Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b252fec7-311f-3b3c-9374-053d6b777cf2.roa
File: b252fec7-311f-3b3c-9374-053d6b777cf2.roa (raw, json)
Hash identifier: O7J5/oWV5/I4Dcj9xkGEPYHbkbwxEmr+jnKCYoptxxE=
Subject key identifier: 3D:26:B2:5C:86:46:26:75:4F:44:28:E9:D3:99:CC:41:C7:A6:76:F6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401C5ECA81AEDFD5CB81591000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b252fec7-311f-3b3c-9374-053d6b777cf2.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.174.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:5e:ca:81:ae:df:d5:cb:81:59:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=c7bc42fe-d5c1-4497-b940-8c7bbf2de88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:82:0d:60:a5:0a:1e:ea:d0:62:a7:6c:d0:bf:
81:ba:dc:bb:1d:84:e6:5c:9b:89:6d:33:b7:11:b5:
f4:78:38:16:0b:b0:20:6e:6a:55:98:1a:a7:cd:5b:
78:4c:70:3e:13:b2:f5:92:f2:0d:1b:71:99:2a:1f:
5f:77:c4:61:ee:ab:d3:07:8c:9b:35:17:68:a5:16:
62:09:ae:0e:cb:cf:a0:0e:1f:af:46:7d:93:b9:ca:
8a:36:b0:c7:ec:2a:1c:24:f4:5a:31:1b:dd:eb:53:
a3:6e:64:0b:39:b0:5e:c4:e5:6d:29:77:da:7c:ae:
f8:fc:7a:7d:79:5d:9c:45:ee:72:6b:36:e9:24:7d:
45:ee:54:5d:85:9e:2f:28:d7:7d:3f:52:a4:79:60:
1b:bc:73:53:69:7c:4f:46:f1:bd:85:6a:a8:30:87:
16:61:36:10:12:12:c6:b2:b0:e9:82:70:9f:84:81:
27:16:78:df:0f:b3:46:57:db:da:26:ca:c2:12:99:
cf:fe:20:d7:15:a2:1a:27:29:3b:09:3b:35:96:01:
4a:87:9e:a3:56:bb:d6:4f:17:98:55:b9:02:d2:45:
0f:c3:82:38:06:6e:ef:19:5a:f7:bd:72:d7:30:76:
f5:ea:d6:27:16:e0:8e:a0:ee:31:29:86:fb:04:74:
17:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:26:B2:5C:86:46:26:75:4F:44:28:E9:D3:99:CC:41:C7:A6:76:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b252fec7-311f-3b3c-9374-053d6b777cf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.174.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:57:b6:70:f4:37:c3:69:8c:85:eb:81:2e:e8:87:3e:08:19:
dc:b8:f2:d4:2c:56:05:e1:4f:5f:ae:da:9a:83:14:16:49:d7:
35:ce:21:dd:7c:24:ea:50:23:b4:2f:25:be:cd:76:5c:8a:a1:
26:4c:4b:75:81:84:42:df:0d:bb:27:ee:c0:92:1a:09:c0:2c:
fb:22:c3:db:c8:45:63:ab:13:69:5f:9f:7d:39:d4:6a:98:58:
cf:53:d9:6c:43:ba:8c:7f:31:d2:4d:7d:8c:1c:32:02:e3:98:
42:e6:bb:08:66:9c:6a:bc:9c:a3:fa:d7:ce:8c:bf:41:7e:7d:
ac:9c:e7:0f:ad:b7:8c:80:7c:01:16:37:a4:79:9b:bb:f1:5a:
bf:19:67:a6:0e:35:2d:cc:24:9b:bc:10:b7:88:48:95:07:84:
91:e5:f1:56:ce:ac:cb:8c:56:ba:ba:3f:90:49:a6:ab:41:d3:
47:b8:04:89:9f:ca:cc:94:48:f8:41:70:a6:5d:33:9a:36:5a:
2e:ba:5c:b5:d2:f9:9c:df:c8:7a:13:57:6b:a8:a1:50:71:e2:
a6:d6:1f:fb:b9:1b:50:f8:40:b8:4e:a8:fe:e5:d2:5e:9d:e0:
7a:bc:84:67:47:99:9c:c4:2c:9b:f6:8c:75:86:8a:fb:d7:55:
aa:46:ac:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:04:09 2025 by rpki-client