Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/18938471-821e-3fb2-94f6-7cd0f9eb8121.roa
File: 18938471-821e-3fb2-94f6-7cd0f9eb8121.roa (raw, json)
Hash identifier: v/V/Shyt1XxOJlvjA5u2+ktV/w5q9k5D4xmBV11WdCk=
Subject key identifier: 68:D6:FC:68:9C:99:4B:3D:42:9E:BC:F3:2D:83:33:F3:96:62:0F:58
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840202670F2EFD6839821B5B540
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/18938471-821e-3fb2-94f6-7cd0f9eb8121.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 35.160.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:20:26:70:f2:ef:d6:83:98:21:b5:b5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=7d2398b5-e494-4369-99f5-2e538cc8fe45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:76:0d:aa:23:1b:41:65:07:89:c9:1f:fc:
93:76:88:cd:44:f6:36:50:5b:4b:7f:35:7d:4e:11:
0f:74:d5:f1:80:5f:37:22:de:20:25:de:af:6a:74:
79:e6:0b:2f:bd:9f:7e:63:f5:fe:ae:16:f6:b2:75:
43:fe:f3:2e:b3:f4:6e:c8:e2:86:0d:28:a4:c4:30:
b2:0f:3c:53:4f:a9:5b:41:67:6a:fe:bc:7b:f6:0f:
6f:79:e2:5b:ba:e6:1d:f2:1e:83:39:d8:8f:59:9c:
8d:4a:d0:b9:07:9d:25:e8:a0:66:8a:2c:ca:ef:64:
75:90:27:2d:6d:96:67:11:34:c4:bc:b7:26:2c:e2:
11:b7:5d:9b:ac:ea:23:3f:58:37:1c:59:a7:22:53:
6d:95:41:39:c5:82:43:42:8c:b5:33:04:61:cf:15:
72:f7:61:bc:da:85:8c:15:d6:67:bd:9b:0f:aa:41:
f5:7c:db:58:20:80:66:85:e0:7d:13:29:8b:c7:e6:
41:72:db:ba:1b:90:c9:fe:56:c1:26:62:1a:54:da:
a1:3b:d5:0d:b2:29:40:5c:fd:96:d8:cb:65:77:53:
1d:63:2d:9e:d8:81:e1:b8:bb:cc:1a:3e:e4:8b:f6:
8b:a6:9b:2a:27:17:69:09:45:23:a2:7d:31:2e:1c:
46:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D6:FC:68:9C:99:4B:3D:42:9E:BC:F3:2D:83:33:F3:96:62:0F:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/18938471-821e-3fb2-94f6-7cd0f9eb8121.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.160.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:64:dd:67:6e:da:d9:57:70:42:a9:86:9b:d0:20:f9:b2:a9:
f0:10:94:9f:3f:16:90:9b:78:49:78:ca:fa:02:d5:92:65:96:
16:4e:58:cd:21:ed:93:92:f7:2a:4e:04:b1:25:b0:d7:33:6c:
d7:e7:94:4f:fc:47:ba:f2:4b:53:eb:d8:4a:6a:d4:a6:f6:49:
88:8c:3a:8a:d1:18:5d:2e:05:93:38:a4:83:0b:fc:a8:85:03:
d2:de:9d:c9:e9:c2:57:07:25:e0:32:81:6c:cb:7b:7c:99:a5:
37:48:04:34:8d:51:f0:3d:26:c4:4f:63:07:8e:5b:bd:65:07:
82:e6:71:61:ff:1a:10:69:ee:7a:f5:b5:5f:a2:f0:28:49:cb:
52:15:df:4b:f6:98:f5:b6:a4:03:70:1c:98:14:c6:e5:54:1a:
e6:0b:72:7a:83:84:ce:b4:20:17:cf:41:b8:46:a3:5b:a1:27:
61:00:d2:19:0d:2b:50:92:12:83:7b:85:a0:1e:ff:dc:b9:63:
6e:1c:a6:ec:9e:c2:54:c4:7c:2c:ba:53:bc:52:ff:2e:d3:69:
50:51:66:08:0d:68:73:bc:2f:6d:ad:91:50:5d:08:b9:b7:e3:
ae:0a:59:ce:6c:33:13:4c:44:ac:7e:09:59:8a:2b:67:f9:b7:
84:74:10:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:00:28 2025 by rpki-client