Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fc6b47bf-5bc7-3bdf-8de0-678b2d548cc2.roa
File: fc6b47bf-5bc7-3bdf-8de0-678b2d548cc2.roa (raw, json)
Hash identifier: 4xEqzTorfBsaTasuMCTdcZc/HypR7G8UDZzLGFML490=
Subject key identifier: 75:C7:34:73:6B:9F:9E:3C:30:89:11:0A:7E:85:17:03:2E:A2:E6:B9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D328B3D5DD0365DA71C8CB880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fc6b47bf-5bc7-3bdf-8de0-678b2d548cc2.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.168.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:8b:3d:5d:d0:36:5d:a7:1c:8c:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=70cbf6cc-2eb5-4e22-9257-c708a8e6433c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:81:7a:6d:53:9c:9a:eb:fd:46:87:66:89:63:
0c:bb:01:4d:d7:75:c8:7b:a9:66:d7:ec:90:ad:83:
5f:90:d2:3a:ff:9d:f4:aa:69:1f:b9:68:da:75:55:
c4:1c:92:d8:cb:d6:56:a4:6c:d8:8e:f9:68:77:fa:
c5:ce:84:b5:ab:19:5d:9e:f2:16:c2:c9:5b:4f:dd:
65:05:9d:d6:de:9e:da:81:dc:d4:18:f8:e4:db:49:
06:b8:24:62:49:62:e8:c3:d9:d1:86:4f:80:e7:c5:
cc:7c:e7:06:3e:9d:84:76:21:e2:b9:76:23:77:8c:
e6:52:66:28:d6:1c:bf:91:b6:33:6f:20:0a:b2:f4:
bb:e3:18:1a:6f:e1:0e:ed:5f:da:c7:f5:ff:bb:25:
2d:b9:df:ce:93:8e:51:4a:e2:bf:63:c4:81:26:58:
30:ee:67:19:c2:e6:33:f4:44:8a:af:c2:1e:ae:d5:
96:8e:ea:dd:10:28:b6:42:59:87:df:d8:f2:e9:c1:
35:55:80:88:01:83:f9:4d:5e:de:0d:5d:35:a5:4f:
d9:d9:e1:de:99:58:c8:09:76:5d:e5:07:d2:0d:e4:
6d:25:8e:c5:c8:cd:c7:1d:e6:90:40:8b:d9:9f:17:
86:25:df:d6:a0:cf:a8:90:77:a6:1f:1b:50:c4:ae:
b3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C7:34:73:6B:9F:9E:3C:30:89:11:0A:7E:85:17:03:2E:A2:E6:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fc6b47bf-5bc7-3bdf-8de0-678b2d548cc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.168.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:80:d5:75:2d:39:13:18:c5:b0:b3:3a:47:d2:ee:85:70:f1:
c7:e5:d0:73:20:24:f5:00:43:e4:9a:2b:3c:2a:5a:fd:1a:6d:
06:75:8b:7f:2f:f0:4a:6a:71:5a:30:f8:8f:a6:aa:e8:46:d6:
a0:d8:fa:6d:c2:ce:a1:1b:a3:f6:d8:ae:81:16:69:4f:16:e0:
17:07:9b:f3:25:46:01:56:24:81:51:07:b4:2f:82:d4:d1:54:
0d:da:e3:a8:78:da:75:e0:2c:e7:2f:15:ca:d8:4d:a0:d8:d1:
77:cd:08:6e:b8:e9:fa:d9:07:33:a2:e4:60:03:77:e4:98:a5:
1b:b8:72:9a:e4:79:01:82:52:41:b5:0d:d1:07:a2:dd:e6:00:
25:ea:1c:06:2b:18:00:94:23:cf:53:f1:e1:14:77:3e:56:c7:
c6:46:12:91:a4:e1:cd:0a:92:4f:91:51:66:bf:85:b0:40:c3:
0c:14:24:e7:fe:3d:77:fd:80:6f:6d:01:5f:c2:3c:13:26:36:
ac:49:78:25:06:a0:50:bc:0c:aa:41:40:21:54:58:b6:30:1e:
0b:94:26:e3:2b:a6:a8:b7:88:36:34:9a:f9:d8:84:ef:ef:e8:
61:1d:48:b1:06:ce:1c:00:4b:63:7c:f3:aa:c3:70:f6:1d:47:
39:28:86:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:06 2025 by rpki-client