Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/79c9c056-c116-3196-afca-16d43d841202.roa
File: 79c9c056-c116-3196-afca-16d43d841202.roa (raw, json)
Hash identifier: KFJZLGjle+Av4/uTIH9NE/Ycv1cs4iH8FH5FV5i7B0E=
Subject key identifier: 05:B3:BC:AF:19:E3:FD:C1:D5:16:6D:DF:4C:28:35:76:12:CD:53:EF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406A825771BECA1D370398EFC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/79c9c056-c116-3196-afca-16d43d841202.roa
Signing time: Fri 30 Dec 2022 12:00:00 +0000
ROA not before: Fri 30 Dec 2022 12:00:00 +0000
ROA not after: Sat 04 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.174.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6a:82:57:71:be:ca:1d:37:03:98:ef:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 30 12:00:00 2022 GMT
Not After : Feb 4 05:00:00 2023 GMT
Subject: CN=80ad5a56-4a7a-4a6e-a403-ae1e412e00c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8f:aa:a9:ad:a4:f7:51:51:d8:3b:d8:c8:b2:
cb:5a:7d:c6:46:80:d5:5c:62:20:43:44:9d:59:cd:
a5:68:b4:91:4e:6b:61:84:8e:c5:6d:ee:21:d8:78:
bf:48:fa:10:e8:aa:c3:56:b4:1e:5a:53:4f:5c:ad:
44:3e:09:ba:1f:20:8f:0f:d2:34:4b:64:6a:ab:14:
a8:5b:fa:14:03:14:57:76:48:53:6d:a9:e8:04:4a:
da:c1:51:56:12:7b:e5:73:a4:20:8e:3f:02:b9:83:
1e:d6:9f:8d:26:46:32:76:2a:30:42:db:4c:cd:c5:
c9:a3:3a:b3:5f:d9:b5:97:8f:92:cc:f4:90:49:64:
e9:dc:c1:53:53:c3:26:d1:82:8e:8a:e8:69:e0:f2:
16:f6:1f:74:bf:72:7e:f7:58:bb:1e:9f:ed:57:c2:
af:a3:60:07:17:2d:36:4a:cd:d9:f5:29:5b:8a:65:
eb:44:8b:d4:44:3f:a8:e0:b4:8d:34:b6:94:82:86:
75:2c:b1:22:25:b1:13:1b:07:38:bd:b4:0d:a9:71:
f1:aa:72:b5:e7:f5:1d:31:39:71:e3:a5:87:43:a6:
ca:53:11:11:b4:b9:eb:ca:c0:18:af:36:3c:7b:14:
85:c9:1c:a9:e3:c6:5f:d1:f5:f5:55:38:7a:c8:48:
b6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B3:BC:AF:19:E3:FD:C1:D5:16:6D:DF:4C:28:35:76:12:CD:53:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/79c9c056-c116-3196-afca-16d43d841202.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.174.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:f3:4a:14:17:19:d0:37:6e:09:e4:9a:81:56:17:01:a4:a1:
e6:ae:e2:42:fc:54:c7:29:61:fd:8c:9b:3b:7a:29:9a:3e:6a:
bc:45:84:75:0e:b1:b6:43:49:6e:c9:b5:be:f9:1b:c4:ab:a6:
e9:d1:ad:a2:10:e8:fd:07:dc:d8:7c:69:5c:7e:a3:2b:6c:92:
f9:04:5e:19:35:54:8a:e9:80:b5:a1:6f:e7:66:5e:81:e6:df:
2d:68:cb:04:b2:22:40:66:00:a1:c5:27:95:09:86:07:34:b1:
9a:56:8a:66:4f:ea:23:87:3a:b2:ed:a1:2e:45:51:69:e2:18:
f3:ed:3f:70:cd:d7:ec:f1:fe:d8:1f:f3:e4:43:5a:ad:a5:f2:
55:5c:61:f7:06:d8:b4:c3:67:68:a6:06:7a:e3:3c:7d:1a:91:
83:93:b7:49:59:b9:6a:ae:bb:54:58:ec:c5:e2:8e:27:3c:b7:
4f:d2:dc:f6:a8:8d:3c:ea:68:f0:a1:70:8b:2f:b0:11:b1:eb:
56:c6:98:ea:8e:04:6b:fc:45:96:4a:58:d8:3e:44:a7:8c:f9:
b9:06:11:01:dc:29:8c:b1:dd:16:13:2b:24:d2:2b:68:3a:8f:
97:2b:15:23:02:b8:7a:6c:44:53:a7:b7:4d:d3:ab:6e:00:95:
cf:ed:8e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:47:50 2025 by rpki-client