Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c2800b6-3ad8-3f16-91fd-5d699ae09684.roa
File: 2c2800b6-3ad8-3f16-91fd-5d699ae09684.roa (raw, json)
Hash identifier: wx0B7BG4otreYZt2Doz11di/JpJLqBVbAKZAepwvyrU=
Subject key identifier: 7B:0E:D0:3C:B9:81:8E:3A:2F:39:FD:0B:B8:3B:95:30:ED:A4:A8:49
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E70BD5E3735E4BF46FBF3F980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c2800b6-3ad8-3f16-91fd-5d699ae09684.roa
Signing time: Sat 02 Jul 2022 12:00:00 +0000
ROA not before: Sat 02 Jul 2022 12:00:00 +0000
ROA not after: Sun 07 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.34.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:70:bd:5e:37:35:e4:bf:46:fb:f3:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 2 12:00:00 2022 GMT
Not After : Aug 7 04:00:00 2022 GMT
Subject: CN=d5921189-4935-4d61-b470-df51a1ba8848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:4f:b4:f7:40:2f:94:dc:3b:de:94:c1:d0:
80:58:40:7d:84:76:55:7c:7f:8f:08:c9:c0:ca:ba:
d3:20:87:9b:82:5b:80:56:85:62:80:06:9d:5e:cc:
8f:85:f4:c5:2c:87:9d:de:fc:05:9b:8f:bf:a3:6e:
c4:fe:39:42:65:6f:d3:39:f7:12:ba:67:55:42:a9:
e6:84:28:3d:3a:ae:c0:63:5a:45:2c:1e:91:f8:99:
cf:6c:81:c3:e7:4d:55:7e:a0:c3:0e:52:b3:a2:3d:
d9:20:5d:63:6f:2f:f4:fb:b4:89:75:7a:ad:0d:15:
c2:17:a9:f9:ed:24:15:ae:61:85:7f:2c:57:c1:04:
2d:e3:6e:89:52:ed:24:7b:a8:41:2d:9a:d1:f2:06:
e8:67:65:fc:2b:da:ba:dc:af:47:22:75:81:19:ec:
88:56:cc:50:72:22:f3:59:17:e8:56:d7:df:6c:e5:
97:c8:ff:44:22:1c:53:a6:13:a1:7d:e7:4f:c4:9c:
3e:1f:e9:6d:8d:e0:1b:57:b1:2d:ca:ff:2f:c8:45:
d4:b4:6c:6b:6f:f6:29:0e:26:78:c8:e3:9c:df:1e:
c1:ab:7f:75:c8:c8:28:46:59:11:b3:5c:41:07:47:
c9:ae:bc:e1:b1:1e:98:f0:7f:21:c6:c1:16:fc:30:
7b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0E:D0:3C:B9:81:8E:3A:2F:39:FD:0B:B8:3B:95:30:ED:A4:A8:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c2800b6-3ad8-3f16-91fd-5d699ae09684.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.34.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:b5:34:d3:42:3c:39:23:d3:29:fd:1c:ca:6e:90:b8:c1:f2:
bc:dc:31:42:fd:05:4e:5d:51:17:e8:80:79:96:4f:9b:35:fc:
ed:00:02:6b:34:e1:04:08:e1:76:76:d6:fe:87:09:d6:69:8b:
aa:cd:3a:0c:1e:b8:a8:70:7c:72:19:f2:69:4d:57:0b:86:a2:
ef:33:09:7e:1d:4d:0f:34:0d:8d:57:93:c0:4a:79:29:31:55:
df:f4:26:3a:e1:bf:2d:9a:5f:98:49:d6:b8:3d:63:08:67:1d:
37:17:dd:9d:4e:3e:21:22:6f:24:ec:51:b8:bd:20:90:26:4c:
65:70:29:86:ca:a2:d6:c9:99:f7:3a:c8:d7:71:df:12:22:a3:
68:13:0d:43:a1:8d:f7:e9:75:49:3f:35:4a:35:8a:75:e0:51:
f4:89:9c:35:be:f3:87:35:48:41:ba:fd:36:94:57:3d:ce:b3:
46:5f:22:03:19:8c:db:57:2e:b9:e7:60:04:98:62:3e:0f:6e:
99:d9:67:ac:86:05:0a:83:a0:3c:59:15:97:57:80:1f:9c:4f:
34:a0:20:be:1f:f1:3f:ac:de:a5:47:19:1d:8c:16:88:10:41:
5b:42:9b:7f:a7:9e:f1:38:40:1f:46:69:1d:e2:21:bb:08:85:
ae:ce:52:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:00:49 2025 by rpki-client