Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ffbfffaa-7d21-3fb5-af0c-608e0908929c.roa
File: ffbfffaa-7d21-3fb5-af0c-608e0908929c.roa (raw, json)
Hash identifier: 3uuBhIQyCSLjxts+sanemr7+MWjbCGh2FLkWT2gNM1Q=
Subject key identifier: C4:E2:47:CA:D7:0E:16:C7:A7:4A:5C:96:6C:92:21:FF:DB:BC:50:A9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DFB14C0F83BB009005487B500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ffbfffaa-7d21-3fb5-af0c-608e0908929c.roa
Signing time: Sat 21 May 2022 12:00:00 +0000
ROA not before: Sat 21 May 2022 12:00:00 +0000
ROA not after: Sun 26 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.90.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:fb:14:c0:f8:3b:b0:09:00:54:87:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 21 12:00:00 2022 GMT
Not After : Jun 26 04:00:00 2022 GMT
Subject: CN=9dfdae68-f564-4db5-9e13-1c7aef475966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ed:cf:d5:58:7b:21:f0:7a:05:23:4b:cf:d0:
96:f7:e5:7a:8a:48:75:5a:dc:cb:2c:1e:f6:50:ae:
1c:e5:3d:a8:8e:fd:77:0b:f5:9d:65:d3:79:44:c0:
3f:6d:b6:11:11:e5:0d:4f:47:01:e2:d2:a7:5a:4f:
0e:b8:83:3b:a0:9c:bd:22:df:58:b9:bc:6b:1c:8d:
ce:88:e4:a9:ed:f8:fc:e0:6b:95:77:6b:4e:48:ee:
7f:ac:14:a7:ea:df:94:1b:01:d7:f1:9c:03:69:e5:
7c:88:77:c1:47:a5:95:46:7d:fc:bd:34:52:8a:7f:
d9:98:9c:da:2e:1e:39:f7:b9:9b:e3:d3:29:fd:e5:
ff:9a:cd:05:35:2b:8d:b6:92:f8:b9:c8:a6:35:1e:
49:60:b7:a8:c5:86:1b:21:55:27:1c:b8:6e:a7:ec:
f4:4e:bb:a5:b7:d3:db:57:7a:9b:76:54:d8:9a:fe:
66:c5:67:ff:b3:d8:df:1a:20:d9:69:ec:3c:c2:ff:
31:8f:e7:6b:be:2e:70:56:ba:9c:41:f5:c5:dd:d9:
ea:e5:aa:07:89:32:e0:c7:01:91:21:2c:b9:00:c3:
76:ed:f7:63:1c:78:e2:64:bc:9e:a5:a6:96:e9:99:
63:9d:c6:16:1a:25:e0:c0:f0:3f:d1:35:ec:88:ac:
fe:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E2:47:CA:D7:0E:16:C7:A7:4A:5C:96:6C:92:21:FF:DB:BC:50:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ffbfffaa-7d21-3fb5-af0c-608e0908929c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.90.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:2d:93:52:70:7c:96:4e:3c:86:fb:3b:df:6d:81:43:4c:0b:
b5:e5:7d:24:ba:d7:dd:0b:31:19:e2:1e:21:6c:6a:0f:6b:10:
50:f3:cc:44:f1:de:db:ef:dd:86:fe:d2:0e:0a:87:f2:01:bb:
7d:c9:8a:57:e0:c7:bc:53:3c:2a:ef:30:9b:ff:9b:72:d1:05:
e2:a5:8a:c0:db:ee:21:8a:9e:43:23:c2:46:7b:8f:58:47:44:
4c:9f:10:e8:a1:e1:76:ec:17:9b:f3:3c:1f:e2:75:03:c9:dd:
f3:91:5b:d7:06:6c:66:f7:45:42:aa:52:ad:85:51:8e:18:e9:
c8:8e:7b:ac:4b:2c:57:a1:c0:85:43:f4:1e:1f:9a:1a:61:ad:
af:5b:80:0b:3c:2b:80:ca:06:d0:d5:ed:82:0b:8c:8b:f5:21:
b0:4f:10:10:03:e5:e2:00:28:69:6b:e7:10:82:fe:56:ed:53:
ae:e9:09:9a:98:72:44:25:f1:06:a2:fa:f5:b6:84:6b:45:e9:
81:70:e5:71:92:19:56:5a:7d:e0:f8:0a:d4:b7:a2:54:de:86:
93:e8:c0:ee:f0:07:88:e7:ef:5a:14:b4:2f:c8:92:ea:ee:53:
49:1e:20:c7:4f:55:80:b7:87:1e:b6:c6:57:4b:61:72:9a:ab:
92:5b:51:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:45:37 2025 by rpki-client