Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5d7ca52e-4e76-3620-ac77-0b5493f68a7c.roa
File: 5d7ca52e-4e76-3620-ac77-0b5493f68a7c.roa (raw, json)
Hash identifier: kRNNuJU//B+bQmy72H8LYUIptE0YvXmMsa/LXFA+A7k=
Subject key identifier: 65:4B:72:84:9E:F3:81:A5:04:4F:54:CA:CC:FD:B6:B0:2A:66:80:A1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA7001EAB91B4C0F9BC17E8D0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5d7ca52e-4e76-3620-ac77-0b5493f68a7c.roa
Signing time: Fri 21 Oct 2022 12:00:00 +0000
ROA not before: Fri 21 Oct 2022 12:00:00 +0000
ROA not after: Sat 26 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.174.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a7:00:1e:ab:91:b4:c0:f9:bc:17:e8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 12:00:00 2022 GMT
Not After : Nov 26 05:00:00 2022 GMT
Subject: CN=56eb59d1-b575-43aa-8971-7c4be6fe0b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9f:19:28:d8:85:d0:9e:f2:e4:aa:94:0e:67:
24:70:25:d7:1e:9b:f2:7e:52:d2:02:a3:39:68:a5:
f7:7e:e3:ac:6b:76:29:9d:9d:63:25:5b:11:5d:9f:
6d:43:07:db:f6:b5:3b:00:17:6d:c1:c2:4c:c1:44:
4c:94:5e:fc:4c:de:92:13:d7:dd:73:a1:92:fb:42:
0e:6f:3a:7f:4b:a3:b1:03:41:e6:f6:d4:cc:3c:6a:
1c:31:7c:f5:86:40:eb:79:d3:a0:db:2c:5f:91:84:
53:35:10:ee:e1:a8:bc:86:56:b3:b5:5a:fa:e6:45:
3f:1f:52:9e:65:24:cb:d0:4b:0f:36:8c:72:e5:71:
7b:04:be:8f:eb:46:52:8f:d9:ee:81:6b:22:0f:c2:
50:f9:03:7e:3c:93:a9:33:95:d8:21:ab:cd:1e:3e:
88:7a:af:63:0d:a7:96:81:c4:53:64:0a:61:da:1d:
95:b2:b2:d7:c9:ac:03:44:5d:a2:c3:73:53:41:6c:
3a:17:77:3f:c4:7a:a7:ac:0b:5f:01:d7:c2:d7:46:
2c:82:d0:04:32:de:91:67:f6:4b:ec:2b:c3:3e:ab:
7d:28:18:76:13:f5:7e:f4:1f:70:5c:f8:9c:86:48:
ea:a6:72:ea:91:7b:3d:8d:88:da:1b:85:fa:5f:61:
df:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4B:72:84:9E:F3:81:A5:04:4F:54:CA:CC:FD:B6:B0:2A:66:80:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5d7ca52e-4e76-3620-ac77-0b5493f68a7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.174.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:6d:bd:b9:5a:ab:ec:a8:ab:d8:61:d3:38:df:01:5b:94:92:
2a:3a:a4:eb:dd:7d:22:dd:f5:18:a7:80:57:d8:20:76:04:45:
ce:fb:4b:3b:be:db:58:08:65:f2:46:84:31:24:94:4c:cd:f1:
83:17:2f:67:4a:80:19:7b:bd:e6:e2:ac:d8:ad:1e:68:4c:4a:
60:6a:c1:4d:fb:ba:f0:f3:ca:7a:38:98:48:40:cb:3b:57:0a:
48:00:47:be:1d:a4:ed:e6:0e:61:79:e5:4a:56:0f:16:b8:9e:
b6:ae:14:55:ab:c8:28:3b:0f:46:d0:ba:32:5c:cb:42:24:ae:
67:02:d8:9d:64:8b:7f:cc:86:90:bb:85:61:be:b3:c3:8d:6a:
8a:fa:9b:9e:ec:e4:b9:9c:77:5d:5b:d5:77:58:d6:b7:c0:2c:
25:3b:04:5c:17:45:76:3d:cf:2d:ec:a8:f7:1e:3b:1a:f3:c0:
da:c3:3e:18:f0:52:4e:02:23:08:a0:82:74:de:43:e5:9f:3b:
fd:3e:0b:5e:af:ee:09:5f:d4:af:ab:48:5c:0d:c9:96:59:f4:
0a:26:29:c3:73:60:6b:62:26:8f:88:5e:ce:b3:11:29:60:00:
7e:cb:9b:40:f2:01:b0:6d:17:2a:ab:87:90:cf:f5:c4:f1:f0:
a9:c0:75:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:50:46 2025 by rpki-client