Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/573aa986-70f4-376b-b314-4239367ba1f3.roa
File: 573aa986-70f4-376b-b314-4239367ba1f3.roa (raw, json)
Hash identifier: r1TtY2mjDrVm4PlhGFkBx9vH1EeT+Lq7SAMYhJM8h+0=
Subject key identifier: 0A:0E:28:72:1A:0C:CE:FD:A4:D5:AD:CA:43:32:53:63:CC:E1:B1:98
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6B4604D8FFDDD70CDC7F1300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/573aa986-70f4-376b-b314-4239367ba1f3.roa
Signing time: Thu 30 Jun 2022 12:00:00 +0000
ROA not before: Thu 30 Jun 2022 12:00:00 +0000
ROA not after: Fri 05 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.74.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6b:46:04:d8:ff:dd:d7:0c:dc:7f:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 30 12:00:00 2022 GMT
Not After : Aug 5 04:00:00 2022 GMT
Subject: CN=df114486-5220-48b2-a10b-ec4bef209981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:35:fa:9c:60:60:85:46:a7:53:73:1f:5a:4a:
96:a5:d3:0b:54:22:d8:ad:ae:69:a9:eb:96:a0:00:
fe:b2:93:d5:e8:fd:b9:2b:c1:cd:17:81:12:dd:e3:
09:fd:9b:15:64:e1:2b:66:a6:de:0c:c6:40:bf:a8:
2e:e1:63:e0:af:98:9d:6d:97:f6:82:ce:14:62:e3:
79:b8:be:71:8e:0a:3c:74:51:1b:0e:60:2b:3c:f2:
2a:70:1b:65:19:c7:f7:d0:8a:1b:5c:be:73:0f:4b:
c8:0e:6b:e3:30:58:27:b6:f3:51:f2:07:80:6d:05:
62:9c:ed:ee:32:6e:24:0b:d3:dd:8e:2b:75:7d:19:
60:d8:85:30:bb:d2:50:28:20:e1:ed:76:6f:39:7b:
6c:b8:d8:ec:92:83:72:0e:31:09:ba:cd:75:b2:b6:
85:50:b7:3a:30:75:e5:a1:1d:13:b7:d2:c5:71:7c:
10:e0:3c:aa:9e:41:c9:3e:18:23:65:6d:2f:c0:be:
b0:37:e2:10:56:c6:23:89:a8:1d:f4:40:e1:b5:e4:
53:6e:32:f2:69:d1:d4:a4:9b:55:38:2c:29:8c:84:
f6:6a:69:59:d8:87:6c:ab:fe:03:35:25:03:b9:4d:
a8:a2:35:c9:ff:01:76:44:b6:74:6f:62:e5:6b:35:
3a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0E:28:72:1A:0C:CE:FD:A4:D5:AD:CA:43:32:53:63:CC:E1:B1:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/573aa986-70f4-376b-b314-4239367ba1f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.74.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:e5:ff:67:35:ba:62:14:d3:08:d0:b6:b8:24:e0:6a:fa:d2:
57:42:4b:e0:c4:64:23:29:6e:2e:f2:63:c2:2a:90:1a:72:a1:
f8:f9:e7:ee:bf:de:6e:7f:0a:df:86:51:e6:5e:22:12:c1:e8:
db:b0:e7:30:5b:84:07:19:68:44:b8:5e:59:2a:d1:ed:d6:5d:
eb:e2:66:87:a6:ee:bf:29:9b:d2:da:b3:84:c7:29:27:de:31:
41:f0:87:38:63:8b:c0:36:9e:bc:6e:fa:f5:83:67:81:26:73:
49:21:18:4a:e9:ad:4b:82:75:b9:8c:ea:ae:12:16:c7:d4:25:
84:8f:b4:1b:8a:19:de:ca:8c:4c:b9:87:fc:72:ca:f3:cd:29:
93:ca:e8:4a:df:e7:83:a7:16:ef:a0:c3:59:6b:9c:eb:8e:4e:
ef:ad:21:0d:c3:f2:cf:f7:39:36:d6:75:22:ea:d3:b1:e0:73:
64:bb:f8:1c:70:17:10:58:ed:b2:62:db:9b:a7:04:1d:0b:0d:
00:b4:9f:d9:a3:cd:9a:24:0f:9d:07:86:16:09:f8:38:57:21:
59:39:c1:af:69:4a:73:70:b6:d6:1d:f7:c0:4a:f3:56:06:e5:
fc:ac:0b:3f:c0:c3:a5:ef:86:0d:d8:02:95:a4:ad:9d:62:29:
86:71:3f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:34:57 2025 by rpki-client