Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d91cd31-06c8-31f7-bd0b-aff647276f0a.roa
File: 0d91cd31-06c8-31f7-bd0b-aff647276f0a.roa (raw, json)
Hash identifier: NCA+Nzw3DPh/6Hxj8B612RWNVym+xQtS6yIAxo4SlLQ=
Subject key identifier: B8:A3:31:50:00:A9:92:23:17:A2:D2:A5:A2:DA:B8:DD:0D:DC:0C:1D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0CBA773336EB2B8161F7FD80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d91cd31-06c8-31f7-bd0b-aff647276f0a.roa
Signing time: Sat 27 Aug 2022 12:00:00 +0000
ROA not before: Sat 27 Aug 2022 12:00:00 +0000
ROA not after: Sun 02 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.100.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0c:ba:77:33:36:eb:2b:81:61:f7:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 27 12:00:00 2022 GMT
Not After : Oct 2 04:00:00 2022 GMT
Subject: CN=ec2bb9b8-6731-44e8-9c1a-5c88010d0ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:53:6f:ff:6f:6d:28:9d:01:e0:8e:f0:ed:74:
b0:90:20:ce:a6:9d:97:8b:ff:1a:f4:5f:22:b8:51:
31:96:45:53:ec:77:2e:fb:33:90:cb:fd:e4:8e:4f:
0e:04:66:1b:1b:2a:c1:67:0f:b7:07:3a:7a:42:a8:
c9:c3:65:50:cc:6b:5d:79:33:18:1c:3d:c4:c3:8f:
ac:40:6e:e0:4f:8e:81:e5:2e:55:5c:df:18:3c:29:
b9:79:24:cc:33:57:3d:2c:dd:b8:27:dc:ed:67:16:
52:33:6b:d5:8d:7f:2f:ea:d9:29:48:9b:80:1b:2f:
40:6a:3f:d7:4a:a3:5f:cc:64:b7:2e:ec:f0:95:44:
6f:53:f4:d6:22:a2:10:da:c7:d4:4a:e1:f3:e4:03:
9f:87:fb:b5:21:7c:ec:c2:4b:a5:30:9c:df:11:39:
73:a0:f8:fc:8c:69:27:da:03:15:9e:8a:f1:0c:21:
ed:bb:31:18:4e:5f:5d:2a:1f:b7:d3:88:b7:58:d9:
85:24:3b:b0:90:67:c8:b7:18:30:da:5e:7e:ff:a3:
9b:33:af:b0:f7:82:94:e5:ef:08:14:e1:3a:c7:bc:
ed:62:d9:76:b6:0b:1c:93:37:8b:53:fc:b0:97:1e:
00:02:9a:39:b4:d2:56:48:ea:46:f0:67:4f:29:c0:
04:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A3:31:50:00:A9:92:23:17:A2:D2:A5:A2:DA:B8:DD:0D:DC:0C:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d91cd31-06c8-31f7-bd0b-aff647276f0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.100.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:e2:29:5d:80:04:ba:ff:98:d5:93:05:8f:a6:18:2b:fd:2f:
f2:b1:6e:73:0f:1b:70:a1:98:5b:d6:f4:d0:4c:d8:d1:f3:af:
32:0f:8a:66:98:27:6c:6b:15:d3:c5:a0:7c:2f:e1:48:ea:ef:
3c:1f:d1:4d:0f:f6:4d:3b:a4:88:99:e3:51:40:6d:bd:3a:f3:
99:0b:f6:bb:8e:c3:e8:e0:76:02:07:ac:8d:1f:6b:34:6e:0f:
00:cd:79:7d:b4:3f:c1:8d:4d:5c:ed:f3:a1:47:1b:1f:f0:fb:
7c:b2:19:1c:4f:80:d4:6f:40:a0:48:2b:f5:4b:8a:c1:59:b4:
41:34:86:84:69:a0:64:07:9a:a0:9d:a5:ce:87:4d:11:b4:5c:
c6:96:f5:5a:27:98:c7:73:b1:a3:85:a2:3a:f3:c2:89:c5:ef:
58:30:3b:80:0c:77:65:c8:1f:01:50:85:28:a1:ee:c5:fd:f3:
a7:94:c1:58:9e:06:6d:74:3c:7b:cc:78:0d:b3:56:5f:af:3f:
bb:1d:63:b8:14:5e:36:9a:78:dd:48:c2:72:7f:51:f6:7c:c7:
07:71:47:98:61:0f:82:3a:25:a9:fa:b9:c7:7f:12:fb:e0:dc:
a2:38:2f:2b:3f:72:47:40:c5:24:12:7e:ee:73:2c:7f:7a:c1:
70:e4:4d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:46:34 2025 by rpki-client