Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/98afbdac-1198-3ecc-b4a0-ad38b90e12e7.roa
File: 98afbdac-1198-3ecc-b4a0-ad38b90e12e7.roa (raw, json)
Hash identifier: yjmYylMRXgp2tPJE/ooaZPUgLBc7rQbLgfplIYXbxtA=
Subject key identifier: BA:16:BB:36:5C:CF:2B:99:8C:B2:9E:C7:A1:E5:80:AE:23:48:30:F0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA9B49280A8ECD554F7E43DC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/98afbdac-1198-3ecc-b4a0-ad38b90e12e7.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.34.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a9:b4:92:80:a8:ec:d5:54:f7:e4:3d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=4557364c-b1d7-4d28-be63-9002af8f7f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:22:2a:1d:c4:60:51:ca:9f:b8:57:28:8f:53:
23:d9:eb:ad:02:f0:aa:5d:f0:54:3e:5f:d2:d1:17:
8d:ce:f4:d0:a0:9b:12:79:b7:44:e4:19:52:ad:a8:
be:45:46:8b:f7:16:f6:81:48:61:d8:c5:00:98:31:
b6:82:bf:f3:9d:ac:27:17:e5:dc:99:40:74:04:86:
99:8b:81:c7:34:2f:c8:a0:bd:2c:0e:fa:c1:dd:0f:
db:26:d0:f0:7b:78:79:e2:23:cd:8a:ac:14:e2:1f:
14:ec:f4:9d:0a:57:9f:af:05:00:54:2c:28:2b:97:
24:65:20:b2:0d:bf:fb:17:23:ba:0e:d2:bb:ea:ad:
ff:78:ef:76:f8:14:c4:92:89:fd:01:a9:80:c9:c1:
4f:eb:8c:cb:fa:0f:62:3e:c6:ca:dc:9e:c9:8b:09:
ff:b1:17:00:4c:97:9a:9a:33:dc:64:de:ad:5d:8a:
9d:be:12:67:3b:db:d6:0a:ca:d7:d1:fd:27:ef:ee:
0b:0d:cf:aa:75:f4:98:2e:53:9e:29:b5:92:fa:ed:
be:1a:62:c9:e7:1f:57:8e:a2:65:a6:af:e1:9b:bb:
83:70:e0:d2:85:07:37:0f:97:3f:bb:a4:3b:a2:b2:
e3:5a:1c:f3:f5:16:23:29:de:a8:02:b9:e2:8e:6a:
44:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:16:BB:36:5C:CF:2B:99:8C:B2:9E:C7:A1:E5:80:AE:23:48:30:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/98afbdac-1198-3ecc-b4a0-ad38b90e12e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.34.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:3a:f7:4f:11:c4:84:f3:94:e0:c9:9e:03:f8:d4:7b:44:57:
e1:31:42:7f:54:75:53:f7:f5:e6:d0:35:fa:4e:72:8c:96:01:
8d:18:6d:0d:f8:0a:cb:c4:de:06:79:77:69:f2:34:46:dd:43:
9d:94:b6:35:16:8c:06:79:a4:1e:3e:c5:ec:dc:6c:03:0d:5d:
7b:ac:2f:ae:f7:0c:d2:54:6c:3f:45:7e:03:41:c6:d5:d3:b2:
b7:eb:b2:93:ff:60:4d:13:0a:45:f1:83:1e:88:fa:28:a2:01:
e1:95:b6:74:af:04:42:7a:9d:8b:1a:d4:68:2e:a9:d7:5f:6f:
ac:07:12:d7:08:fc:90:d2:7c:2b:3a:d9:25:a5:c5:66:fa:07:
7f:9f:af:2e:19:fd:5a:93:73:b1:13:c3:fe:7e:90:5a:20:48:
86:07:bd:8a:ea:ef:33:ff:09:dd:6c:ee:fd:1e:e8:21:05:0a:
af:d6:6c:2f:50:ae:5e:ad:51:00:f5:54:e7:be:0b:42:84:e4:
73:09:59:c7:d0:89:5f:18:8e:51:70:d3:0a:b0:50:c4:ae:90:
93:11:da:e5:e8:63:45:9a:33:9e:bd:d9:97:19:02:68:60:8d:
27:09:e9:bc:a4:10:19:b0:c5:3e:e1:85:e9:e2:71:6d:cf:f6:
15:10:84:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:19:27 2025 by rpki-client