Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/079f320c-db31-3c82-aa70-dc0e33a44318.roa
File: 079f320c-db31-3c82-aa70-dc0e33a44318.roa (raw, json)
Hash identifier: 0a+zYN6JzcSjBfDZse8/VmSb1G1f1mrwuld48F+r36s=
Subject key identifier: 70:73:6D:A8:6A:4A:29:84:0D:26:63:02:55:2A:CA:FC:96:77:82:FA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DFB323195C15FADAA71E1BFE0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/079f320c-db31-3c82-aa70-dc0e33a44318.roa
Signing time: Sat 21 May 2022 12:00:00 +0000
ROA not before: Sat 21 May 2022 12:00:00 +0000
ROA not after: Sun 26 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.46.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:fb:32:31:95:c1:5f:ad:aa:71:e1:bf:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 21 12:00:00 2022 GMT
Not After : Jun 26 04:00:00 2022 GMT
Subject: CN=e29a00f5-b490-4a0e-a64d-5780a4128f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6c:b8:22:86:3b:3e:59:64:e4:02:f3:c3:33:
41:3b:70:bd:26:d5:b5:b6:ab:45:53:ff:2c:a9:67:
97:5a:e5:54:41:67:dd:a6:e9:f5:42:da:5f:86:80:
50:a3:15:a0:b8:58:f9:05:51:7d:19:f2:d7:64:48:
d1:d1:65:a8:1e:c5:5b:ca:76:d1:75:9f:43:9d:4d:
3a:6b:ad:0c:85:bd:32:46:f7:da:8f:da:57:34:1b:
94:3f:2b:b4:28:c7:fc:18:a1:4e:48:ff:b2:22:88:
d3:94:94:5d:2a:21:a6:71:00:5e:a6:aa:99:5d:86:
26:63:a6:1c:54:68:9e:37:de:7d:23:98:25:a8:9a:
07:64:f1:db:4a:01:07:44:6f:ce:b4:bf:93:15:2e:
80:e0:27:25:74:12:10:5e:d6:f5:6e:b6:34:6a:55:
c8:0a:b2:cb:b1:7a:af:02:e8:36:77:af:78:78:03:
ff:05:bd:be:38:fe:4b:43:21:09:12:a2:f6:ac:47:
f1:4f:ee:06:5e:3f:5a:b3:43:fd:fd:a1:66:e7:43:
a0:a6:ef:9b:9e:fe:c9:69:c5:16:f7:df:ac:c2:9e:
20:ed:12:73:b3:92:9f:7c:b9:6a:11:a6:e0:12:b3:
ef:fb:83:05:14:15:88:c9:cc:1e:3d:d8:4f:29:2d:
03:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:73:6D:A8:6A:4A:29:84:0D:26:63:02:55:2A:CA:FC:96:77:82:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/079f320c-db31-3c82-aa70-dc0e33a44318.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.46.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:08:da:bc:85:25:e8:ad:86:57:39:44:ca:7f:83:35:0e:9b:
29:09:a7:8d:a7:96:a6:1d:8a:25:5a:e1:ac:c9:8b:d2:61:85:
2b:ad:eb:ff:a7:b7:2f:a6:24:31:c5:8d:09:0b:be:96:9d:eb:
2e:8f:09:b3:b3:7f:9b:d2:7f:f5:44:0b:c6:7c:19:d9:56:20:
bf:60:8b:ff:38:fa:f5:d5:0b:24:57:f0:96:3b:13:c0:d5:68:
36:85:e6:d1:bd:bc:ae:88:b6:ec:45:33:ab:0e:08:5d:34:84:
e9:ef:5c:15:5a:8e:23:8e:8a:58:9d:46:a8:55:46:27:2f:f5:
da:ff:d6:ea:f0:45:1e:b3:64:c0:11:3f:37:6e:e0:70:7a:d6:
25:ca:b2:96:0f:1a:2a:88:3b:c8:ce:5f:38:8e:84:8e:33:43:
a9:60:64:d7:83:97:5c:97:94:d8:b5:3c:11:89:27:a8:a3:39:
42:dc:88:92:9c:1d:3e:24:53:6d:a8:be:97:ff:5a:e4:3d:18:
e0:a1:b9:75:a3:4b:48:d7:8b:a0:dd:7d:5c:0d:82:c5:14:2b:
48:74:55:f5:43:b5:74:db:ac:a3:94:83:6b:32:2c:81:f0:4e:
cb:93:e5:37:0f:1e:81:55:b0:3d:73:c4:f5:20:1a:34:8c:cf:
cc:c6:50:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:55:56 2025 by rpki-client