Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1fcbf779-56c1-3218-87b5-9c76cf29257e.roa
File: 1fcbf779-56c1-3218-87b5-9c76cf29257e.roa (raw, json)
Hash identifier: PQ36UDlLqu+zq2nHJXz58rZ9qu2qQuNnxCUQ/319B2s=
Subject key identifier: 25:54:C3:15:2E:23:93:35:10:B7:E4:64:FF:FC:4C:41:52:E1:5D:EC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7FEA8D284A2699E9900AD36C
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1fcbf779-56c1-3218-87b5-9c76cf29257e.roa
Signing time: Fri 07 Oct 2022 12:00:00 +0000
ROA not before: Fri 07 Oct 2022 12:00:00 +0000
ROA not after: Sat 12 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.174.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7f:ea:8d:28:4a:26:99:e9:90:0a:d3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 7 12:00:00 2022 GMT
Not After : Nov 12 05:00:00 2022 GMT
Subject: CN=93b60ca4-d025-4da4-8278-edd0c16b2e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:65:bf:2f:07:bd:da:2d:3f:1c:95:89:9f:cb:
e0:c4:b2:e9:75:1f:0d:1c:5d:6c:93:5a:45:37:9b:
c6:52:9c:2b:01:2d:a5:9f:42:fe:fb:26:d1:2a:60:
33:e5:6c:65:91:d0:32:92:3d:a4:51:90:e8:40:b5:
89:ee:e3:aa:3a:28:4a:e5:f4:b2:0b:85:16:19:f9:
63:d5:78:d0:18:66:ec:ae:68:09:d2:ba:3d:f2:ad:
7f:23:e3:58:ba:c0:96:e4:2e:d8:59:64:91:8c:a9:
f3:fd:a1:f0:de:0b:69:33:2b:37:4f:93:70:7c:36:
72:25:b6:e0:a6:71:9a:7d:61:c8:0d:e3:76:12:ed:
d2:0b:dc:74:9e:b5:68:25:04:e4:07:3c:86:3a:54:
88:68:3c:98:a0:3a:a2:da:64:b3:6d:09:95:e0:83:
2f:cd:e6:c9:c2:0a:dd:45:82:11:4b:f5:0e:a8:b2:
82:da:01:0d:76:75:85:96:d4:c2:be:ef:c2:a0:07:
69:41:87:7b:14:eb:2f:ee:0f:7e:1c:9b:fd:11:b3:
42:d8:cc:e7:0c:7a:c9:5c:a6:29:a5:3e:68:cb:5d:
ef:12:c6:83:ae:b0:c9:4b:45:35:e0:22:08:14:e1:
20:4a:72:51:f9:df:91:6d:db:bf:a5:51:e8:31:37:
b3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:54:C3:15:2E:23:93:35:10:B7:E4:64:FF:FC:4C:41:52:E1:5D:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1fcbf779-56c1-3218-87b5-9c76cf29257e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.174.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:60:92:c7:dc:a0:65:f4:d4:cb:c3:cb:71:b3:2a:b7:14:95:
db:d5:42:da:af:e2:bc:8b:68:92:5d:42:47:ae:5d:d4:13:9c:
9e:c6:bb:44:63:c4:45:f7:7e:d8:7d:6a:51:b9:e8:1f:8e:40:
a7:1d:af:6c:47:3d:48:f7:c6:33:2c:bd:aa:21:6e:7c:52:f6:
f7:b7:bc:00:0e:5d:80:9c:66:4e:ab:11:f9:89:04:f3:b3:69:
04:0e:b6:7c:66:a7:dc:80:8f:f1:25:61:a4:45:21:cf:f9:e0:
95:03:ef:e7:cb:dc:66:7c:d1:5e:37:f0:4d:63:64:1f:2d:06:
02:56:07:bf:4e:4c:7b:09:94:28:d8:95:1f:32:c1:29:60:8c:
6a:2e:ef:44:82:de:e1:d5:63:74:9a:eb:d1:fb:75:1e:7d:0d:
dc:b9:32:f8:e6:9c:ef:0f:cf:aa:1b:a0:39:93:73:5d:b2:08:
89:81:b5:19:42:db:b3:d5:eb:91:39:03:6b:de:bb:b9:78:14:
b7:d1:be:d0:78:b4:dd:09:e9:80:91:8a:0e:fc:65:b0:72:eb:
a5:48:ee:44:f4:10:4b:b6:b1:4b:bf:d8:81:ea:29:47:01:16:
23:0b:81:70:5a:af:75:27:ba:d7:7c:83:14:0f:0a:f0:3c:dc:
c9:c9:6d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:44:30 2025 by rpki-client