Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e9e49f2e-81df-359f-8bb1-19cc8a040842.roa
File: e9e49f2e-81df-359f-8bb1-19cc8a040842.roa (raw, json)
Hash identifier: NfqBXpDzHErh4+bScbkerPjMKT5pA4NH/Mhyai9t9QQ=
Subject key identifier: 3D:40:5D:8A:4B:6B:40:88:B5:D0:F4:1B:DB:C5:6D:F6:6C:8A:9E:68
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE4341078E17E76EE82051E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e9e49f2e-81df-359f-8bb1-19cc8a040842.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.124.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:34:10:78:e1:7e:76:ee:82:05:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=4b49f150-90ca-4bdd-9757-fc06643a3c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:f5:94:64:9c:4f:d1:ee:db:18:18:e0:94:
54:f4:49:27:fa:46:d3:da:e0:5b:96:41:51:e2:4a:
42:16:75:be:80:de:8c:ef:20:15:92:b3:23:47:75:
3f:ed:aa:fd:4c:61:32:9d:a4:42:0b:24:35:87:29:
62:91:fc:8a:e9:f8:7b:3c:af:0a:c3:eb:e4:3b:04:
9e:df:eb:85:0d:50:53:e3:5f:38:5e:97:15:68:73:
1f:be:33:35:76:bc:80:ae:e3:dd:f1:8d:ce:81:cf:
a1:93:cc:3f:e4:5e:75:da:50:05:d0:bc:41:c9:ed:
7a:2d:d4:31:49:54:10:23:4b:b9:27:a9:86:96:93:
e9:af:c2:eb:79:76:74:52:59:3a:71:55:31:1b:89:
53:98:d9:2e:01:8f:4e:93:f7:e6:c4:b3:c9:c6:a7:
3d:6e:f6:8d:91:e2:83:36:8b:78:04:b1:3b:b5:e8:
47:42:28:f4:1e:b9:a5:aa:c7:4e:f8:57:7b:f1:7e:
8d:cc:76:e9:e5:f3:ce:5c:e2:1c:d4:69:df:cc:bf:
be:71:cf:93:ed:4a:bb:f8:ec:0f:ec:4d:e9:77:4c:
4c:b5:d5:e9:d6:86:c4:08:34:a2:fa:45:f9:e6:4f:
16:e7:06:59:48:f7:2f:17:d4:f9:b9:f2:c1:71:4a:
20:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:40:5D:8A:4B:6B:40:88:B5:D0:F4:1B:DB:C5:6D:F6:6C:8A:9E:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e9e49f2e-81df-359f-8bb1-19cc8a040842.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.124.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:08:02:2e:6f:b3:4c:7a:64:9a:01:7b:0c:b9:97:71:5a:55:
89:e8:c8:93:90:bf:6b:a0:ae:8e:6c:5e:15:fd:6e:ad:e4:43:
41:92:ba:d2:cd:77:a8:dd:73:29:6a:8c:d9:3b:f7:65:68:9f:
a8:f6:b8:bc:34:1e:4c:fa:38:bf:ca:a9:dd:e9:2a:27:e2:e1:
c9:01:ba:69:2f:e0:67:bd:07:c2:dd:39:f0:53:d8:ba:8b:15:
a3:35:23:d0:f6:6a:d7:bc:d3:f5:d1:42:23:de:0e:5c:93:97:
22:28:47:34:45:04:83:d3:e8:05:d1:19:61:82:08:c0:61:0d:
c7:6e:34:d8:d0:1d:fd:27:8d:55:ba:2e:b8:60:28:38:51:83:
02:29:3e:e0:ad:f5:ef:9e:8e:fc:44:ac:09:91:be:c3:c1:49:
ce:1d:b1:5e:cc:b8:28:b9:9c:e6:df:29:57:55:20:5e:a5:4c:
67:8a:a2:e2:85:a7:f6:79:4e:63:40:4a:35:b6:8c:22:74:5c:
9e:3d:00:cd:d5:90:f8:d7:17:6d:5a:1b:46:1c:b2:b1:fa:6f:
50:d3:29:d3:2a:a2:24:03:d9:4a:4f:52:0c:aa:12:6f:eb:e1:
51:cc:d1:7f:0c:de:df:ae:17:12:44:2e:0b:52:56:c5:b1:b7:
cf:11:af:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:00:23 2025 by rpki-client