Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dc7ad44c-ee58-3198-8802-43f2ceebd380.roa
File: dc7ad44c-ee58-3198-8802-43f2ceebd380.roa (raw, json)
Hash identifier: BuYNbcNmWudvnyznUUKaR+pvKBuHZDNVFu7oEUWDshw=
Subject key identifier: 73:73:56:26:7D:C6:9A:09:0E:13:D4:14:75:58:65:29:14:00:0F:16
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EB9800872EEBF046DA8CC0F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dc7ad44c-ee58-3198-8802-43f2ceebd380.roa
Signing time: Thu 28 Jul 2022 12:00:00 +0000
ROA not before: Thu 28 Jul 2022 12:00:00 +0000
ROA not after: Fri 02 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.74.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b9:80:08:72:ee:bf:04:6d:a8:cc:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 28 12:00:00 2022 GMT
Not After : Sep 2 04:00:00 2022 GMT
Subject: CN=f6636b5a-77b8-4c24-9c14-cae6ad0a4125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:26:ff:c7:d3:72:b2:ed:4c:e0:3f:88:09:
5e:e5:0e:4b:36:aa:8a:eb:33:d0:20:3d:49:c3:d3:
ae:ea:42:ce:6d:d8:3e:83:50:51:7b:3f:4f:13:4c:
f3:e0:d5:cf:91:fe:1e:d6:74:88:de:7d:7c:8d:82:
2d:c9:a3:a6:25:e1:77:8f:1d:85:42:01:f1:ee:07:
12:7e:de:bf:a7:0a:57:d2:8b:0b:94:ed:9c:d7:5e:
62:43:6b:02:bb:5b:1d:85:af:2a:17:39:fc:f4:cb:
ff:b6:60:e2:82:a7:78:18:09:77:3d:e1:fa:7b:ce:
a6:e1:cd:32:22:4e:e5:9c:24:9c:c4:43:3a:aa:fe:
9d:c8:e9:f0:8e:29:46:15:cc:b4:5a:10:9d:70:9c:
e8:0c:0b:08:07:b1:68:c6:c1:1c:ab:19:0d:d6:bf:
ce:72:2d:f3:af:97:76:bb:9c:a8:16:55:89:4a:e0:
d2:a5:e3:1b:58:ac:9f:cb:0f:db:98:5a:70:30:5b:
0a:5f:43:e8:eb:22:f1:85:1b:9a:83:3c:16:53:28:
95:a2:db:87:2b:cc:c3:ce:16:03:66:a4:c0:ed:6c:
54:b7:c1:eb:dd:58:ab:63:01:b4:13:ae:1a:38:fb:
58:d1:ca:a6:88:6d:10:c4:7e:64:6f:83:27:6c:46:
43:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:73:56:26:7D:C6:9A:09:0E:13:D4:14:75:58:65:29:14:00:0F:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dc7ad44c-ee58-3198-8802-43f2ceebd380.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.74.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:9b:b1:dd:86:5a:5d:c8:ac:74:64:74:97:17:d6:59:d9:74:
3a:3e:a1:69:0d:b7:7a:54:6b:cd:f4:3d:e7:0a:64:cf:49:39:
85:5f:80:f3:01:e2:42:a3:d1:2a:9e:7f:39:ec:a5:12:8f:18:
f2:b0:75:96:e1:94:28:d2:a4:dd:b3:c8:9d:75:0b:17:e2:ec:
71:d4:9d:93:6b:00:3c:95:b9:cb:da:7b:00:6f:5d:f0:d1:b4:
ef:34:cb:14:47:c1:73:03:79:46:ce:11:17:97:d3:32:43:18:
f7:6e:d6:e2:e7:8c:c5:cc:f8:5c:ae:e1:6a:4b:c8:9c:b6:e6:
20:a5:06:23:7e:06:66:d9:10:51:16:c4:85:5b:a5:b0:2b:3d:
0d:4e:8a:d6:36:0a:af:1a:1b:27:bc:dd:f6:9d:af:c7:9f:12:
64:7d:ac:d3:b0:03:f6:73:30:89:52:78:54:34:db:ae:23:05:
db:0b:f3:11:1c:d0:db:9b:a6:3b:6a:94:c9:14:43:51:c0:47:
de:2e:0b:d3:3f:cc:f0:d9:ce:2c:e8:86:6e:13:55:8d:25:da:
7c:69:f5:5e:e3:15:c8:68:ed:87:74:b6:d7:cb:b9:d7:45:e3:
e2:43:67:b2:a4:cf:72:af:61:59:33:d7:1e:48:1f:fd:9c:74:
90:03:03:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:27:25 2025 by rpki-client