Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4adb11c5-6f00-3578-bdc9-f5d201c6580d.roa
File: 4adb11c5-6f00-3578-bdc9-f5d201c6580d.roa (raw, json)
Hash identifier: SK92BEYk8ZpeQEeV3pqs9TTA1qvgNDLG+7OkKaEFP1w=
Subject key identifier: AF:3D:92:9B:7B:FE:77:40:1A:4D:20:F7:72:4E:1B:76:D7:93:23:DB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401C5ED9C49F708B98EBECD900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4adb11c5-6f00-3578-bdc9-f5d201c6580d.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.174.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:5e:d9:c4:9f:70:8b:98:eb:ec:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=ee6e3165-f969-4bb6-874b-611cc0741f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8a:f2:40:06:76:9d:ff:7d:9a:c7:39:ff:63:
ed:d5:e2:ce:e4:9d:fc:0b:12:ca:d0:7f:88:8f:32:
a6:9b:f1:51:5e:98:31:2e:f6:65:3f:92:16:4a:00:
f1:08:f8:0a:b7:c8:9f:80:a9:47:31:55:18:76:5a:
0a:22:64:21:bf:37:90:f3:ed:84:df:3e:67:b3:03:
f2:36:eb:46:3d:6a:92:55:03:c6:e3:fe:29:5c:83:
b6:9c:1a:e7:d1:d8:67:8e:4e:b6:67:33:8d:fc:19:
0f:49:bf:f9:f6:76:1a:dd:93:da:86:82:16:ac:37:
f2:14:b3:9a:37:fa:62:95:46:c2:e6:0d:14:6c:f1:
b1:b5:f0:8c:bd:65:2e:e8:cb:7f:d5:20:b5:80:a0:
29:60:22:42:75:b0:5a:dc:e1:9c:32:4d:7b:30:5d:
0c:c1:f1:28:0f:60:9d:10:0a:05:37:85:9b:4c:37:
8c:6f:a1:f9:36:be:9f:b3:2f:49:b7:77:f6:a1:e0:
29:30:a8:31:b1:24:14:61:cf:cf:29:b6:9d:7e:e8:
80:bd:24:9b:47:9f:ee:50:e3:26:4d:be:35:e4:9d:
02:b9:d2:a2:f1:3e:21:9c:40:f3:6f:3a:64:26:3c:
1a:1b:ac:f4:8d:92:3b:aa:e4:04:3c:4a:be:1f:f2:
23:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3D:92:9B:7B:FE:77:40:1A:4D:20:F7:72:4E:1B:76:D7:93:23:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4adb11c5-6f00-3578-bdc9-f5d201c6580d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.174.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:c2:f7:50:c8:8b:f0:74:e1:bf:08:dc:ce:a0:76:69:8f:19:
de:a0:f5:1e:49:7b:cd:2c:eb:62:9e:7d:4d:2d:34:c7:f1:34:
e7:e2:90:93:2a:95:5e:90:7d:81:6d:7e:52:79:0e:95:7d:32:
c8:16:c0:ec:ef:19:e4:0e:d0:33:88:88:e9:a7:de:82:ea:ef:
a4:fd:75:0c:81:9b:ee:ae:c5:9d:63:9e:03:5f:fc:b7:3c:b7:
3d:c5:4e:b2:10:78:f9:c1:57:d1:86:91:3f:5d:ac:de:2b:fe:
55:5c:67:aa:cb:6d:88:fe:d6:3c:54:4d:78:f3:5a:96:38:8c:
1b:fe:9c:ac:b1:71:ac:3b:58:81:39:f8:19:6b:a8:51:b1:54:
29:02:3c:52:9d:5f:3e:e8:5a:7c:dd:62:98:7a:fb:57:32:03:
c5:58:13:69:9b:71:f8:a4:31:7e:34:78:08:26:e5:d2:fd:ed:
38:5c:0c:10:84:c7:59:49:f7:f9:36:d1:76:b8:5b:1f:ff:fa:
07:57:b6:49:ce:d3:bd:89:d3:a5:8e:25:e3:23:dc:40:a4:6f:
75:64:64:23:cb:cc:47:4d:4a:5d:b3:0e:6b:86:b7:df:a8:a0:
80:8b:17:8a:e8:39:72:12:9b:8d:6c:77:6d:46:34:80:58:b8:
7e:20:75:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:25:12 2025 by rpki-client