Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/35199cdd-e1f7-31ba-9440-f7e2ad3e3974.roa
File: 35199cdd-e1f7-31ba-9440-f7e2ad3e3974.roa (raw, json)
Hash identifier: vgiXN0TEMNCrsarqlmJgET85NyGj+nSr8LkDJe4ZUkc=
Subject key identifier: 14:CC:3B:F7:18:B4:F5:CB:D3:93:BB:A5:96:68:6F:44:72:38:A7:A8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DFB05A463E2D63699B1AC21C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/35199cdd-e1f7-31ba-9440-f7e2ad3e3974.roa
Signing time: Sat 21 May 2022 12:00:00 +0000
ROA not before: Sat 21 May 2022 12:00:00 +0000
ROA not after: Sun 26 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.48.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:fb:05:a4:63:e2:d6:36:99:b1:ac:21:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 21 12:00:00 2022 GMT
Not After : Jun 26 04:00:00 2022 GMT
Subject: CN=923c0e36-b912-4f3a-b5cc-4ced4a05079d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:50:35:a9:05:c4:ae:64:d8:8c:00:9f:b3:42:
ff:05:d6:3c:d2:a4:d0:50:44:91:30:e9:b2:9f:7e:
5e:12:b2:bb:47:73:4a:32:28:83:7e:00:cb:d1:4b:
7e:e4:ea:eb:bc:e6:45:55:ea:d4:6a:2d:d3:c3:c9:
4e:92:8c:17:95:a3:0d:1d:8f:a5:ff:ac:6a:9f:43:
67:6f:cd:85:0a:ac:de:14:27:25:d2:46:40:0c:60:
81:07:eb:e7:db:1d:88:76:7e:7d:dc:2e:e9:1e:5f:
f7:5b:f1:75:13:a2:65:53:07:9e:a9:f3:2b:84:0f:
98:76:f5:6a:44:56:5e:f3:8b:fa:ef:c8:24:5d:c0:
90:ff:ed:f5:d2:b5:df:80:90:5d:25:cb:8e:98:e3:
c9:04:6f:68:7c:a7:92:b7:b9:0e:27:1b:cf:aa:2b:
3e:1f:99:46:0e:bd:19:93:ee:93:a9:ed:82:e1:96:
59:91:f9:5d:52:fc:67:3a:99:a0:a4:07:48:bf:fb:
ac:b8:69:7a:83:91:f8:f1:9b:81:c7:78:99:4f:7e:
86:80:67:2d:a9:14:a4:d2:42:bd:38:28:71:8c:02:
b8:96:14:52:6e:c7:da:78:fd:20:74:24:6b:f6:73:
fa:fa:28:6a:40:21:16:44:34:9c:ae:af:93:da:60:
19:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CC:3B:F7:18:B4:F5:CB:D3:93:BB:A5:96:68:6F:44:72:38:A7:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/35199cdd-e1f7-31ba-9440-f7e2ad3e3974.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.48.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:86:66:22:4b:7e:48:6c:26:f1:b0:11:36:b2:a1:62:c7:b1:
61:dd:da:c5:b3:ac:f6:7a:db:8c:0a:6e:b9:62:0a:b6:59:27:
fa:10:0e:e8:43:81:44:75:18:2d:f6:38:5a:66:5f:0e:a8:85:
86:61:ac:bb:03:58:c0:c5:8a:8e:9f:74:fd:62:2f:2d:0b:a6:
1c:4d:62:b7:1a:68:15:20:c4:09:34:20:cd:cf:25:fb:0b:3a:
5b:0a:82:c9:ea:c4:de:93:f0:87:8f:bd:29:b9:74:72:04:4d:
29:7f:62:8d:64:7e:69:12:8b:9c:f7:f6:92:ea:f1:f2:bf:60:
48:08:e1:62:ad:fb:41:e6:12:ed:3d:8f:bd:7f:27:da:29:2b:
bb:09:b3:cf:2e:4a:2b:3c:f0:18:73:15:64:da:ba:d6:81:99:
d7:61:43:b7:d8:44:bf:93:d4:91:9d:38:d7:14:cb:4c:8c:30:
e7:30:9f:9e:87:00:45:92:a9:a0:56:93:56:6a:a0:b5:a2:5a:
ac:a0:7c:f3:fc:23:ff:42:e6:d2:0b:6f:5b:ef:fd:08:68:41:
6d:d1:8f:8f:7f:34:d0:1c:c7:02:c4:fb:49:a5:d8:aa:57:fe:
98:e3:fb:2c:70:04:89:9b:c1:ed:4b:03:66:f6:cf:94:78:63:
4b:1d:15:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:32:15 2025 by rpki-client