Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/398b41ca-8273-30f1-8211-be172f834471.roa
File: 398b41ca-8273-30f1-8211-be172f834471.roa (raw, json)
Hash identifier: FBvv4ufcFqWPs8qZLHr9trmcHIyvEsr2dXlS/vb/0yI=
Subject key identifier: 52:97:32:D9:98:FB:77:DD:B8:70:E6:A7:95:40:BE:9E:68:C3:EC:56
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF7B2F1F7FB2686923121AA40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/398b41ca-8273-30f1-8211-be172f834471.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.35.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f7:b2:f1:f7:fb:26:86:92:31:21:aa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=d012c072-2bb6-41df-bc28-b0e2f82b6d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:17:3b:11:f8:11:40:98:98:6b:25:d9:a4:
0e:9f:6e:8a:a6:52:56:e5:a7:4e:13:55:87:b0:21:
7a:c2:20:fa:c9:6c:20:21:d7:ad:a0:92:57:41:ec:
da:7d:a9:ee:f5:11:e2:92:69:fc:66:3b:ef:6f:36:
42:4f:cf:dc:fd:57:30:08:7b:29:90:fa:71:b5:be:
7b:8f:01:3c:87:4b:09:a6:65:2a:21:20:48:17:f8:
00:64:43:ce:2d:69:39:7d:e0:4f:2e:00:0a:3b:6e:
8d:5b:ad:d0:02:7a:2f:83:87:a4:2e:1f:f1:98:f4:
ad:59:55:e9:39:90:65:ea:36:dd:58:1f:a7:38:c4:
42:f5:29:26:5a:08:8d:af:43:ce:09:0b:22:58:20:
65:f6:bd:74:8d:2f:98:fa:1d:0c:1f:b0:49:1a:e1:
8a:6e:72:0c:f6:5c:65:cd:5b:6b:6f:72:1f:43:1c:
20:45:35:36:66:22:a7:ad:62:01:42:21:57:a7:c3:
00:ff:bf:8c:1b:1f:e3:8e:97:37:35:be:e8:a5:12:
c2:14:e6:87:93:4c:b9:0b:58:83:59:8d:cb:70:60:
0e:bc:55:65:36:72:ec:11:4d:b2:6e:e5:6e:98:49:
bc:5f:57:3e:b8:d4:47:d5:09:63:30:f5:80:38:56:
5f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:97:32:D9:98:FB:77:DD:B8:70:E6:A7:95:40:BE:9E:68:C3:EC:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/398b41ca-8273-30f1-8211-be172f834471.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.35.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:3e:58:86:03:16:a8:2d:5c:03:8c:21:af:44:38:38:1b:3f:
ed:3a:b0:88:2e:ea:a6:86:e6:bc:da:63:62:ec:12:9f:94:fa:
53:ba:4e:37:96:3a:69:20:d6:eb:d4:c4:60:e5:d4:78:b0:7e:
c7:81:84:b2:0a:35:3b:35:39:2a:be:c1:1b:c0:52:0c:f1:dd:
e7:7f:35:55:3e:1b:5b:b2:72:23:6a:06:ef:c4:7a:54:47:26:
2d:bd:9d:a9:97:29:f8:d0:0f:04:11:f7:91:06:5f:cc:28:a3:
ca:77:d7:52:aa:98:17:6b:0f:e5:70:3d:08:7a:af:d3:98:3e:
fa:5f:96:df:52:30:55:c2:26:e7:da:a8:ad:e8:f5:92:9a:25:
40:ea:77:5c:07:af:15:f2:5a:49:24:13:45:1f:53:04:58:99:
ea:b3:dc:eb:14:73:00:19:45:94:2f:1e:64:f1:3a:1d:b2:80:
49:c0:c3:81:1e:a7:0e:d0:62:44:31:1b:bf:30:96:76:83:8f:
7c:7b:1f:3c:e7:a1:e1:7e:1c:f9:f6:8b:12:db:82:9b:e0:45:
9f:f8:5a:0d:28:ea:5d:f9:bb:9b:e3:eb:f3:f4:3b:1b:b4:a1:
d8:62:af:76:f3:26:95:d0:20:d2:6b:10:64:ac:e0:7d:8f:f5:
5c:5d:84:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:55:47 2025 by rpki-client