Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f30d041a-5b69-3010-b5b7-301e5a31a84b.roa
File: f30d041a-5b69-3010-b5b7-301e5a31a84b.roa (raw, json)
Hash identifier: w8lTzeQ7ytYdBVC8dzJghdW0LVi2TFgyB7Pb3CksdZE=
Subject key identifier: 23:DB:13:A9:F5:63:FD:74:64:E9:3C:7D:F2:4B:BC:7B:33:3A:82:54
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0CD85BF3372048ED735CBC80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f30d041a-5b69-3010-b5b7-301e5a31a84b.roa
Signing time: Sat 27 Aug 2022 12:00:00 +0000
ROA not before: Sat 27 Aug 2022 12:00:00 +0000
ROA not after: Sun 02 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.84.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0c:d8:5b:f3:37:20:48:ed:73:5c:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 27 12:00:00 2022 GMT
Not After : Oct 2 04:00:00 2022 GMT
Subject: CN=737f526f-3cdd-4bf3-b17a-6cb6650813b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ad:12:fe:21:84:34:5a:1e:cb:68:82:fd:0c:
75:bc:12:31:b7:61:af:04:4d:4c:8b:27:f7:e0:de:
24:93:66:26:39:92:27:d1:20:e8:4d:b5:4b:b7:77:
45:77:5d:07:77:8b:48:37:e3:b8:39:8c:6d:13:8a:
27:c2:7f:0b:a9:6d:8b:9b:e4:9b:0e:da:e3:a8:80:
41:ec:90:dc:96:70:c1:0d:97:0c:87:04:a3:f0:1f:
fa:c6:9d:cd:16:19:74:14:05:09:d9:c5:4a:81:18:
9e:51:6c:44:2d:61:7a:ab:bc:bd:ae:58:a2:79:44:
5c:a7:28:c4:0e:0f:7c:ca:33:ca:3a:79:c3:87:42:
d5:73:56:e5:21:1b:45:49:11:70:2a:9f:1a:bb:03:
a7:ae:2a:e1:1f:9a:c4:92:ed:a7:0f:d1:48:3f:be:
04:f0:92:63:9b:f9:01:61:8a:51:19:f1:9e:a5:b5:
67:d8:95:47:3c:44:b4:73:a6:ee:fa:b6:3b:e6:93:
05:91:f2:11:88:4d:ab:4a:30:50:a3:1d:4a:63:ce:
16:fa:97:77:a3:16:82:57:73:80:a0:fe:3d:e0:8e:
9f:0c:64:10:42:a0:a2:99:5b:69:d6:b3:78:e2:40:
52:f4:d1:97:c5:50:c5:82:22:0c:55:07:8f:b5:b3:
71:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DB:13:A9:F5:63:FD:74:64:E9:3C:7D:F2:4B:BC:7B:33:3A:82:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f30d041a-5b69-3010-b5b7-301e5a31a84b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.84.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:44:1e:71:82:5b:9e:c0:d7:92:20:10:63:4e:18:a4:3f:b1:
ca:a1:68:40:1a:cb:eb:db:e0:e1:c3:d4:89:cf:7a:e1:25:b0:
e5:e4:3a:40:de:ae:38:2e:d3:88:11:6a:ee:d2:ec:a4:c7:5f:
d9:dd:0f:ae:f3:c1:78:f3:45:b3:08:2e:06:d0:72:97:de:26:
32:68:a1:37:95:36:c2:e7:91:5a:19:94:0b:f7:c2:38:69:08:
43:82:7d:23:d4:81:24:48:db:cf:3c:69:ed:cd:a5:43:8f:a5:
10:8e:21:92:86:3b:b3:aa:42:2e:96:1b:ec:44:ad:17:54:2d:
73:b4:00:cb:02:40:5b:e7:76:c1:5f:f1:42:f6:a8:33:3a:a7:
cd:ef:d5:30:62:e1:5a:ae:c3:b5:d6:fe:9c:55:c3:e8:26:31:
50:a9:c1:20:6b:ab:c8:f3:05:dc:13:99:6f:e4:6a:b6:68:de:
9e:cd:d1:fb:c8:09:4f:f0:45:49:7f:8a:da:39:86:c1:86:e6:
b6:55:c0:18:5a:25:cb:a3:3d:f5:2a:45:b0:bb:4f:61:db:87:
7a:d0:45:de:cc:6a:90:5e:f7:9b:0f:95:b2:93:c3:87:58:5f:
a4:28:83:71:27:c5:c0:3a:0d:78:a7:b8:90:19:9c:17:15:10:
17:f4:77:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:06:14 2025 by rpki-client