Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34e06cd5-1970-3449-8ab1-3c28a30eabe2.roa
File: 34e06cd5-1970-3449-8ab1-3c28a30eabe2.roa (raw, json)
Hash identifier: 8SkhjfFimV5Az9dkAogFZCwfCavX27VlC/I1KzYrk8c=
Subject key identifier: E5:ED:65:7C:61:15:98:9E:0D:E5:BB:74:BF:B2:E2:4D:7C:A9:AB:C4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCDC408AFCF0D1DC7234D72D0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34e06cd5-1970-3449-8ab1-3c28a30eabe2.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.188.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cd:c4:08:af:cf:0d:1d:c7:23:4d:72:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=6bba3f7b-1c1c-478d-a8c4-2c2525616ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9b:94:13:64:a3:e3:8e:32:5a:63:32:77:cb:
ec:1a:33:69:82:20:8d:dc:3d:42:76:59:96:64:fb:
00:d9:4a:6c:6a:92:94:3f:b2:79:78:4c:90:ab:d6:
11:7f:ac:ee:cf:99:5e:0e:cc:3e:91:c0:8c:02:e6:
99:8a:f6:b7:c4:ba:dd:0b:23:b9:5d:0d:3a:23:59:
a3:b9:7c:dc:59:45:a3:a0:53:de:f4:9b:09:26:51:
ba:bf:43:6b:69:40:98:16:58:1a:37:59:cc:18:4b:
c3:19:f9:6e:5b:cf:2c:26:93:16:ba:f6:ac:1d:b9:
d7:40:6f:1b:65:34:d4:b5:10:65:ba:d0:40:ce:cf:
26:bf:df:32:48:5f:70:2d:bf:4f:c1:89:1a:62:55:
2f:48:80:07:31:61:68:7b:50:3a:32:62:c0:21:7b:
02:4e:e6:a2:c4:67:0c:1c:b2:32:ad:d3:59:e2:b4:
30:98:0d:17:56:41:f9:a7:a4:46:25:f5:a8:dd:93:
62:09:b8:5b:3f:87:bd:ce:2d:e8:16:d7:be:74:6b:
32:2f:00:01:6c:ec:b9:5b:7f:1d:9e:0c:86:43:f4:
25:7c:ba:92:77:50:42:4e:77:76:00:8e:ef:3c:01:
2d:49:5e:62:ca:ff:55:cb:b4:08:9e:91:03:78:73:
c4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:ED:65:7C:61:15:98:9E:0D:E5:BB:74:BF:B2:E2:4D:7C:A9:AB:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34e06cd5-1970-3449-8ab1-3c28a30eabe2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.188.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:12:4d:f5:15:40:a0:7b:e2:81:49:77:06:59:12:bf:d3:51:
f3:55:d7:33:ab:68:49:36:7a:8a:6a:e3:f6:cc:cc:f5:0c:e4:
57:92:f0:37:d8:bc:95:ff:3f:dd:c0:4a:6f:9a:8d:87:ce:50:
0d:ae:e3:e8:c2:1c:a8:74:27:01:02:cc:04:e0:56:9e:6f:62:
7a:42:06:e4:99:54:e1:39:53:8b:31:62:0f:2b:aa:65:5c:79:
fe:ff:c1:79:c4:27:39:57:91:12:e4:41:41:d9:23:63:a2:9f:
71:a9:02:a1:75:ee:90:ef:d2:84:6a:5c:c6:c4:24:83:89:4a:
5a:73:c9:1f:0a:e9:29:54:64:dc:de:36:df:c2:3c:5a:0a:be:
54:a8:1e:a6:cf:c0:28:32:aa:70:ab:96:85:3c:5e:25:6e:99:
5f:3f:bf:b3:7d:27:b5:e9:be:d3:1e:72:ef:f4:ca:e5:60:9f:
10:bf:66:cd:8c:3b:14:8f:56:aa:a9:a3:29:7d:f0:6b:dc:60:
17:b4:f4:cc:42:2f:81:c1:c2:28:3c:47:f7:aa:2a:83:16:22:
d0:63:59:6b:22:6a:ac:14:17:00:5a:af:d4:72:6d:11:b3:aa:
0b:62:a1:94:5c:06:e5:35:f6:e1:94:d9:37:99:0e:ab:f3:6c:
b9:65:7c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:01:49 2025 by rpki-client