Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c35fc6bb-d2ad-346c-810f-5210ea20b599.roa
File: c35fc6bb-d2ad-346c-810f-5210ea20b599.roa (raw, json)
Hash identifier: NI0GPuXlb8iG+TjBCQ8k1eQqURiKErS8skHWVhzGuxo=
Subject key identifier: BE:2B:AD:BB:EE:5F:98:C7:CE:C8:F4:36:02:30:46:6A:9F:56:15:CA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858409418297537A8F37284D2FE00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c35fc6bb-d2ad-346c-810f-5210ea20b599.roa
Signing time: Sat 14 Jan 2023 12:00:00 +0000
ROA not before: Sat 14 Jan 2023 12:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.84.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:94:18:29:75:37:a8:f3:72:84:d2:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 12:00:00 2023 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=f2d9f3b7-db18-43a3-a111-afbb86be8bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:58:6d:86:d8:18:f7:67:2e:42:ee:cb:5d:4d:
a5:eb:b4:f3:99:e6:3a:d4:8c:ed:b6:69:7b:3e:4e:
57:ba:40:d0:7f:ab:1d:f2:33:1e:d6:30:61:9a:1a:
0f:d0:30:ec:b6:fb:ce:ea:37:26:97:45:8b:c3:7f:
96:6b:24:ab:4a:83:14:42:4d:1d:81:5a:07:6e:0a:
97:03:14:c1:00:2e:fb:bf:87:15:ff:0a:e2:a9:bc:
65:a2:cb:45:18:01:09:6b:a5:5f:c1:09:44:2b:07:
94:c6:44:c2:22:a3:84:1a:88:49:4b:70:10:e4:9b:
f8:28:73:5c:32:1a:61:e5:92:e1:47:5e:69:9d:69:
24:b5:99:a4:fa:2c:5b:9e:1a:42:33:10:5a:68:85:
4a:58:c7:bd:60:94:5e:45:99:d9:83:71:70:ec:61:
69:17:39:e6:35:c4:13:5f:8c:6a:54:ed:28:11:d0:
01:87:58:46:7e:35:c9:e7:d3:73:05:4b:cc:00:31:
4e:00:90:87:01:c1:2b:e4:51:30:5c:c5:04:8a:20:
48:a6:d2:d9:3f:7b:f2:05:db:59:cb:f7:c4:d5:c7:
79:8b:f1:8d:8b:e2:45:b8:c7:ed:e1:bf:ba:13:80:
f1:24:50:12:c5:76:ca:8c:fe:59:3d:6b:68:9d:46:
b9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2B:AD:BB:EE:5F:98:C7:CE:C8:F4:36:02:30:46:6A:9F:56:15:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c35fc6bb-d2ad-346c-810f-5210ea20b599.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.84.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:93:c7:d2:d1:f1:39:fd:89:df:34:7d:df:8b:d0:ea:e6:bd:
3c:71:da:21:e9:6c:cf:39:7a:c2:fe:e0:39:19:b5:3b:c0:e2:
38:fa:3a:cd:91:79:9e:49:a3:48:fb:97:d2:dc:7d:27:31:e5:
36:99:40:6f:b0:ef:77:17:44:a9:31:30:cf:79:a6:f1:7d:62:
f7:c4:ae:b1:ce:5b:16:67:b4:dd:1d:20:17:2f:5c:e1:e3:da:
ec:2c:af:34:d8:c2:a2:07:1d:f1:f2:0d:e7:39:00:c0:fc:6c:
4b:10:57:40:72:6b:1e:c1:4e:b4:e2:1c:93:14:00:b8:a6:1d:
8a:4c:82:d5:70:e9:f1:42:b2:07:98:d9:ee:c4:1e:40:aa:46:
4d:5c:58:40:8c:69:00:87:7c:b1:fd:76:9d:df:cb:00:81:0f:
e8:85:6d:a7:78:23:30:1f:4c:81:0e:10:c4:cb:36:6f:9d:17:
3b:5b:a7:41:96:6b:05:e1:d9:76:6c:2d:65:86:b1:ee:ab:c7:
3e:1f:ee:71:93:59:75:41:89:3a:9a:96:c4:fe:3b:2f:c6:6a:
8d:53:a3:61:fd:88:3a:14:86:b0:37:e7:da:a4:ba:c6:b4:31:
ac:fc:63:53:a9:13:47:5a:77:61:21:07:83:76:b6:62:97:82:
eb:32:fb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:00:48 2025 by rpki-client