Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/60647370-2c1c-3ed0-b66c-315b135cf73b.roa
File: 60647370-2c1c-3ed0-b66c-315b135cf73b.roa (raw, json)
Hash identifier: CUf9Wm6/lh+RVBl5/MRrIITIy00GBTBANiHtiS32CK0=
Subject key identifier: F4:31:FE:AC:1D:EF:5D:2B:02:31:3C:96:9D:C5:EC:7E:6B:6A:4C:DA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DAC3E407BC3DD635BEADD0B40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/60647370-2c1c-3ed0-b66c-315b135cf73b.roa
Signing time: Fri 22 Apr 2022 12:00:00 +0000
ROA not before: Fri 22 Apr 2022 12:00:00 +0000
ROA not after: Sat 28 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.174.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ac:3e:40:7b:c3:dd:63:5b:ea:dd:0b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 22 12:00:00 2022 GMT
Not After : May 28 04:00:00 2022 GMT
Subject: CN=da8e7e00-c920-4491-ad68-682d43c85e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1d:52:d0:4f:bf:37:2b:57:eb:54:cc:a8:58:
e3:47:01:72:52:d2:06:a9:bc:5f:ec:43:71:01:58:
99:86:57:10:86:dc:f0:b9:2d:13:e5:6d:62:7d:0a:
2f:20:5b:fb:a5:fe:be:79:de:d6:4b:9a:5b:5e:dd:
82:21:d2:28:ca:af:7d:cd:d0:b5:bf:23:e6:34:e5:
ce:13:3f:67:0a:96:5d:a3:f6:36:7b:74:b3:d0:ba:
08:cc:54:9c:bd:b8:aa:8a:15:b1:c8:55:48:89:29:
c3:f2:56:73:0f:b1:e9:eb:14:32:df:75:c6:f9:5d:
e9:eb:b3:e7:95:8f:04:95:bc:21:dd:5a:bc:79:8f:
6a:5d:10:8e:c3:fc:b1:ac:ea:76:f0:65:c4:16:72:
18:0d:f0:7e:f5:99:6d:4b:95:82:c2:fd:49:2b:cc:
42:91:9f:ca:fc:f0:18:4f:c2:27:65:1e:e6:f2:3f:
58:de:62:2f:ef:c5:6b:fa:6a:cb:78:28:c1:41:39:
25:14:5a:c1:ae:6d:23:8a:06:55:4f:d3:c0:e7:b7:
88:42:10:0e:cc:f6:52:79:86:6c:79:48:2f:d5:4e:
f4:62:24:59:e8:af:32:b2:26:11:91:fa:26:5b:d0:
b7:90:76:5b:ee:8c:c1:e4:53:1d:6c:cb:4a:26:90:
d2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:31:FE:AC:1D:EF:5D:2B:02:31:3C:96:9D:C5:EC:7E:6B:6A:4C:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/60647370-2c1c-3ed0-b66c-315b135cf73b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.174.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:48:b3:d1:94:e2:42:a6:90:f6:36:b4:81:bc:b4:e6:2e:fb:
aa:5c:45:82:b3:72:da:ca:3b:ee:08:7e:c1:cc:e6:7c:4b:04:
1f:34:70:a7:53:5b:ca:aa:28:ea:ab:d0:f9:28:c4:33:ff:f5:
64:87:ea:2d:24:18:3d:00:81:2e:9e:e8:77:83:6f:45:69:55:
c2:08:f5:83:ef:a7:9e:a4:c3:64:8b:c1:d2:a2:9c:8f:9a:96:
10:43:fc:8f:8d:4a:3e:6e:29:ff:ef:c1:83:43:62:5b:9c:f4:
1e:af:d9:54:09:d9:24:30:f8:59:c4:70:36:37:d2:1a:6b:b0:
49:be:f0:fc:3b:e1:cb:ec:8c:8a:ba:0c:f6:df:23:6d:90:29:
91:d6:69:57:5c:84:45:69:2d:76:a1:5d:e9:f6:fe:78:ca:da:
43:c8:27:51:13:cd:1a:b9:3e:c0:69:cf:1a:85:40:c1:1e:ad:
fe:f9:72:4f:72:84:a8:c1:29:a9:c2:fb:70:16:13:7e:5d:5b:
df:b4:34:1d:1f:24:9c:3b:26:35:ce:59:97:63:d1:5a:b6:0d:
23:38:22:7c:50:6f:47:d2:ad:56:46:d8:52:94:3a:00:57:0c:
ec:73:b0:5a:24:65:0b:09:31:1a:19:9e:a7:de:78:2a:4c:af:
e0:81:25:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:29:35 2025 by rpki-client