1:50:01:2c:
24:e7:1e:4e:29:e7:88:61:39:45:a0:ff:83:d8:a1:
6b:f0:46:5c:a0:32:57:28:a7:21:d3:2e:54:00:d5:
44:dd:36:14:95:df:f8:ef:8b:c1:b6:5b:b2:a9:1d:
81:c4:ab:91:85:56:5c:c8:8f:8e:87:09:89:6f:12:
a3:1a:c9:33:d8:5f:f0:12:62:eb:9e:d9:ea:1c:0c:
34:4c:ce:f2:d8:1c:6d:5b:93:5e:4f:ce:0b:21:01:
94:7a:c6:f1:e7:2f:92:95:d4:bc:68:de:9b:e6:f9:
36:2d:7d:83:ed:e2:b3:bd:ac:27:e5:58:cf:7c:06:
1b:6d:ec:e6:09:10:6d:e0:04:68:34:e7:d3:3c:30:
1a:f0:3f:2c:8d:71:55:6b:3e:db:19:58:95:b6:fa:
57:26:73:d5:e5:98:da:06:ad:85:ac:53:6b:ce:76:
5d:db:60:18:19:ca:84:8c:a1:68:1c:20:3c:e2:c6:
15:05:42:10:28:61:50:77:bc:63:7c:8a:51:42:be:
aa:27:cc:2b:70:93:6a:b0:d1:50:5c:4c:87:a0:db:
e3:bb:b6:aa:32:6f:9e:a9:d8:ff:15:68:77:3c:a8:
e0:b5:b4:55:01:e3:5d:fb:b8:c8:31:0c:95:ed:a5:
b4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AA:08:E7:3C:70:8F:B3:5B:F3:E8:D3:6C:FC:42:CD:AD:6B:1F:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8b156e4-b222-3860-8805-b625c28d5942.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.160.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:b4:fa:ae:c7:de:98:22:05:76:d9:a8:25:bf:bf:16:4c:11:
0c:25:21:aa:64:0f:81:3a:47:a8:c7:62:8d:74:19:f2:10:90:
0b:9e:f9:eb:61:89:a2:ba:75:3a:48:63:fd:3e:7e:b9:47:71:
8a:e5:36:1b:46:d5:f8:51:de:45:74:54:7b:ca:c2:e0:93:65:
79:bf:69:e7:10:51:1c:f3:52:4e:6d:e3:7a:df:a8:13:4c:af:
b1:8e:a8:23:c5:83:42:f4:f2:6b:56:d2:d3:5c:41:e6:c5:46:
b8:ab:1c:32:c7:ff:b6:53:c1:b4:bc:ef:29:9c:50:1f:52:e3:
0c:79:48:b7:85:a2:97:19:cc:28:ce:88:69:ef:96:7b:c6:af:
3b:2e:60:3d:5a:f8:d4:2e:6e:ef:6b:bd:37:97:01:9e:55:f7:
6e:3f:1d:d8:88:53:54:0d:68:be:f2:fa:7e:43:fb:02:c9:a6:
e0:8a:0c:6c:19:9c:68:17:4b:67:87:b6:a9:32:c2:25:f7:9d:
97:1b:03:c4:ba:3d:3d:08:e5:64:d2:51:83:fe:09:df:13:aa:
4d:be:48:7d:06:da:7f:7c:b3:09:ac:bd:f2:21:f4:31:97:7d:
1f:3f:a9:b6:ed:b4:21:b3:91:b6:0f:2e:1a:59:c3:9b:6e:bb:
ed:57:bf:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:53:01 2025 by rpki-client