Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/115d1a4a-a6f8-3a1f-ae9b-9d0cd81436fa.roa
File: 115d1a4a-a6f8-3a1f-ae9b-9d0cd81436fa.roa (raw, json)
Hash identifier: Exw+Mfa5psndlKecS5WbZmPki49AEOkOnP1XKMGH2hM=
Subject key identifier: F2:6B:B7:1E:50:5E:F3:7F:D7:ED:54:B6:EC:50:E4:1A:B6:73:20:F4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE406509B59E8142CE942D7C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/115d1a4a-a6f8-3a1f-ae9b-9d0cd81436fa.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.39.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:06:50:9b:59:e8:14:2c:e9:42:d7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=28dcfe19-b8e7-4f3e-ba08-6b09de46a122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:62:1c:a6:ac:63:a7:fe:e9:ee:10:05:a0:
f1:bf:0e:cb:f6:5c:ea:99:23:fe:dd:10:05:7f:ac:
e8:69:5c:31:e1:22:4e:ee:b9:a9:83:64:a7:ed:b4:
bc:94:ec:7b:d8:7e:2d:dc:c8:32:a9:83:a1:16:8d:
f6:f9:69:60:3e:cd:d7:fe:2f:d0:72:0b:a4:e5:f6:
82:ce:9b:c2:b1:15:30:e6:18:f9:45:cf:8b:d2:2c:
bc:82:eb:3c:cd:0d:3e:7a:ca:41:a1:d4:4b:3b:05:
f3:b8:cf:1d:55:df:d1:59:65:af:ef:e1:ad:61:c3:
4a:80:c3:70:b3:ad:15:5d:63:9b:44:60:64:55:9e:
e8:72:0b:0e:f4:df:9f:06:7a:02:b6:54:55:24:25:
7b:bf:5a:3d:91:97:ab:af:e6:3a:14:9c:05:58:dd:
73:6f:89:8d:cb:cb:b2:3d:e1:81:69:7f:2b:b0:59:
1f:ba:8c:24:b2:61:b6:42:0b:04:7b:02:18:1d:8c:
60:f0:39:cf:f9:87:aa:c6:ba:24:4d:3a:2f:9c:02:
b7:04:1c:58:bf:23:98:0e:c5:b3:89:4c:1e:34:ed:
20:a5:b1:88:a4:88:db:53:eb:33:04:0b:1a:db:f6:
90:51:e4:7d:25:77:ec:1d:ea:27:0a:34:36:80:83:
df:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6B:B7:1E:50:5E:F3:7F:D7:ED:54:B6:EC:50:E4:1A:B6:73:20:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/115d1a4a-a6f8-3a1f-ae9b-9d0cd81436fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.39.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:07:8e:12:a2:8d:81:3e:3d:5e:4a:29:70:fb:bb:56:45:ec:
60:b2:52:d4:51:96:c5:76:31:32:5f:ea:94:b1:60:f0:9b:c2:
10:88:d1:da:56:f4:3d:02:f0:73:75:71:d0:63:68:91:74:06:
07:7d:b7:a5:da:54:2c:91:a9:be:e5:9e:5b:a6:f8:05:27:ab:
1b:e4:a5:ab:7f:e2:93:e1:01:3b:12:80:ce:28:4d:4e:69:09:
a9:7c:01:bd:9d:b4:16:1c:2c:2a:6e:63:3c:91:0d:11:c3:fb:
8f:42:40:aa:02:e0:45:48:a4:d2:ad:a3:96:46:2b:f6:3b:b7:
f2:29:e3:78:3c:0a:42:ad:33:53:28:38:48:60:7b:04:4f:99:
ba:2d:c5:77:ba:01:c6:87:31:d5:0b:d2:dd:72:d3:a3:48:ac:
ed:f4:2c:04:c4:8d:2f:18:d0:d2:f5:16:a6:67:f0:49:0a:32:
76:9e:4b:8f:1e:1e:17:d5:2c:91:f5:58:f6:64:28:8f:1e:86:
55:b0:a5:ec:d0:49:f1:c0:45:dd:1b:c2:ee:fa:93:74:c7:47:
22:a7:b0:34:2c:4f:01:b5:af:1f:2c:6c:c3:66:64:6f:ad:a4:
7c:23:98:ce:fb:93:e3:8f:01:12:5d:99:1a:85:a3:35:08:87:
9a:83:13:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:55:16 2025 by rpki-client