Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/13e976ab-1683-34dd-964f-9eb90fd6e1f3.roa
File: 13e976ab-1683-34dd-964f-9eb90fd6e1f3.roa (raw, json)
Hash identifier: w4C/OYR4BKCFyeW2CgVqxrwmAaFWjmbmprcKmFRI+jc=
Subject key identifier: 3A:4B:5A:91:D4:5D:CB:D1:3F:0E:75:A2:71:7C:9D:49:B6:14:32:2A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B2B65C6465C8D7D124C14C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/13e976ab-1683-34dd-964f-9eb90fd6e1f3.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.57.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:2b:65:c6:46:5c:8d:7d:12:4c:14:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=f0eae84f-fb15-4fa1-b0cc-3f7f49707b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c4:b0:95:fe:08:39:65:8f:34:97:27:ea:e9:
9b:c5:72:22:a5:b3:54:9a:74:57:5a:b1:b2:fc:f3:
23:18:92:0b:90:b2:67:36:3e:05:e2:f8:1e:30:62:
e9:fe:af:dd:98:75:1f:21:44:ca:54:c9:5e:e3:a4:
d1:b5:be:9e:73:0f:bf:25:3d:82:9b:51:a1:46:7f:
ac:22:01:e9:25:e9:3c:84:ad:c8:78:52:90:84:70:
80:e6:2e:07:77:9a:dd:3b:da:17:3b:54:37:0b:96:
5c:8a:52:6c:09:c7:f3:bc:c8:98:b4:b5:d1:7d:9f:
64:80:4c:b6:80:40:fd:d8:19:1d:31:12:d4:76:e5:
3b:f8:58:74:91:c6:e0:83:93:35:18:f5:98:94:42:
aa:22:53:4c:62:40:8b:bc:29:91:12:dc:d2:a2:a8:
e4:fb:14:d9:70:1a:b6:26:22:b6:64:7f:3f:61:bb:
ac:ed:bc:9e:33:18:2a:90:bf:fa:95:09:a7:70:3a:
d4:42:c9:88:18:f2:26:32:d3:d6:40:b3:cd:89:e8:
20:6c:d6:a2:c8:ad:63:4b:49:c6:87:83:15:50:5d:
0f:e3:a4:5b:5d:a5:87:b7:05:ce:e1:f7:7a:05:1b:
77:03:28:ba:7e:72:a2:88:8d:2c:50:06:db:ff:f3:
83:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4B:5A:91:D4:5D:CB:D1:3F:0E:75:A2:71:7C:9D:49:B6:14:32:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/13e976ab-1683-34dd-964f-9eb90fd6e1f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.57.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:5d:26:cb:75:7c:1b:e9:03:33:fc:a7:38:0a:cf:1a:21:bb:
48:b1:cd:8d:8a:2f:53:de:5f:db:94:54:c7:da:c6:7f:ef:96:
bf:e7:2e:87:7d:dc:64:28:27:56:a1:b0:92:76:3e:1f:6d:54:
1c:d1:d1:ba:49:a0:c8:d1:e5:1e:96:d8:58:1d:b5:27:39:b0:
8a:f2:b3:ab:5c:48:e9:8d:51:d5:cd:93:b8:02:77:31:d6:b1:
f0:29:7e:6f:d7:0d:7e:60:a2:14:59:c9:42:c9:d5:fe:47:55:
19:fe:89:9a:63:e3:bb:96:2e:6e:2f:96:f6:8b:4a:87:b3:a9:
bb:7c:f9:95:40:c9:18:e2:5d:f7:bf:92:04:b3:d7:78:17:84:
e3:45:6e:ce:0c:0d:ac:fd:71:6a:a9:92:95:10:91:d7:b5:f8:
62:ab:99:f7:8f:a5:e6:14:36:f5:bb:cd:0b:30:f5:12:ff:fe:
ae:fc:fe:08:d6:b2:97:6d:4c:bd:ef:69:bc:b6:03:4b:5b:78:
6b:32:a7:2d:ae:fe:75:43:b4:2a:72:0f:dd:9d:03:40:5d:de:
e3:23:bd:dd:a0:17:6a:35:65:e3:5a:09:4c:d8:d9:ad:a8:97:
67:ae:54:06:bb:e2:46:6a:06:3d:f5:b9:77:02:f4:a3:ff:2c:
a0:4f:1c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:41:23 2025 by rpki-client