Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f81dbc52-95c3-3037-a503-8872c58778bf.roa
File: f81dbc52-95c3-3037-a503-8872c58778bf.roa (raw, json)
Hash identifier: m4+5OjhwA8tpG9L2wX7ve9LjN/bdWD0VRm5fD94Wix8=
Subject key identifier: 03:38:66:01:AA:A9:45:A7:DA:1F:0D:C1:F3:E5:7B:97:BB:BD:7D:1C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D80AEE607AA9E9A8336D58A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f81dbc52-95c3-3037-a503-8872c58778bf.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.104.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:ae:e6:07:aa:9e:9a:83:36:d5:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=7b176f3e-74bb-44cd-88ee-a75122bbbf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:02:7b:96:07:ba:f3:ee:62:1b:54:4d:0c:40:
cf:64:f0:11:64:f5:65:d6:f7:dd:a8:11:5e:31:f4:
af:2a:10:ca:0b:86:fd:a0:e7:75:8b:78:6c:9b:e1:
7f:30:15:64:8e:d3:c8:26:e7:7c:79:10:e7:b3:d8:
3c:b1:e9:fb:55:bf:25:53:d5:f4:d6:b1:b8:f0:8c:
21:fe:7a:ba:93:6a:90:cf:d9:5e:da:63:8c:75:83:
7a:9c:0b:2a:47:1e:75:0e:76:59:8e:f6:d1:71:b6:
3b:92:11:26:41:5c:6d:48:71:91:aa:0f:a7:79:fa:
77:61:af:7c:f4:f5:62:fb:29:91:a6:4c:2e:f7:50:
b2:80:c0:d2:73:b1:de:94:6d:14:2f:e5:68:c1:4d:
eb:c3:b8:aa:f2:c7:58:8a:42:9a:f4:3b:f1:21:77:
5b:80:25:79:57:18:27:fd:59:41:67:20:87:6e:07:
62:ff:61:25:b7:fd:70:91:11:4c:8b:a7:27:2c:c1:
bf:a2:57:4b:80:9b:b4:30:d2:5e:19:89:c9:1f:1f:
b6:82:fc:ea:0a:5c:96:37:be:11:c6:da:14:7e:a3:
02:52:c5:ce:27:61:bd:f3:3f:ff:93:69:29:36:68:
20:19:6f:70:1d:1d:24:b0:e3:f0:77:9c:c6:2a:d9:
bf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:38:66:01:AA:A9:45:A7:DA:1F:0D:C1:F3:E5:7B:97:BB:BD:7D:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f81dbc52-95c3-3037-a503-8872c58778bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.104.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:a7:76:3c:da:99:04:75:8c:72:3a:76:22:ac:9c:3c:07:c6:
57:c9:08:c8:ff:4f:c4:eb:37:c7:2e:1b:29:18:38:f8:54:9e:
76:57:f3:91:5e:be:cd:80:14:49:28:ec:91:33:42:dc:27:5a:
31:f4:fc:fa:ae:57:86:ed:20:2e:20:55:2a:69:7b:69:96:79:
84:a0:e1:81:36:49:0f:03:0e:80:5b:74:21:6a:da:ac:a1:57:
17:15:14:9f:1c:80:49:13:bd:d3:c6:db:28:6c:4a:e2:41:45:
30:4e:00:a7:df:9e:a6:48:9a:32:0d:61:9a:7a:1d:40:83:f4:
c0:7a:df:b0:cd:d2:c7:0e:1d:00:6f:6f:1a:04:76:13:f8:b1:
c1:50:f4:a3:84:3f:18:40:79:f0:e7:8e:ca:d4:53:43:31:5b:
bb:9c:3d:9f:01:de:60:d6:0d:a3:22:c9:d3:6c:f4:4d:dd:ed:
98:e2:2f:86:2c:1e:f5:9b:d0:3c:89:f3:a8:a6:ab:b5:16:2a:
3c:01:c7:ea:e3:3c:ce:00:c6:32:32:b4:e5:03:30:f6:d0:f1:
61:92:c7:eb:34:eb:d8:6c:50:29:02:3a:fe:9f:26:db:02:b0:
60:86:fd:4c:89:a0:00:df:ac:fe:14:01:77:ef:d1:81:1d:2f:
3d:e6:90:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:25:50 2025 by rpki-client