Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/82da917c-1ea3-31e3-84d2-8d362171e598.roa
File: 82da917c-1ea3-31e3-84d2-8d362171e598.roa (raw, json)
Hash identifier: Yf+KxT9KkX+mrRqafkpmTzAVVFab1B4eUqfknC1TNwc=
Subject key identifier: 34:4E:9D:9E:1D:23:1D:75:8B:1C:17:56:F4:DC:8F:D3:07:4C:41:DA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7F9134DB2282B02360C2AC00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/82da917c-1ea3-31e3-84d2-8d362171e598.roa
Signing time: Fri 07 Oct 2022 12:00:00 +0000
ROA not before: Fri 07 Oct 2022 12:00:00 +0000
ROA not after: Sat 12 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.204.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7f:91:34:db:22:82:b0:23:60:c2:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 7 12:00:00 2022 GMT
Not After : Nov 12 05:00:00 2022 GMT
Subject: CN=b37b4047-11f6-4b79-9fb8-49299701a5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2a:37:82:50:9e:e4:5e:d2:b6:04:59:d9:e1:
b7:5e:66:a9:ff:3e:03:e1:f2:bb:be:1b:bc:ff:b4:
7c:5b:81:e6:e5:f5:54:9c:1e:44:7c:f2:2b:9c:00:
8e:62:c0:7d:86:e1:e4:db:63:c9:a5:bd:5e:ef:f3:
db:72:d8:b0:42:5c:88:75:1a:d4:c1:93:97:45:a4:
5f:49:36:09:c6:99:76:ae:81:72:da:e7:c3:f8:5d:
d4:cc:40:7f:98:fb:61:00:78:77:de:ee:d2:e4:59:
53:5e:92:9c:7c:b6:7a:5c:ab:dd:7c:3f:8c:10:3e:
47:53:39:c8:50:d2:b4:fb:46:e9:89:00:58:59:b1:
0b:ad:77:dc:ef:3f:b1:7a:5f:2c:0b:49:fe:3d:44:
16:aa:9e:4c:c2:44:fd:ff:e1:d9:fc:4e:51:90:fe:
9a:b0:5c:02:f6:82:aa:1b:0e:fa:99:c7:68:5f:10:
bb:59:fe:4c:a1:7e:82:f3:3d:b4:9a:9c:9a:3c:74:
62:ca:5d:f4:b6:83:15:45:c6:07:13:0d:0f:d5:d5:
97:90:e8:2b:bd:12:57:61:9b:bd:0c:7a:2b:4e:96:
10:34:1b:33:b8:e7:ea:c0:9e:b7:b9:55:12:56:3b:
b7:d1:04:38:3c:70:a3:d0:a8:64:e4:96:c0:50:80:
fa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4E:9D:9E:1D:23:1D:75:8B:1C:17:56:F4:DC:8F:D3:07:4C:41:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/82da917c-1ea3-31e3-84d2-8d362171e598.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.204.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:17:7f:2d:57:38:87:c6:18:e1:e0:c1:3a:6b:12:1d:57:fc:
33:2b:54:1b:01:98:9a:19:b2:1e:c7:d8:e2:94:7d:cf:25:aa:
be:e7:01:f1:43:24:d8:66:9c:c9:c6:ef:4d:c2:65:4e:38:ec:
38:7a:8f:8d:aa:6c:e9:65:8c:8e:cb:66:6b:3b:75:7d:20:b5:
4a:0d:e2:c0:f6:d1:5d:51:57:8c:22:87:64:cc:f1:1b:62:f8:
8c:17:ae:f1:69:35:39:96:61:1c:b1:5e:e6:4e:d4:74:1e:f5:
34:6a:9f:8d:85:00:3c:20:56:5f:c1:0f:59:e3:83:38:23:41:
17:fe:cf:6e:4f:a0:6d:33:c5:49:11:b9:52:c7:45:fe:d2:68:
e4:0e:34:24:af:6e:b2:1e:d5:b0:9d:ac:5f:22:54:98:4a:0c:
f0:cb:93:cd:6f:8d:6b:79:29:0c:20:67:29:cf:ee:d4:48:33:
43:29:75:93:45:0b:a0:7a:1a:87:5d:9a:fe:e7:50:77:6a:a7:
fd:6c:09:30:2e:25:60:fd:1e:0a:0e:27:e0:46:b3:fd:31:9f:
85:c3:c0:65:04:c3:40:8a:ef:2e:3f:e7:47:57:b8:93:f7:c0:
35:4b:82:b8:0f:32:90:4b:7f:7c:ab:08:a2:40:ad:f7:37:21:
8a:f4:ec:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:00:11 2025 by rpki-client