Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f25821d1-5c97-306c-9f95-8bd4b745524f.roa
File: f25821d1-5c97-306c-9f95-8bd4b745524f.roa (raw, json)
Hash identifier: fNSzkuN1cF6H9ISYhY+r62knOCGsSmHy7+4mk13EPeo=
Subject key identifier: 7D:67:6E:4A:A8:F9:6F:DE:F7:83:E7:D6:83:ED:A8:FA:09:09:2F:87
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F3324D5457BCB816CDB617F20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f25821d1-5c97-306c-9f95-8bd4b745524f.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.231.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:33:24:d5:45:7b:cb:81:6c:db:61:7f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=9cc598d9-e538-454d-967a-e9e5dfb55a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e6:18:45:d6:6b:9c:de:b6:15:02:80:f9:10:
65:00:80:95:2d:56:41:b7:8e:a1:2b:45:0f:76:07:
60:94:5e:57:54:19:fb:2e:5d:91:e5:b8:c0:66:b1:
6b:cc:e9:a5:6a:4b:5d:64:01:14:fe:14:7f:77:fc:
2b:fa:cd:f1:65:6e:ae:e6:ec:f1:50:12:35:ac:ea:
d0:91:11:aa:a5:c7:b5:df:36:52:23:bb:93:31:61:
b1:23:76:24:05:4d:16:3e:fb:07:29:2f:34:6c:8d:
cd:eb:d0:d9:ac:e1:b1:80:bc:af:f7:97:47:15:18:
a9:36:70:f3:d2:1d:c0:c8:45:4d:0f:53:32:03:ae:
e4:87:6e:a7:a1:46:a7:d5:ff:a4:d5:26:c7:55:b1:
3d:11:2b:73:70:cf:61:54:1b:f4:58:53:aa:09:a3:
a9:3b:99:2e:b9:5c:bf:11:a2:b5:b4:dc:d9:e5:08:
0a:4c:a6:75:9f:8d:6a:7d:98:db:df:9f:a7:a4:86:
29:82:72:bf:85:6f:b5:fb:e1:1c:a1:9b:bd:d4:ca:
b0:7f:7b:54:06:1b:fc:5b:51:10:77:c3:90:48:ad:
cd:ea:2d:28:a7:28:96:82:f0:58:42:06:73:42:a3:
13:ae:e0:85:26:86:02:a3:16:6f:e7:eb:8a:0d:0d:
1d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:67:6E:4A:A8:F9:6F:DE:F7:83:E7:D6:83:ED:A8:FA:09:09:2F:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f25821d1-5c97-306c-9f95-8bd4b745524f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.231.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:b3:06:7f:e7:77:d9:d2:39:c4:d7:3c:95:de:b2:e5:ac:7b:
05:57:5a:1a:f9:f7:9c:75:d2:50:06:af:09:f4:68:cb:63:52:
8f:38:94:00:48:f1:09:94:67:c0:7a:bb:42:2d:7a:56:52:05:
12:65:af:53:ab:79:12:ed:3d:22:13:b3:bd:8e:64:76:a3:5e:
1e:bb:8e:d6:88:b7:3c:76:33:2c:d9:72:51:ce:bc:1f:8c:12:
59:bc:78:09:09:0f:f9:e9:ba:41:29:5a:6d:db:7e:b5:e6:4b:
90:91:e6:28:5c:8c:74:8a:58:37:25:ec:c4:65:87:5f:f2:62:
4e:8b:33:5b:1f:15:39:be:cd:bd:38:d9:f4:07:9f:f0:e4:02:
38:27:03:b5:6b:04:00:d4:f7:f3:19:04:85:d5:48:f1:32:f0:
1c:40:92:e1:ef:4c:ba:93:d5:f2:07:bd:2b:ea:19:12:f8:aa:
d4:2e:7d:02:0e:1d:5a:c5:39:08:38:6d:ef:19:7e:10:98:01:
37:b5:35:a6:c7:f4:f3:46:a1:3a:3e:76:6e:39:32:e4:1c:f0:
2c:d9:2e:35:3c:e6:ec:5a:54:cd:f4:fd:6a:61:f5:1c:a4:9d:
26:6b:6c:06:5b:fb:4b:ba:4f:4f:8b:35:7c:19:e0:46:66:d8:
b0:4a:fa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:27:05 2025 by rpki-client