Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9c148b3c-fa1f-3e14-96ba-9f0a429234ef.roa
File: 9c148b3c-fa1f-3e14-96ba-9f0a429234ef.roa (raw, json)
Hash identifier: BSpTu5pee3GiYVVpVM27VpKssfXMrBJS64le0BDANK0=
Subject key identifier: 97:2C:1F:91:3A:27:AD:48:5B:E2:BC:6A:43:47:5D:FF:B7:8B:F9:33
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE4063728EAA99D1188925FC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9c148b3c-fa1f-3e14-96ba-9f0a429234ef.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.35.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:06:37:28:ea:a9:9d:11:88:92:5f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=38c5cc75-6497-4356-9046-bd2a6a6111d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:74:ea:0e:0e:f5:b0:a4:8c:19:a4:e2:89:fa:
5d:0b:88:f5:6f:81:24:ee:b6:d7:18:55:39:b9:a9:
7c:2b:6c:0a:d6:1e:5e:77:94:26:f9:1e:38:e0:cb:
c5:44:e8:ad:dd:f6:11:b6:f0:22:54:83:a1:80:83:
f1:98:1c:59:0e:fb:c0:4a:a8:8a:69:67:34:93:80:
d7:26:38:43:66:47:c8:1a:be:bb:37:14:97:8e:c7:
87:d4:fe:73:fb:cd:25:81:40:2b:7c:e9:28:e0:53:
21:1d:da:04:78:cf:a0:26:d2:2e:09:13:87:e3:f1:
0a:27:c4:54:65:c2:ca:59:8b:1b:03:78:2a:ee:11:
ab:86:b9:2e:9f:da:de:6c:45:95:a1:98:9f:a9:a6:
bf:f5:e0:ba:1c:e7:81:3e:7b:91:78:c6:74:e3:0f:
43:b7:42:1b:22:37:23:9a:9b:cb:e2:64:23:ab:7f:
c4:3d:b8:6c:40:7d:14:4a:c7:30:5d:cc:a0:fe:45:
20:ce:48:33:80:01:8f:b3:91:62:40:93:6a:a7:7a:
7e:31:47:33:50:6d:ec:da:25:6d:55:99:1f:47:be:
96:19:ff:07:da:91:28:6d:2f:f8:ed:19:70:63:2e:
c2:d3:42:ba:f7:36:87:c8:02:f9:e0:84:6f:a8:9b:
df:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2C:1F:91:3A:27:AD:48:5B:E2:BC:6A:43:47:5D:FF:B7:8B:F9:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9c148b3c-fa1f-3e14-96ba-9f0a429234ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.35.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:bc:f5:0c:1f:13:74:13:22:03:ca:19:aa:08:7b:15:bf:15:
66:48:6a:81:52:cd:2c:e2:95:23:8e:17:b2:f8:6c:34:d8:0c:
6e:90:87:91:68:da:9f:2d:79:25:6e:a8:3e:54:05:e2:90:6e:
d1:81:fa:f8:32:ad:94:f7:11:9a:3f:81:75:2c:26:3b:14:76:
b5:be:e1:5f:0a:75:22:af:b3:ad:b5:b0:6b:81:8a:5e:59:f2:
93:7a:1e:45:48:ad:62:7e:82:20:3a:03:c8:60:17:80:2f:10:
04:8a:9d:f3:81:85:6e:c7:81:38:8b:f0:2b:73:52:3c:61:63:
7a:9c:cb:05:b3:c1:93:be:ec:a3:3d:57:1a:bf:79:a4:99:23:
86:c4:f1:fa:e0:c4:08:c2:12:7f:3c:e1:3c:08:91:4c:62:e0:
4e:97:18:d5:10:f5:de:b0:6a:72:83:8f:d4:62:bc:cd:fd:f1:
f1:6a:77:6b:fc:1e:73:88:c0:a0:4b:c4:b9:2a:de:82:14:86:
a7:76:36:e4:fb:b5:27:c4:71:7e:c5:23:02:b0:85:f1:88:8f:
41:5c:61:f8:6c:d6:43:25:6c:1f:25:b6:78:4c:87:ef:6f:56:
da:5d:f4:f2:a8:51:01:f6:36:ea:79:b6:1a:24:93:b1:15:62:
67:e6:02:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:10:37 2025 by rpki-client