Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f54910d0-9a84-34e6-93aa-9e1902e92fd3.roa
File: f54910d0-9a84-34e6-93aa-9e1902e92fd3.roa (raw, json)
Hash identifier: Bf0gG05/t644nB5DL0VGPvnNisxSaU0ZiqVj3xi42Ks=
Subject key identifier: 42:4B:8E:63:F7:2A:32:B4:F3:EF:4F:12:E5:F2:08:D0:CE:80:9C:5C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F07FD1DE8652A1F5322CCEC00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f54910d0-9a84-34e6-93aa-9e1902e92fd3.roa
Signing time: Thu 25 Aug 2022 12:00:00 +0000
ROA not before: Thu 25 Aug 2022 12:00:00 +0000
ROA not after: Fri 30 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.229.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:07:fd:1d:e8:65:2a:1f:53:22:cc:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 25 12:00:00 2022 GMT
Not After : Sep 30 04:00:00 2022 GMT
Subject: CN=df497118-8f47-4a96-a8a3-8b8b07f8cec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4a:e2:6f:dc:00:b1:67:b4:8f:47:99:28:10:
eb:74:15:aa:66:5a:87:0a:f9:dd:a6:0b:ad:45:47:
b7:b9:2e:30:66:22:b7:82:f2:df:cc:f9:ac:c3:14:
d4:6a:f5:90:1a:3c:77:1e:dd:95:a7:7a:bc:b3:e4:
21:00:2b:7e:ba:e4:dc:f0:d4:6b:11:51:93:72:10:
40:79:51:b3:af:51:b7:fe:3d:2c:c9:5b:27:9c:03:
2d:d8:a4:8c:0e:f2:1a:3a:3a:fd:80:f6:69:93:81:
88:4b:b5:06:ea:73:9e:50:23:94:9b:dd:41:f2:40:
53:9a:56:45:d8:a4:88:66:61:53:c5:4d:96:38:4c:
be:6f:cc:5c:d3:84:1b:79:f3:de:ef:bd:f7:31:9f:
80:b9:b9:0a:3a:52:e1:32:d4:79:dc:0a:bc:a0:ef:
3f:d6:58:13:e1:03:37:4e:dd:e7:e4:f1:80:1d:fd:
18:b8:ee:e7:ac:ba:92:c0:13:5e:a1:14:66:8f:13:
90:b5:a6:88:3d:89:99:bd:f5:30:5b:a7:06:95:0e:
47:bf:16:61:3a:c5:84:09:ce:1d:5f:a7:91:13:c3:
e5:bd:b1:66:71:2c:6b:26:d5:eb:9c:04:45:82:27:
3f:7a:37:0c:28:d0:06:71:ae:c1:66:69:31:9a:4d:
61:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4B:8E:63:F7:2A:32:B4:F3:EF:4F:12:E5:F2:08:D0:CE:80:9C:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f54910d0-9a84-34e6-93aa-9e1902e92fd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.229.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:c6:f7:4e:2b:86:be:33:97:27:ed:df:5f:ad:30:0f:1a:f0:
61:99:25:8d:a9:e9:5c:e0:14:52:4c:31:e1:7e:c4:e0:1f:03:
05:aa:e4:61:28:3a:9d:b1:2d:4f:78:29:78:89:da:13:ce:b4:
b3:4d:0d:16:49:36:c1:70:cc:6e:a5:92:ab:0c:51:37:75:8b:
c9:2a:49:57:71:ae:67:72:f9:c9:2f:c0:48:a7:f3:f8:db:d7:
e7:41:08:ff:e2:cf:fe:ea:5a:73:75:d5:95:0f:9f:69:a9:0a:
a4:95:86:bb:45:aa:64:4d:8f:9c:32:ed:18:3f:d6:d7:37:c2:
db:ca:54:dc:68:aa:f0:29:4a:9e:83:d1:ae:87:07:15:6b:77:
7b:02:1a:ae:0b:33:85:a5:42:44:6c:70:4a:60:4f:ba:65:1b:
3f:fd:f4:9c:89:72:cf:a6:1f:d0:13:8d:42:35:c3:7f:9e:b7:
8b:94:2c:9d:cc:21:69:df:0e:e1:91:94:11:d2:dc:4b:15:07:
d4:7b:2e:af:bd:55:33:dc:65:d7:92:91:38:9b:05:cb:45:8c:
af:5a:ae:c0:9c:cd:6a:d6:c2:b9:66:ce:14:e1:5f:2d:8a:d5:
a6:7c:ee:ba:58:ec:d0:46:cc:48:ad:58:57:dd:19:56:4e:99:
0e:b3:6f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:15:12 2025 by rpki-client