Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/35753de8-89dc-3680-9612-61137c856430.roa
File: 35753de8-89dc-3680-9612-61137c856430.roa (raw, json)
Hash identifier: RTs3k/yKbEaFStCUeJfx+AKgZWIsLGWzxo6aieHtS0o=
Subject key identifier: 90:9E:B6:64:99:79:88:3E:12:CB:9E:CE:20:7B:5D:C7:0E:57:76:2E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B8E1B1112B531F3993D20100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/35753de8-89dc-3680-9612-61137c856430.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.160.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b8:e1:b1:11:2b:53:1f:39:93:d2:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=b6e57d95-3372-43b6-8b60-3d165401504f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:9b:0b:18:79:6d:64:70:af:67:b6:7f:7d:
14:7b:af:87:fc:bd:18:b3:9b:d6:63:f2:a0:47:e5:
bc:66:90:e8:da:46:46:15:a1:6f:d0:2f:c4:04:9b:
2d:de:15:53:13:76:1a:a0:2b:24:f7:6f:af:a0:45:
40:d0:b1:5f:e1:ce:d8:13:88:57:6d:6c:66:39:b7:
1b:3c:b9:49:84:a6:a6:1a:ef:0c:64:bb:15:fa:70:
6e:c6:e0:41:7c:6d:74:33:68:cb:fc:61:32:23:ec:
32:72:aa:d4:56:0b:72:8d:d5:6f:a5:5c:1e:fa:67:
cc:0a:43:0f:e4:0b:2e:6d:9c:7b:03:cb:ce:78:ec:
5b:db:83:05:1a:e3:9d:42:db:6a:15:9b:f0:62:35:
d9:a0:69:46:d8:a7:37:9e:42:e2:17:c6:bf:e5:a7:
ac:56:8d:1e:d2:f6:1c:13:d5:19:3d:c6:3e:b7:c4:
a0:e6:a0:9c:7b:c4:9b:56:89:a7:f3:7b:55:84:55:
80:71:62:d1:36:22:c6:c9:b9:63:a8:cf:db:72:94:
8b:87:46:a3:5b:f8:76:56:f2:7c:1c:22:2c:76:1f:
92:20:86:52:45:6c:c8:cf:38:e8:10:72:97:41:4a:
ea:9d:b4:c9:d6:c8:75:2e:16:91:93:5f:b7:0c:66:
7d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9E:B6:64:99:79:88:3E:12:CB:9E:CE:20:7B:5D:C7:0E:57:76:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/35753de8-89dc-3680-9612-61137c856430.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.160.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:a7:d7:05:f8:5f:4d:48:08:b7:37:a3:e9:3b:90:fe:fc:55:
fd:a7:7f:08:76:57:ca:3a:c3:18:24:98:bf:fa:12:31:94:a6:
99:1e:61:25:d4:b3:78:bb:7e:bd:4e:1a:7f:18:2e:b4:2a:59:
79:ba:42:cf:d5:d5:5c:4f:75:d9:26:55:ea:68:e0:1b:6f:5e:
b6:fe:7e:7d:16:95:09:e9:0d:a6:79:08:bf:fb:69:ab:39:e4:
88:e4:ad:f1:bb:d9:13:e3:16:a0:59:0c:c4:91:bd:17:c6:eb:
5a:90:0f:45:6f:eb:d1:2b:3c:b6:e1:b3:c4:a3:99:9b:ca:ce:
f0:28:ab:1a:92:e0:c9:c1:9c:23:10:ec:01:2f:47:bc:be:4c:
96:45:46:0d:d6:35:87:c3:4d:b7:70:b2:54:72:0b:ec:fb:0c:
9c:f9:fd:03:3e:10:17:3e:8f:95:06:38:f4:da:be:2b:94:e0:
77:51:62:6c:ed:25:0d:6f:e7:ad:64:20:c0:ad:95:bd:01:36:
65:8d:e3:e3:20:69:41:e9:74:dc:be:f2:1b:dc:55:4f:c1:1b:
79:84:1b:d7:86:4a:d0:95:89:da:ad:0c:43:33:36:cf:eb:cc:
7a:a9:1e:74:23:90:11:6b:8b:42:92:c0:d7:68:7d:c8:3e:77:
5e:d1:8d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:37:56 2025 by rpki-client