Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f86a05a3-afa4-3850-a146-f70c6aef3587.roa
File: f86a05a3-afa4-3850-a146-f70c6aef3587.roa (raw, json)
Hash identifier: +Dlk2OYDMJwCaVZ5ndFw+az8AZyb9xTAiRTopMMx8W8=
Subject key identifier: F4:A7:97:C8:BF:E7:77:0F:AD:8A:7D:76:C2:56:86:9B:A0:B7:CF:FF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F3376E0BC0CEA4086035FFE00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f86a05a3-afa4-3850-a146-f70c6aef3587.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.154.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:33:76:e0:bc:0c:ea:40:86:03:5f:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=b1ba0e25-baf7-45bb-ad28-5614a693a7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8f:af:8d:98:75:02:20:db:f8:a6:d3:45:e2:
dc:b1:7f:a0:25:6e:64:ad:0f:93:76:25:02:a8:0a:
ad:7e:ac:c4:49:e0:58:17:0a:02:32:ba:fa:cd:d3:
58:4d:04:7c:88:5e:3a:82:7b:5b:d5:6c:09:45:18:
5c:6b:34:5f:5d:57:26:76:33:d1:d3:43:53:39:4a:
a9:f7:0e:a6:79:bf:42:fe:f4:fc:a0:5f:a8:b7:b4:
2a:48:07:85:b5:3f:d3:39:91:47:05:a4:74:a3:8d:
5a:d8:16:c0:40:d6:12:79:bd:6e:ef:b5:22:c5:26:
40:11:0d:97:04:fb:92:e5:80:e6:0a:25:61:32:f3:
09:cb:40:f3:08:7e:5d:64:b3:d4:cc:b0:b9:10:04:
da:d1:ef:89:fa:f9:ce:0d:70:3d:f9:6d:bc:a8:0d:
79:6c:5a:2b:5c:11:f5:0b:7b:94:2c:ea:d4:61:0d:
04:de:6f:15:a2:f1:e0:cf:61:29:c0:e9:0a:32:1a:
2e:40:aa:f1:a5:ab:d5:45:07:21:3a:0a:d7:3c:00:
f5:60:6f:cb:ee:94:5c:63:e1:bb:fa:9d:56:80:f6:
e4:5e:2f:b2:a4:84:20:e8:9d:9e:15:e1:72:17:94:
99:21:5a:99:f7:7c:fb:78:8a:7e:1a:19:9a:88:c2:
0d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A7:97:C8:BF:E7:77:0F:AD:8A:7D:76:C2:56:86:9B:A0:B7:CF:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f86a05a3-afa4-3850-a146-f70c6aef3587.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.154.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:fc:ab:1e:f0:7e:50:2f:6b:6a:0c:66:7d:c9:19:9b:8d:28:
c9:67:92:9e:f8:95:7a:ad:33:88:6d:f0:d8:40:12:cd:d0:dd:
97:54:ca:14:f0:9c:60:4b:d9:17:43:1d:61:5c:a0:ef:ae:c3:
50:fd:43:f5:2d:e5:31:f6:4b:e1:b0:6d:a3:d0:a7:d2:ce:3e:
d5:e3:3f:d6:a2:f1:5a:d2:34:38:fe:19:57:0c:47:ee:67:a4:
6c:a4:bd:10:cb:1d:bc:bb:2a:20:f8:10:ef:aa:7a:e2:18:fa:
e1:bb:42:94:03:86:19:19:16:93:61:19:4c:0c:b5:84:9e:2e:
f8:29:51:a1:7c:f8:8b:56:6c:b9:5e:8f:b5:59:0b:1c:2d:1c:
32:c5:0f:94:0f:9d:1d:3e:13:b9:c3:32:2b:fc:b0:07:af:5b:
c3:5f:89:b4:78:c3:f4:1f:72:81:0a:17:7b:9e:51:ae:cb:66:
06:51:59:1e:52:72:28:f4:7e:d2:ad:81:c5:67:53:e9:32:0e:
27:f7:54:a0:b4:d8:18:c0:ab:c4:ef:95:e0:db:e3:fe:65:9c:
81:60:ba:95:0a:0e:1e:82:a4:f4:d3:8f:3d:f4:e6:f9:72:34:
d6:df:d2:c8:47:07:06:ef:b2:57:3a:9f:24:13:e0:2c:19:bc:
29:96:11:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:13:19 2025 by rpki-client