Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/05eba617-2be5-3ca4-a834-69d05333e3e6.roa
File: 05eba617-2be5-3ca4-a834-69d05333e3e6.roa (raw, json)
Hash identifier: 6QKfrExPI9KwebNgcJ1XU6GWha71w93xwsMtxzwWMZU=
Subject key identifier: 3F:88:52:FD:B5:F2:E8:D7:0C:DC:73:3C:3A:53:67:A3:93:4E:2E:9B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858404628CB3051B076F815D25F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/05eba617-2be5-3ca4-a834-69d05333e3e6.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.34.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:46:28:cb:30:51:b0:76:f8:15:d2:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=38df7a73-6c2c-418c-bda3-9fcc3956390f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:12:2b:29:1b:d5:ed:3f:44:7d:bb:ff:d7:07:
6e:80:fd:cd:7c:99:2f:94:1c:67:5a:03:70:46:4f:
87:aa:ba:43:a5:b2:7e:33:67:97:a4:c6:91:aa:bb:
04:c1:94:38:5d:f3:82:5b:4e:2c:ca:97:68:4c:2d:
3e:40:9b:c7:7f:db:1a:27:99:2f:0f:09:bd:c1:a1:
a3:86:b4:32:e1:f6:4d:91:36:75:d7:dc:22:a5:d8:
42:06:4a:82:04:6a:2d:a7:e8:e2:c3:d4:4a:fa:61:
60:15:f1:d7:f6:82:ce:c7:53:f6:f1:68:78:cb:e3:
a5:52:22:3e:11:08:10:37:97:64:49:c0:2d:f4:86:
fe:49:e9:52:32:a6:51:d0:03:b1:cc:61:28:1e:2d:
fe:5c:54:2f:d3:fa:c4:2e:bb:33:7c:0d:42:b8:fe:
b6:65:31:54:bf:be:ee:d5:91:ba:c7:15:63:a3:f8:
52:74:90:29:3b:34:b7:32:d6:00:b2:fe:cf:75:17:
86:53:ea:69:55:d4:9a:df:f6:c4:7a:57:c2:42:05:
50:af:93:ab:ed:27:89:2d:d2:92:b7:0b:0a:6c:aa:
b7:9e:67:97:f1:43:1b:22:70:61:41:9c:00:5d:74:
10:fa:8b:47:2a:59:01:8b:cc:09:e5:b3:72:d1:62:
01:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:88:52:FD:B5:F2:E8:D7:0C:DC:73:3C:3A:53:67:A3:93:4E:2E:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/05eba617-2be5-3ca4-a834-69d05333e3e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.34.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:bb:a5:c0:72:5b:14:db:39:21:58:51:59:f1:d6:0e:ce:3f:
28:94:14:95:bf:6e:a7:f4:1a:dc:d4:41:38:cd:a3:35:5e:42:
40:b7:f5:f8:58:26:8d:e4:e2:a0:d6:d1:82:48:3b:f2:93:9a:
e5:a1:75:27:51:29:f1:42:b5:8e:3f:c5:d8:95:88:e3:75:43:
4b:29:0c:9f:d9:15:74:9d:bf:76:81:ce:ae:fe:2c:1b:09:13:
87:fd:8b:45:84:7f:45:0d:75:bf:2f:43:e0:d4:cd:fb:40:a5:
57:3b:a4:b5:1d:67:a8:c3:08:0f:15:58:bc:b5:ec:9c:96:97:
0b:a6:a3:0a:a6:df:62:56:66:af:cf:e9:a1:b9:08:7b:e8:a2:
2a:bd:80:cb:b3:2b:87:b7:2b:d7:90:d3:8c:be:87:d7:a1:37:
88:26:57:e1:5b:16:95:c4:bc:0f:08:9e:c2:16:b4:74:f5:9e:
12:65:bf:86:40:44:77:7a:d3:a9:89:2c:0a:17:c4:d3:b5:9e:
50:60:77:5f:cc:8b:a5:14:85:0e:d2:fa:aa:0a:63:b8:14:85:
50:a9:f2:b4:a7:86:be:80:5b:b8:50:51:9b:70:0d:28:b1:b3:
83:fc:55:bf:8b:f1:0c:5a:9d:72:fb:b9:ea:02:dd:cc:08:ad:
b8:89:39:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:08:59 2025 by rpki-client