Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d401110b-ef60-33ba-9520-3339e64a3edf.roa
File: d401110b-ef60-33ba-9520-3339e64a3edf.roa (raw, json)
Hash identifier: ytnPzNZJaE2pjYcucouJzD8dK2oVa3XEOBUX9QNYymM=
Subject key identifier: AE:71:37:4E:BD:7F:E3:6E:B2:40:EC:D8:BB:C3:16:CC:5B:82:EE:A1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF7B2F852CFB43F6F25D4B3C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d401110b-ef60-33ba-9520-3339e64a3edf.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.35.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f7:b2:f8:52:cf:b4:3f:6f:25:d4:b3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=50add67f-1f5d-46f1-a200-a81e2663793c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:b6:d2:2d:e9:d4:28:b5:e9:7d:fd:96:0e:
a4:ed:64:76:c0:0a:0c:fb:ac:27:41:16:f2:d1:94:
2e:bb:0e:88:69:62:1f:30:4f:56:ec:b6:2a:ff:a8:
9b:e2:4e:0b:02:70:4d:a9:4e:e1:66:17:e2:59:80:
6c:dc:17:c6:94:5f:8d:eb:ed:56:aa:9e:f2:ed:c5:
4a:7e:e3:c5:04:39:06:7b:74:97:03:89:f8:68:7a:
4b:94:d3:ff:96:3f:ba:a4:04:e3:24:2f:43:25:d4:
58:10:ff:b4:1e:e4:63:67:ed:f0:a7:a2:03:94:7b:
4d:ed:e0:02:ea:1c:12:e6:9b:0b:f8:9e:44:bd:d0:
c5:30:39:2d:27:1f:37:78:e7:cd:36:eb:75:41:e6:
41:37:8d:6e:0f:7d:f5:14:24:38:7a:65:da:1a:34:
a6:df:ab:10:25:4c:3c:51:6c:f4:35:c3:ce:dd:f6:
41:35:c0:2b:33:62:20:5d:5a:0e:e7:6d:72:bb:d5:
41:d9:8e:cd:3c:35:51:aa:32:88:51:6f:9c:87:49:
55:52:91:8c:ec:ad:da:f6:ea:df:79:dc:75:a3:cd:
62:14:3c:a0:6b:d7:6c:1e:3d:41:81:e1:52:60:7b:
34:52:da:c4:f8:d5:b7:bd:5e:02:c2:04:b4:99:35:
ea:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:71:37:4E:BD:7F:E3:6E:B2:40:EC:D8:BB:C3:16:CC:5B:82:EE:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d401110b-ef60-33ba-9520-3339e64a3edf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.35.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:45:1e:c8:54:e2:9e:98:d8:cc:7c:da:79:77:26:8d:a4:a9:
13:0e:7f:0d:1b:54:f9:9e:82:8b:d0:2b:9f:e9:20:14:0a:29:
dd:32:d8:34:b0:3e:8c:cb:4a:e5:d0:f6:c4:03:0b:7f:ac:53:
51:5d:f7:94:c5:18:68:02:e7:6f:fa:f8:c9:32:79:60:7e:73:
c4:83:c7:76:ba:fe:18:ac:9e:9b:c5:f9:d0:d4:34:9e:b1:87:
9b:64:b9:a9:ac:d4:b1:ec:49:bd:6a:ff:46:be:be:61:1a:6b:
b9:de:29:40:6f:61:13:97:13:52:8e:38:42:27:d0:60:29:3d:
0c:d3:1a:5f:4b:d2:83:33:55:f5:02:fc:91:ad:cb:f8:55:17:
32:a9:de:e9:59:36:9f:79:7c:fb:a2:ee:7d:df:1b:4a:84:ff:
ab:8f:46:46:80:72:05:1a:27:af:ce:4f:d2:9a:f7:a3:0d:e5:
b5:09:80:c0:a9:1f:78:19:43:28:63:cc:d1:c1:e8:80:eb:7f:
45:a8:7b:59:54:e8:05:8a:d3:4e:f1:fc:35:46:0b:51:0d:38:
20:6f:37:ac:3d:76:97:c6:4d:4d:84:e3:e6:34:24:44:26:28:
d8:e5:a6:fe:51:64:81:0b:49:0b:6d:0e:28:c8:85:03:10:6c:
d7:a1:72:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:51:26 2025 by rpki-client