Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e44b8e9b-5d17-321c-acac-9bb10f05c721.roa
File: e44b8e9b-5d17-321c-acac-9bb10f05c721.roa (raw, json)
Hash identifier: pZHNJ3/ni11SrvhXIE/Iu3g8Ico0WZpPV6FR4DZvsb8=
Subject key identifier: B0:0E:1A:29:A2:48:43:8D:21:AE:EC:52:EB:81:FA:B6:57:55:87:C7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE450B1E25DC5A32F710A4E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e44b8e9b-5d17-321c-acac-9bb10f05c721.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.174.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:50:b1:e2:5d:c5:a3:2f:71:0a:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=8597d5c8-544f-433b-878a-c2e65232f47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a3:8b:ab:33:e9:52:ff:83:d6:36:bf:ca:4b:
8f:74:66:04:41:b7:df:ce:25:21:df:0c:60:01:cd:
39:d4:ae:ca:03:30:10:d3:1e:f2:6d:d2:d9:32:c5:
b9:76:d9:58:ae:02:a3:84:bc:e4:61:6b:4d:06:5d:
a8:dd:1d:90:f6:c1:a9:1d:30:d9:b6:24:ac:73:44:
0e:91:af:4f:08:f3:2b:2b:64:10:7b:1a:23:7b:14:
83:1b:ac:8d:69:0f:53:f5:1a:c6:16:e2:6e:53:79:
34:f5:e1:67:98:be:26:59:bf:44:c8:e7:03:57:1f:
80:97:64:d8:1f:2b:c3:06:8f:bb:26:35:47:89:18:
9b:5b:5f:83:1a:c4:c7:42:19:4a:92:82:7a:79:1a:
66:d4:2c:b4:ef:92:27:1f:7b:2e:43:38:37:e3:6b:
ee:b5:ad:31:56:0c:99:24:ac:87:b0:fd:f4:ef:0a:
d4:40:11:7c:11:c5:d5:47:cc:79:8c:2b:dd:e3:d7:
70:53:f0:0d:99:09:49:a7:1b:0b:c9:f2:00:fd:ac:
da:8b:9c:42:db:95:9b:94:02:79:8b:03:49:06:0c:
5c:3f:c5:0a:9b:bc:68:37:15:ae:80:96:da:44:b7:
62:ae:ec:fc:33:a9:95:02:69:a3:86:f6:80:dc:31:
be:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0E:1A:29:A2:48:43:8D:21:AE:EC:52:EB:81:FA:B6:57:55:87:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e44b8e9b-5d17-321c-acac-9bb10f05c721.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.174.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:45:f7:1c:f6:9c:b5:e7:a1:69:5b:ce:95:c2:b3:71:11:23:
57:43:ae:eb:70:6b:f3:49:61:f4:0f:f0:e2:77:24:5f:45:05:
4c:33:56:0d:bf:dd:c1:85:60:b5:2a:bc:a7:5d:89:24:cf:ef:
cc:91:2e:ec:68:75:66:d8:b0:70:26:9f:e2:52:a0:57:d4:5c:
e4:7c:bb:27:d7:66:47:66:ec:33:c3:73:92:9f:c7:ea:d8:a8:
00:e9:fc:41:1c:2d:11:29:1b:1c:e0:89:6e:fd:5d:4e:51:e5:
7c:29:4d:d2:4e:85:dd:74:53:68:33:d0:19:90:e2:c3:a0:2d:
11:b1:7a:cf:38:81:e6:76:61:4b:51:f2:ca:f1:36:86:23:d1:
58:79:90:ca:d1:4a:40:e1:ba:31:89:36:06:21:be:d4:41:3c:
31:0f:dc:ef:b8:6b:7d:6a:23:f8:55:b7:55:2c:16:38:3e:73:
96:50:42:30:80:15:3d:ac:1b:5a:b5:72:56:f6:af:3f:90:92:
39:73:36:53:e2:ae:d8:37:f5:e5:44:5b:1d:a7:90:31:b9:73:
ca:4a:fe:6e:d9:1f:d0:1d:5c:8f:83:bb:56:c3:44:5f:87:ce:
de:5e:77:c7:88:a6:09:19:4d:0e:b2:ac:f8:54:65:60:1d:86:
2a:85:2e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:21:33 2025 by rpki-client