Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f47b881f-3007-3a92-86b4-d4ac63727364.roa
File: f47b881f-3007-3a92-86b4-d4ac63727364.roa (raw, json)
Hash identifier: Q2PEuOoiUyRr3A+c66bZfz69I5x2+ROO+9TIN2iZz3U=
Subject key identifier: 77:AE:FF:4A:2A:F3:80:7C:EB:0F:71:E6:24:E7:F0:0A:96:3B:E2:EB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D80C51CCB02F32CF5F2956180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f47b881f-3007-3a92-86b4-d4ac63727364.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.163.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:c5:1c:cb:02:f3:2c:f5:f2:95:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=ada09b60-c946-4b2c-abee-ac2bd3b39b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:23:da:93:ad:dc:be:66:b2:a8:ee:0b:d2:
45:5a:57:1b:68:8b:f1:40:b3:4e:c7:0c:ad:a8:72:
07:d1:da:18:94:0f:0a:99:27:97:64:1c:0f:23:3e:
91:8b:b8:cc:1c:13:09:8d:6f:45:b6:42:c6:d4:bc:
90:c4:3d:a8:a9:cf:4b:13:84:75:b9:ec:4e:f7:35:
ca:e4:1f:5f:ae:9b:35:6e:ef:85:f6:3c:b8:a2:cf:
7d:7e:de:24:70:f7:e6:51:0f:3f:2d:e8:4b:93:35:
32:e7:28:37:af:69:d0:51:08:99:7d:3a:85:0b:c2:
1c:3e:c5:c6:ca:f1:64:5d:17:3c:52:32:f3:84:23:
db:6e:1b:1c:83:fd:13:72:3c:14:97:d2:f2:20:2d:
3f:6f:91:f0:b2:e0:b6:d7:5b:68:71:7e:05:27:9e:
fd:32:83:d0:e5:8d:35:99:a2:50:38:ef:34:40:03:
53:00:ed:6e:42:63:61:a3:61:77:2d:73:e4:df:2c:
e4:41:f2:21:30:1c:e9:89:d1:ea:f7:5b:c3:e6:8c:
62:a0:9d:a9:0b:fa:bc:12:6c:7e:92:ed:85:58:e1:
bd:e9:01:fe:03:e3:4f:84:66:57:f4:07:6e:8c:40:
d4:35:fc:6f:6c:40:d2:a8:cf:87:ce:a9:df:d8:84:
96:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AE:FF:4A:2A:F3:80:7C:EB:0F:71:E6:24:E7:F0:0A:96:3B:E2:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f47b881f-3007-3a92-86b4-d4ac63727364.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.163.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:04:e4:bd:5a:8b:c4:8b:a8:e5:b2:45:9e:65:1a:87:e5:e3:
fb:02:5f:d0:8a:cb:fc:eb:c0:b5:02:51:9f:61:12:37:3f:9f:
af:de:82:19:f7:fd:d8:c5:54:2a:1e:8c:bf:8a:79:9f:96:bc:
5a:75:e8:f5:34:80:5b:ea:a9:44:c8:9a:dc:c9:00:24:42:cb:
a6:59:b5:34:e6:97:da:58:c9:a6:c6:df:86:9f:1a:b6:dc:b3:
36:8b:9e:8f:41:e3:1d:a0:96:bb:d0:54:4a:9b:d6:a1:60:4e:
fb:b5:f7:58:07:fc:95:15:15:bf:98:96:ff:25:04:c4:47:4d:
bb:6b:48:b3:db:42:b3:80:ad:f9:a7:98:bd:61:65:bc:65:1b:
52:47:51:86:a6:df:c3:00:46:88:82:ed:f6:36:b7:6d:36:4d:
f5:18:d0:45:5c:30:40:f8:08:cd:40:f2:13:2a:67:8c:bc:d1:
74:96:43:26:2c:e7:77:ba:ba:59:87:f1:ae:07:eb:39:8a:30:
ed:c1:88:58:aa:bc:c6:a0:ac:ad:c7:45:51:35:d7:c7:b1:a6:
e5:8e:16:c1:62:95:fe:1c:ed:c9:08:e8:59:c3:0f:e6:ab:78:
d8:9f:c6:6f:8f:ca:f8:84:e5:fa:d0:06:ca:14:44:91:f8:d6:
50:dd:b6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:14:22 2025 by rpki-client