Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fb25c265-9377-3486-9d65-ed2c85d2d1cc.roa
File: fb25c265-9377-3486-9d65-ed2c85d2d1cc.roa (raw, json)
Hash identifier: wmpjLIIG9DZxSBE6Ca0gwLTYWwaqzRcuENj9nrk8lpM=
Subject key identifier: 6C:A4:58:F8:D9:9F:7F:01:81:6A:E6:B7:86:8C:EF:62:33:90:88:6B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F2EED55AE4428332C5F3FCC00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fb25c265-9377-3486-9d65-ed2c85d2d1cc.roa
Signing time: Thu 08 Sep 2022 12:00:00 +0000
ROA not before: Thu 08 Sep 2022 12:00:00 +0000
ROA not after: Fri 14 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.127.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2e:ed:55:ae:44:28:33:2c:5f:3f:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 8 12:00:00 2022 GMT
Not After : Oct 14 04:00:00 2022 GMT
Subject: CN=6a66acfa-31b3-4493-ad68-f897eb692ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:45:fb:81:a4:14:74:de:8f:ed:1c:98:34:1c:
ff:0a:02:c4:cb:aa:64:4c:55:01:bb:cf:50:8b:12:
c1:d1:07:26:35:0c:77:90:8c:b8:2c:da:4c:fe:56:
74:5e:99:6a:08:8e:c1:bf:9a:f2:4d:7f:06:49:71:
37:6d:20:48:5f:18:32:49:21:66:a6:95:de:d9:3b:
e5:16:0b:2d:49:0a:e0:06:bd:23:4f:7c:12:4f:90:
09:fd:0d:db:9e:5f:69:3e:a8:10:b1:a0:4a:17:70:
61:ca:3d:ee:31:45:39:f5:55:86:44:52:ff:cb:26:
f4:c2:0a:92:79:7f:f7:92:fe:da:41:f3:ff:b7:f7:
1a:9b:40:97:9e:30:cc:0f:1d:38:ea:17:ae:33:85:
fa:37:34:ce:ad:6c:46:27:4c:26:c6:fa:0c:7b:71:
43:ae:5e:00:da:d5:b8:e4:f6:fa:50:6c:9b:7d:8e:
37:26:a4:15:70:7d:bd:9c:7b:24:67:7e:b3:9c:59:
4a:72:56:8c:5b:8d:49:5d:0a:b5:b3:ca:90:3f:77:
64:a4:a2:26:c4:e9:2a:9b:da:13:82:70:c0:a9:9f:
40:df:42:4a:3e:d8:8a:8f:31:9e:10:9c:6f:1d:5a:
4c:37:12:37:16:e0:8f:ab:d7:ed:5b:a9:55:89:d0:
81:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A4:58:F8:D9:9F:7F:01:81:6A:E6:B7:86:8C:EF:62:33:90:88:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fb25c265-9377-3486-9d65-ed2c85d2d1cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.127.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:bb:9d:a7:a5:be:56:e7:13:dc:1f:22:b0:94:47:a1:90:8d:
47:54:82:87:22:1e:9d:dd:0e:76:b2:1d:a7:ac:44:44:a1:12:
03:98:51:e8:8e:c6:1f:18:5d:96:94:69:63:f1:d3:2e:4d:65:
0a:9e:be:04:c2:23:c1:97:81:23:6e:46:24:48:b8:a7:c3:34:
88:df:4b:79:73:97:03:d3:b1:69:ee:ec:66:91:e9:60:27:0e:
f8:af:4f:b7:f8:65:8a:c1:cc:ea:4f:e6:cd:de:30:d4:d8:ff:
97:fd:3f:3d:d0:0e:cb:26:7a:86:00:25:5b:d6:1b:06:e5:ce:
ad:25:95:fb:ea:9c:f9:ec:dd:09:21:07:85:f1:58:ed:03:00:
3b:a5:03:f9:cf:73:34:70:e9:cd:aa:25:e9:b3:c9:80:eb:f2:
66:bb:b3:6a:9b:08:a5:c5:96:98:5d:f4:f9:98:75:75:d3:79:
21:67:f5:b0:c5:63:e4:bd:69:d7:ba:fb:dc:f3:48:d2:b0:e0:
c3:a6:5b:af:f9:16:bc:99:f0:14:26:63:26:de:63:89:ce:83:
e6:b0:a4:d2:55:9f:ff:11:cc:a8:19:48:71:89:e2:9e:be:9c:
ea:c8:f7:b2:a9:7d:82:0c:bc:0b:8a:71:8c:bb:21:b9:83:21:
60:1e:7c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:19:38 2025 by rpki-client