Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a96f8f0-521c-33fc-91c5-649da2fb2b1d.roa
File: 0a96f8f0-521c-33fc-91c5-649da2fb2b1d.roa (raw, json)
Hash identifier: N9cvUx0lKp5p1twED6U425NJRl8LeNOiYLkBI6u5rlI=
Subject key identifier: B3:D8:7B:1F:A4:19:D1:2A:B5:A6:64:4A:05:5B:51:FD:18:EE:87:0B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D59BDB6E187BE0CD4D52D02C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a96f8f0-521c-33fc-91c5-649da2fb2b1d.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.202.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:bd:b6:e1:87:be:0c:d4:d5:2d:02:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=874faea9-1bc8-4690-a738-a8cdb9992bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:34:c1:9e:0f:7f:7c:df:9f:93:b2:e8:63:56:
d0:29:64:dc:34:06:51:f3:b1:6d:0f:56:78:c4:65:
64:06:48:35:a1:9d:02:db:c6:0e:52:14:4f:8b:16:
42:ce:08:5f:57:5f:34:09:f7:14:99:e6:ca:42:f1:
77:6d:82:9a:37:9a:76:24:c7:bd:50:ce:c6:81:bd:
b6:5a:de:73:00:da:66:f3:d7:43:14:62:52:31:f9:
9f:02:7b:b7:dc:33:06:37:f6:53:d3:5d:4e:74:eb:
9d:77:d8:13:5e:63:1e:57:72:9b:c8:49:cd:92:b2:
b3:7e:f3:0a:f1:94:6f:f7:76:1d:c4:5b:1e:2c:5f:
d0:e8:91:07:1a:ea:63:c6:06:e5:5d:8f:8d:56:9a:
2d:f0:85:b3:f5:e9:04:ba:c4:c8:02:4c:fc:5c:ee:
d7:4c:30:c7:04:f4:f3:35:b8:be:96:72:ce:70:54:
d5:fb:fa:d5:9b:d6:cc:b1:d7:9a:b2:57:a9:e2:2d:
77:b1:57:b9:e1:10:cd:12:8f:38:27:a2:aa:65:6a:
0f:97:a7:1c:25:c5:0d:ee:91:14:a4:30:91:2f:a4:
ad:89:9c:2a:8b:cb:c1:db:be:3c:9a:bd:01:35:30:
74:10:a6:fb:18:a3:db:16:7c:bf:fb:4a:f8:aa:37:
c3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D8:7B:1F:A4:19:D1:2A:B5:A6:64:4A:05:5B:51:FD:18:EE:87:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a96f8f0-521c-33fc-91c5-649da2fb2b1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.202.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:5e:8c:24:07:75:28:ea:c9:c4:a3:e9:34:43:3b:3e:a4:3f:
52:b1:24:9a:49:85:37:ab:f6:b7:dd:3c:a4:05:eb:af:97:ff:
98:3b:e0:36:d0:c6:92:be:ab:48:57:26:73:e7:3b:e6:75:07:
e6:ad:88:93:18:2f:1e:15:91:02:a8:18:f5:7e:60:61:e7:ec:
ca:d6:da:03:80:22:8f:13:fd:e1:d0:44:d7:7a:ce:9c:0a:2f:
68:0d:d6:2c:5e:8b:45:b5:e4:41:04:cd:c5:05:b2:46:9d:8d:
d1:e9:11:25:5c:e2:99:eb:e1:a1:4d:c1:41:8e:74:97:51:6c:
8e:f0:14:dd:e0:d9:c5:44:f4:66:52:8c:14:ca:99:b0:e6:c5:
f1:ce:bd:a7:b8:d1:86:a5:91:96:16:85:2f:78:5d:9e:31:06:
99:bd:95:95:17:06:92:85:de:13:00:c4:4e:a3:20:57:82:06:
16:e3:de:69:71:8f:15:33:ae:f1:04:3a:fb:18:14:f4:1f:0e:
87:d1:b8:51:54:4b:a2:c0:ef:3e:2c:ed:49:c4:f5:6f:89:4f:
52:e4:46:a0:2b:09:26:89:97:ce:8e:2f:c5:dd:5f:b3:2b:b5:
24:62:9e:a2:a3:b2:fb:74:b4:10:73:35:c7:b6:be:0c:45:8e:
21:14:fe:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:33:53 2025 by rpki-client