Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd85bed0-1c17-322c-84dc-3f644cbc76b4.roa
File: fd85bed0-1c17-322c-84dc-3f644cbc76b4.roa (raw, json)
Hash identifier: 6mUlEjiUQpyMPHUIBY1HlCDWkIaII/7zFPAE8B5Re5g=
Subject key identifier: E7:48:AE:B4:CC:6D:37:53:53:EF:53:7C:5B:D1:73:BC:B8:C7:D0:95
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA9C36677482534C7FD49E5C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd85bed0-1c17-322c-84dc-3f644cbc76b4.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.102.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a9:c3:66:77:48:25:34:c7:fd:49:e5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=cab6a5a3-b865-4de0-b00e-c9add8186791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:6d:db:b3:8f:3e:88:c2:7a:c6:cc:2d:a1:
04:d0:da:26:ba:1b:63:81:b9:d6:bd:47:f1:f7:96:
27:8a:36:42:77:e1:80:45:ac:ab:ce:5d:b5:e7:c3:
bc:7c:9b:d7:82:84:3b:2c:50:04:ee:06:e4:53:71:
4e:9d:5c:3d:7b:48:24:38:bb:fd:f2:85:2b:70:8a:
ab:cb:72:3a:b9:e9:ee:61:e0:0c:41:c6:dd:c5:7f:
64:57:31:99:84:6e:ca:e7:01:f7:6a:32:ac:f9:ee:
ed:d4:29:11:1a:d9:b2:65:da:9e:d8:6c:55:81:52:
18:2c:8d:45:1c:3f:f8:e9:20:17:f9:0d:43:cd:8e:
72:de:7b:2d:d9:7b:02:7a:4f:54:c2:10:70:33:b6:
62:1d:7f:64:a1:99:13:66:0a:49:6e:92:72:7c:0b:
8d:94:2f:c5:9c:06:7a:d3:31:15:72:1c:0e:86:e0:
14:f8:48:2d:89:fa:cf:d8:77:ec:5f:0b:8b:db:08:
e0:2b:63:5d:dd:e9:5c:71:f7:6c:fd:0f:d8:92:e5:
6a:ae:87:30:4a:cb:51:9d:39:d9:4f:d3:8c:ba:9e:
27:f1:2f:9c:3f:db:9f:dc:07:ed:49:a1:0f:b9:3e:
51:32:ec:2e:8d:b2:4d:0e:af:c7:cf:66:56:24:ae:
95:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:48:AE:B4:CC:6D:37:53:53:EF:53:7C:5B:D1:73:BC:B8:C7:D0:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd85bed0-1c17-322c-84dc-3f644cbc76b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.102.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:a3:58:04:f7:ba:57:10:6b:4f:e2:29:86:9b:e6:d6:e1:7a:
a7:c8:36:a7:ae:88:bb:c4:c5:19:d5:c9:bc:48:58:3f:08:6f:
ed:cc:56:2b:93:85:25:bc:d5:8c:ca:5a:dd:1a:9b:3e:76:06:
ca:05:94:ab:36:58:d9:85:37:ac:8b:5a:ab:fb:4f:fc:e0:af:
ed:9f:81:e8:cc:19:be:8a:20:b3:94:00:ae:76:35:9f:2c:56:
eb:91:14:ec:7c:0d:52:3a:dc:e9:ef:41:b3:59:66:cd:b8:86:
65:31:cc:aa:2e:b6:67:f3:82:0d:46:47:a4:0e:87:6a:6e:62:
24:ea:33:cd:25:9a:64:bf:6f:03:ec:5a:47:03:b7:53:f4:a8:
8d:78:93:15:13:02:0d:16:5a:fe:1b:cc:e7:fb:88:c5:66:08:
a9:45:58:71:d8:24:a5:28:0d:b1:2b:ca:3a:f2:84:79:3f:16:
73:a3:0a:5c:65:8b:4e:a9:8e:c7:cb:c9:48:b1:9c:a5:eb:15:
b4:62:f8:3f:17:f3:57:7c:ea:94:f8:3e:55:2e:16:11:19:4f:
1f:e1:77:64:74:e3:bd:83:ee:83:d6:49:84:3c:2c:44:25:f9:
66:92:fa:cf:2e:f8:43:85:46:f0:0c:07:e6:7f:27:8f:66:1c:
2e:39:ac:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:10:26 2025 by rpki-client