Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a50c53b4-de12-3ca5-ab17-bd3ff750178b.roa
File: a50c53b4-de12-3ca5-ab17-bd3ff750178b.roa (raw, json)
Hash identifier: 93XZKkVOeMih/4/kifmYjggZ/rd+ITeyMRpABmcnjQI=
Subject key identifier: C6:87:03:60:73:0E:0F:4F:55:88:A6:EE:18:DD:77:50:64:04:41:DD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F58D4FDC775DC70DEA8CF18C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a50c53b4-de12-3ca5-ab17-bd3ff750178b.roa
Signing time: Fri 23 Sep 2022 12:00:00 +0000
ROA not before: Fri 23 Sep 2022 12:00:00 +0000
ROA not after: Sat 29 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.174.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:58:d4:fd:c7:75:dc:70:de:a8:cf:18:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 23 12:00:00 2022 GMT
Not After : Oct 29 04:00:00 2022 GMT
Subject: CN=58cec20c-39b9-47a7-a2ce-eb6dcc84b0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2e:8a:ac:02:19:e0:fa:27:f0:94:dd:45:39:
37:fb:a6:de:60:da:32:93:ca:18:56:ee:74:1a:e9:
fc:3c:e9:68:f7:e7:78:5e:6a:de:88:b1:81:a1:3d:
0e:30:bc:93:4d:a4:1e:17:69:79:88:99:ba:cc:aa:
d7:d3:4a:fa:f5:8f:32:9a:ad:9d:5f:77:5b:30:e2:
c4:8c:cb:48:dd:e7:a6:4f:25:c3:22:ab:ff:f9:38:
94:07:ee:62:90:52:13:e2:41:39:20:37:f2:d4:64:
2a:61:63:72:b7:2d:22:27:e1:d9:a6:72:5d:09:ee:
92:34:78:af:66:73:48:58:9c:22:9b:09:5e:51:81:
8c:a8:06:36:a1:74:b7:42:bd:23:1e:83:05:9b:3a:
12:48:f1:ac:73:6e:cc:c2:48:64:9a:c6:a0:7b:f2:
7e:0f:d7:f6:a7:9e:e9:ed:eb:fb:25:01:df:1f:90:
60:9d:0c:37:8f:eb:94:94:2e:8a:f4:ad:d3:ab:47:
e5:46:54:08:0c:0c:a4:17:be:51:81:75:5b:f0:07:
1a:46:80:85:9a:a3:d3:31:2e:c5:49:e0:63:93:c7:
87:0f:1f:3f:56:80:e2:19:ce:d7:6b:e2:59:fe:72:
71:5d:bd:55:b9:53:3d:09:ac:38:4d:02:52:95:6e:
6a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:87:03:60:73:0E:0F:4F:55:88:A6:EE:18:DD:77:50:64:04:41:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a50c53b4-de12-3ca5-ab17-bd3ff750178b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.174.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:5e:ca:4e:d9:da:a4:21:cb:f1:41:77:6c:08:b4:83:d6:f5:
05:51:2d:bb:fc:af:e4:25:70:25:23:d1:cd:56:0d:23:18:33:
57:ad:dc:63:f2:7b:c0:01:65:fe:48:98:55:29:83:d3:f4:d7:
2f:e2:e4:a9:73:ae:0c:5c:80:a8:b2:ce:09:aa:57:a9:e0:27:
2e:9f:13:a9:2c:86:8e:5e:fe:2a:be:a1:a6:c9:5e:b7:84:ae:
51:5d:05:70:0b:49:ca:36:a8:08:2c:58:29:e6:61:63:13:49:
c7:00:aa:57:20:de:c9:d8:54:0b:f9:d5:1c:09:4a:7d:23:a5:
3f:d1:d2:41:ff:d3:63:4f:02:72:b3:04:27:f3:44:c4:19:c5:
b4:3b:bd:85:47:b8:10:05:1f:29:b9:b0:8e:e4:76:30:4c:4d:
f3:c8:01:30:24:00:1c:3b:e1:06:5d:b0:8e:aa:ea:05:7b:83:
db:fd:5a:95:6c:05:88:15:2e:54:48:63:26:c7:fa:69:ca:0b:
ba:d3:12:68:27:fd:d0:24:52:03:80:c4:dc:3f:b6:62:bb:53:
8d:63:cb:a1:5d:d4:64:1c:d5:2d:28:09:42:21:36:51:d6:04:
84:ba:9b:fe:8b:f3:e3:02:0b:b2:9c:6d:4d:2c:99:cf:f6:ea:
49:76:30:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:19:32 2025 by rpki-client