Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10f71e17-55b6-384a-b84b-87f516db1a39.roa
File: 10f71e17-55b6-384a-b84b-87f516db1a39.roa (raw, json)
Hash identifier: NjjuUmJt/oV/6Ds9xF72rKo6kPrFNIt5vf2z3NmdF54=
Subject key identifier: 8D:5A:60:7E:07:40:DE:C8:34:5B:AA:B1:C0:25:F1:63:42:77:7F:21
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E96B80AF4AC06EC21F14B7F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10f71e17-55b6-384a-b84b-87f516db1a39.roa
Signing time: Fri 15 Jul 2022 12:00:00 +0000
ROA not before: Fri 15 Jul 2022 12:00:00 +0000
ROA not after: Sat 20 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.190.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:96:b8:0a:f4:ac:06:ec:21:f1:4b:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 15 12:00:00 2022 GMT
Not After : Aug 20 04:00:00 2022 GMT
Subject: CN=c4b9651c-3f50-455d-a68c-263f94d00d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:96:94:ac:05:d1:50:72:05:3a:b0:03:e0:77:
b2:4e:24:27:02:f2:9e:2f:15:3f:88:46:b8:c9:03:
28:cd:01:72:d1:cb:1d:84:94:25:1b:66:f4:e2:8e:
e5:3f:e6:b8:02:51:97:90:e6:4a:d3:df:26:1c:bf:
57:03:8d:89:3b:d9:88:e3:a7:ed:97:70:1b:04:b1:
72:1e:bc:25:a3:8c:09:32:dc:f0:f5:63:0f:f7:c7:
96:88:11:d4:26:0f:59:c5:9a:d0:17:a1:00:51:5c:
e2:c7:3d:e4:5a:89:6e:7b:03:7d:89:04:dd:74:7e:
18:bb:02:0c:9f:45:67:34:8a:93:ae:b3:4c:a1:50:
92:f7:de:b9:4c:d5:ea:25:52:f0:e8:f1:45:24:d8:
77:bb:eb:7c:f8:1d:8b:3b:98:4d:5b:a0:cd:1e:20:
cb:82:4e:85:c7:65:67:4c:1d:7f:d3:cd:a2:74:9e:
aa:e6:fb:f3:b4:db:f2:d5:2a:ad:4d:2e:39:21:37:
17:62:11:e6:96:9e:90:d8:8a:3c:30:27:ca:5b:37:
10:1e:2f:9f:1b:99:5d:bb:8a:e2:da:46:b9:87:61:
4d:79:f6:7e:32:ab:a5:f7:3d:89:cb:fc:28:b9:f6:
7b:7d:c1:97:03:2a:11:96:72:ed:c1:ff:96:94:11:
9c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5A:60:7E:07:40:DE:C8:34:5B:AA:B1:C0:25:F1:63:42:77:7F:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10f71e17-55b6-384a-b84b-87f516db1a39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.190.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:b6:f7:6c:cd:10:4b:47:38:ce:7f:b2:8b:d7:48:77:a7:4f:
0d:20:84:8c:9c:4b:7d:b1:64:98:46:5e:96:aa:a7:8b:e2:b4:
e8:e3:0b:90:98:43:30:a9:ba:37:cc:09:6f:77:bd:42:e4:7a:
73:c1:5c:6b:96:f0:fe:58:36:2a:64:19:1b:f4:ac:32:2c:0f:
42:42:06:ed:f9:a3:f9:94:0d:66:09:0b:5e:80:63:9e:01:92:
46:d0:35:b1:31:57:15:e6:f1:74:b7:c0:db:eb:8f:c5:51:b0:
6c:80:c3:00:df:ef:2d:d1:5c:71:dd:c9:70:b6:22:86:9c:bb:
9d:63:d6:b1:1f:bd:aa:10:0c:0f:b1:97:1b:97:70:86:82:90:
bb:a2:40:db:6a:c8:db:17:68:4d:3e:03:8a:7e:80:6e:92:9e:
f2:5f:23:f4:e3:e7:df:50:04:e8:7e:f6:60:3c:a6:d1:88:a8:
04:0f:71:20:f2:21:6a:b3:a5:7f:ca:26:42:d5:45:53:5d:b3:
56:55:1d:5f:6d:ae:6a:06:df:15:e5:7f:2b:8e:e4:6d:59:cf:
2a:5c:61:3f:ad:87:43:b0:72:f4:bf:d2:58:a2:7a:e7:ad:7b:
81:93:69:bb:e6:c0:73:08:88:1f:09:68:18:4f:36:b6:bc:be:
7f:56:ef:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:07:29 2025 by rpki-client