Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8ba07aa-c5ec-3655-a885-78ec2395de72.roa
File: e8ba07aa-c5ec-3655-a885-78ec2395de72.roa (raw, json)
Hash identifier: LiFR7YL+3FVaiHGp0XRHOYgDIDpAQFpkQbH/4AOmo6c=
Subject key identifier: 6B:8A:B7:1B:CF:79:33:79:0F:DA:8B:6F:21:41:17:79:E2:E6:F1:92
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E49221F3F0952B021151B3D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8ba07aa-c5ec-3655-a885-78ec2395de72.roa
Signing time: Sat 18 Jun 2022 12:00:00 +0000
ROA not before: Sat 18 Jun 2022 12:00:00 +0000
ROA not after: Sun 24 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.102.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:49:22:1f:3f:09:52:b0:21:15:1b:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 18 12:00:00 2022 GMT
Not After : Jul 24 04:00:00 2022 GMT
Subject: CN=ae9e2e43-045e-49c9-bd1a-2918b5fb686c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5e:49:80:49:46:ce:18:f0:11:56:93:89:42:
a6:4b:3c:3c:2e:94:db:a4:4c:b9:a7:49:5d:9c:02:
b0:95:e7:00:cf:50:d6:2f:53:45:80:37:ff:b3:fc:
dc:0f:36:0e:d1:3e:ed:ab:7f:bd:71:b0:df:1b:f8:
3a:9f:43:69:4f:89:75:82:0d:02:34:48:5c:63:73:
92:23:0d:15:22:9c:ef:be:18:3d:d7:bc:a4:15:47:
00:74:c6:31:3b:72:52:cc:4c:a5:30:00:eb:ff:d0:
80:8b:0e:88:06:11:d5:e6:65:66:7d:fe:af:a9:d0:
d4:27:0a:d2:a3:e4:a7:e3:c8:80:d7:a8:fd:2b:bb:
fd:b9:23:6c:d2:58:3a:38:00:c4:30:5b:a4:74:5b:
c8:ab:cc:8c:c3:56:9b:a5:e1:99:39:12:95:0f:4d:
9c:b8:ab:ca:f3:2b:7b:89:92:6d:4f:48:48:9f:79:
f0:a9:e4:bd:7a:c0:55:0f:c5:5b:cd:6c:f8:0f:48:
2f:8c:d8:cd:2a:f6:9e:a9:e3:e8:d4:7f:6e:f6:c4:
f6:83:15:49:b0:4e:0d:5c:2a:62:16:0a:58:3a:c4:
c3:9d:95:bd:ca:96:f7:12:0c:45:29:39:79:2e:1a:
8a:3c:7a:e4:9e:cd:73:1d:61:a2:c1:be:3a:7d:9c:
a2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8A:B7:1B:CF:79:33:79:0F:DA:8B:6F:21:41:17:79:E2:E6:F1:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8ba07aa-c5ec-3655-a885-78ec2395de72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.102.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:06:7c:09:3a:7e:88:29:bd:e6:88:94:46:aa:62:7d:a2:71:
94:a6:06:29:67:1d:d3:4b:45:38:5e:85:1d:b5:1f:69:84:4b:
ea:9c:15:6a:ec:09:f8:a5:4d:c0:f4:cc:fd:d6:2b:a5:9d:85:
9d:68:fb:98:03:64:16:84:3c:02:94:7a:f1:7e:49:2d:b6:d7:
6c:84:3c:ce:3e:37:51:9a:ed:0b:7a:de:fc:81:11:47:5c:a8:
d0:ba:50:84:b8:70:d8:01:6f:2a:7b:3f:9f:7d:f1:b5:8d:8a:
5e:1f:64:01:81:81:d7:49:1a:1e:b4:87:ea:71:5e:0b:ac:6a:
87:66:88:05:d7:30:0e:2c:75:73:e7:e7:29:ce:35:c0:6f:8b:
9c:e1:05:8b:6a:9c:a4:5b:72:01:cc:03:15:fb:84:5e:85:0a:
87:a0:f9:03:44:69:78:20:5b:be:a5:65:48:dd:33:1f:58:f4:
2b:d7:14:fb:e4:b2:d9:e8:a7:79:da:8a:3b:fa:6a:af:99:ab:
65:89:2e:7b:10:ac:06:22:80:7b:97:e7:35:01:8b:3d:ef:5f:
1a:89:b7:19:03:b5:42:b9:54:79:be:3a:66:3d:76:23:62:fe:
bb:8f:c7:1a:f5:e7:93:df:fd:45:e8:ff:16:14:0f:62:94:1f:
00:76:b3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:23:56 2025 by rpki-client