Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f538528b-5da1-3417-b314-94251e7bdac6.roa
File: f538528b-5da1-3417-b314-94251e7bdac6.roa (raw, json)
Hash identifier: Ds6CORsK6VxRarcoANsvO5X17UvekouJ85SsgSw4Qc0=
Subject key identifier: 97:BB:D8:BA:5D:0F:A0:8F:59:B8:B5:3F:6E:D7:C4:C1:D1:EE:75:AF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBE27063189F6D0687BC5CD00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f538528b-5da1-3417-b314-94251e7bdac6.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.160.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:be:27:06:31:89:f6:d0:68:7b:c5:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=054d4be3-0bf1-4524-b4e2-003e89acc555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:79:2e:50:98:f5:95:b5:76:48:42:b4:f4:a5:
c8:e8:b2:aa:e3:25:bb:ae:63:7e:99:81:47:69:57:
ce:55:da:50:4e:11:b4:42:75:4d:58:67:a6:9c:7d:
30:f3:d3:63:13:5c:22:11:8d:6d:ca:5e:0d:c8:30:
43:5a:94:a6:1c:5b:61:3d:c8:6b:74:0a:29:fb:a1:
57:8d:fe:48:97:6e:3d:e3:05:4c:5f:a1:a8:28:6c:
b2:08:80:bc:76:77:7b:46:85:c7:24:04:e1:2f:97:
83:cf:02:ac:69:c8:b3:3b:56:4c:3f:e8:01:3b:ee:
df:64:4f:0b:69:7c:fa:27:bb:45:3e:74:e7:6f:ec:
90:62:0f:82:78:e2:b5:22:67:ed:65:62:72:fe:35:
6f:5d:79:b6:98:53:c6:8f:61:b9:8c:52:5f:65:38:
02:a7:38:a4:1f:de:f4:30:93:43:6f:12:14:eb:83:
f8:67:e9:ee:04:4a:72:c6:f3:77:77:4f:6e:0d:b0:
c4:11:88:df:10:bf:90:6f:23:e1:9d:f9:50:f7:c0:
e4:54:74:96:d9:2e:24:b7:64:13:58:01:46:a7:32:
e1:0e:26:bb:30:21:60:8c:1b:6f:35:8a:90:10:32:
c6:a7:f9:45:2b:b8:60:1e:ae:32:0b:b2:9d:80:48:
e9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BB:D8:BA:5D:0F:A0:8F:59:B8:B5:3F:6E:D7:C4:C1:D1:EE:75:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f538528b-5da1-3417-b314-94251e7bdac6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.160.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:7e:fa:0d:a7:35:77:97:a3:4f:f5:a3:bd:82:e4:e3:6f:8d:
99:eb:49:f3:aa:60:c6:10:bb:a6:11:99:82:ea:98:cc:65:5a:
8e:01:f1:94:23:25:05:4a:25:df:6c:62:d2:ce:59:7b:8d:71:
bb:a8:32:57:f5:36:ff:ac:2a:c3:82:8f:48:43:a6:27:b1:fe:
59:90:40:32:be:a4:ca:85:34:49:25:fc:a5:b0:fa:9b:82:35:
a3:26:5f:85:ae:72:90:6c:09:69:31:ac:97:01:b9:ca:d3:7a:
03:9f:07:25:d0:a5:dd:59:9b:39:48:cd:67:64:68:ab:29:1c:
5e:05:b7:c5:18:df:cb:e6:40:c2:3b:45:3a:46:24:db:7d:27:
16:3d:37:e9:34:c3:5b:5c:52:05:52:a9:55:a2:6d:4e:fa:4a:
27:bd:4c:84:12:99:54:90:eb:27:15:f5:49:4f:5a:a0:54:49:
55:47:f4:bc:f1:b3:1a:77:b6:d2:30:19:12:86:48:a4:06:93:
c3:63:25:e9:9c:da:e8:5c:4e:33:17:c3:0e:7b:63:db:8d:6d:
da:81:98:cf:b8:ac:12:2d:38:ef:c7:fb:60:9b:61:0b:22:e1:
c1:e4:8d:cf:03:34:b9:96:e8:42:4f:8b:ec:82:39:7e:de:45:
fb:8b:04:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:23:02 2025 by rpki-client