Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64c09e63-102f-3fe7-b66f-08c9c28b8f45.roa
File: 64c09e63-102f-3fe7-b66f-08c9c28b8f45.roa (raw, json)
Hash identifier: wjhJOzAh2pb2FAd8d5YygsKFK8LvxK/3KeYyXPVS2qs=
Subject key identifier: 45:E9:E1:CE:30:4D:B6:01:8F:F0:C2:A4:48:D2:4E:FA:A9:CF:B3:9F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B6DC76E22C96778F0120380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64c09e63-102f-3fe7-b66f-08c9c28b8f45.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.174.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:6d:c7:6e:22:c9:67:78:f0:12:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=1e761f20-a327-4e62-9090-38feebf15cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:0d:d9:5e:ff:2e:f2:ee:4c:bb:ea:5c:d6:
8e:00:2b:09:9b:cc:8e:e8:dd:16:63:45:6b:00:72:
4c:72:ab:55:2e:76:e8:c3:53:64:ea:90:75:18:f0:
0f:eb:1f:fd:10:c4:78:33:39:de:a3:42:79:67:9b:
2e:63:22:1a:7e:b9:20:a6:ad:b3:cb:53:7e:6b:e3:
67:95:98:a1:f4:a5:b4:8e:78:9a:79:21:ae:2f:1f:
ad:c4:4c:ac:2a:82:59:d7:7c:c0:d9:39:42:8e:21:
81:5b:e6:73:80:47:4c:d0:8a:ad:b3:01:bd:e2:09:
c2:59:bc:24:50:39:e9:16:be:16:97:ca:43:fd:ab:
ec:71:c0:69:02:9f:30:ee:ab:a1:6f:65:56:b9:59:
da:55:01:a2:d5:ec:58:93:a2:eb:5c:84:c6:95:cf:
f5:4e:29:65:dc:da:f7:33:5d:bd:a8:18:ac:bc:94:
6b:32:c7:d4:80:02:ae:b4:fa:59:4f:92:3d:d1:2a:
dd:ef:42:18:67:0b:81:32:34:36:41:2d:0b:c9:ef:
1c:83:47:66:25:5c:79:a8:01:5e:db:c7:f1:07:33:
f2:b7:fe:26:94:a1:77:d4:db:c8:79:ac:22:59:cc:
aa:14:5c:6a:9e:46:71:a1:cd:22:7d:47:4e:0c:85:
5e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E9:E1:CE:30:4D:B6:01:8F:F0:C2:A4:48:D2:4E:FA:A9:CF:B3:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64c09e63-102f-3fe7-b66f-08c9c28b8f45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.174.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:76:f3:11:8e:03:86:08:2f:93:73:a5:e9:da:6e:80:d4:40:
81:8d:33:e1:e0:45:39:8e:a8:c9:20:72:d6:01:04:fd:d1:db:
eb:fe:59:d5:b2:f1:5f:29:72:f6:0d:d3:39:34:27:c3:1d:b8:
26:86:ec:6a:48:66:33:14:73:04:33:8c:79:94:fd:8b:96:79:
3a:bb:93:65:e6:f0:73:0b:a1:8c:61:77:64:3b:be:7c:49:5e:
92:2d:03:51:2d:ee:33:53:bd:38:22:fc:fa:d3:2b:97:26:73:
65:98:c2:aa:86:23:4e:a7:9f:85:76:46:04:36:99:4f:ea:1b:
2f:54:06:82:f1:df:10:f9:4a:1c:bc:33:26:ef:6d:cc:a0:d0:
e8:a9:c5:55:b2:15:6c:dd:86:02:94:5e:7c:66:b7:f5:3e:00:
3a:34:60:e5:c4:9a:b2:99:a2:78:c1:f4:f1:9d:a7:65:a7:3f:
57:5b:dd:f8:cf:05:cf:66:46:af:3b:14:77:d0:8a:f7:15:a7:
48:44:5a:70:db:cf:42:46:be:49:a1:4f:ff:5c:3b:57:b5:0a:
8b:0c:76:87:6f:5c:f5:28:ad:97:86:1a:c5:66:dc:b8:60:d4:
da:95:59:16:78:1c:37:d7:c5:6a:d2:24:17:b9:77:4f:22:bf:
1e:7c:34:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:08:22 2025 by rpki-client