Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1845f847-8dff-38d8-9796-f6db4629959f.roa
File: 1845f847-8dff-38d8-9796-f6db4629959f.roa (raw, json)
Hash identifier: UKd0scvuy5JK24ZXyJNYjklskqDxZ9rxC0TJEJJHyRo=
Subject key identifier: AD:E9:BF:28:D9:C9:54:20:21:C9:AD:9A:06:BD:B9:B0:16:D7:83:28
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD3AD02B4065C137149C90400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1845f847-8dff-38d8-9796-f6db4629959f.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.138.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d3:ad:02:b4:06:5c:13:71:49:c9:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=343c16ad-11c6-4614-9e06-362b5df4f22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:54:eb:54:ca:3c:06:cb:01:a6:18:86:1d:
c2:97:de:fe:cd:bb:5f:88:ba:9c:c6:c3:de:ee:41:
ca:b3:f5:da:93:69:91:15:db:b8:ce:b3:a4:69:53:
8c:3c:d6:07:e1:32:bd:97:5c:0a:69:b9:e4:c5:d2:
7d:c0:a3:54:59:5a:09:55:1b:2b:4c:ed:a0:c4:33:
df:5d:3a:70:c2:c5:8b:26:2b:ca:82:58:fd:5f:ed:
ee:21:63:ce:c9:e4:ba:9c:40:2e:c5:93:8e:99:e1:
22:d7:72:c3:a8:7a:b3:82:4c:77:ca:93:57:e8:3e:
12:1a:9a:97:7c:51:ea:f3:80:17:ac:b2:a2:7e:6b:
71:23:86:7a:1c:a5:09:32:a4:9f:6d:39:5d:7d:25:
c8:e1:06:2f:e8:3f:6d:e3:31:93:36:d2:3e:40:cc:
db:8b:7f:c6:5b:f3:63:9f:3a:fa:01:d0:b0:6f:6c:
54:4b:a2:ff:0d:19:94:58:61:6e:91:ac:8b:f6:d7:
ef:4c:a7:cc:85:d5:a1:21:98:61:df:db:5d:a5:b8:
0c:84:44:34:be:0e:29:ce:86:5e:75:a6:e9:b3:da:
46:59:bd:7d:dd:1d:f1:af:ab:7d:02:ed:9a:d3:97:
26:e6:94:a8:8d:0c:c1:75:f0:f1:1a:1c:3f:5b:24:
9e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E9:BF:28:D9:C9:54:20:21:C9:AD:9A:06:BD:B9:B0:16:D7:83:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1845f847-8dff-38d8-9796-f6db4629959f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.138.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:02:e7:05:ee:ba:6e:e8:e6:fe:c7:e4:1c:25:45:21:70:fc:
fe:8a:0e:cf:92:5f:07:86:cd:1c:c7:b8:ba:7f:ee:55:e8:e6:
0e:d8:b1:fa:e6:11:f2:6d:1c:54:63:e4:83:61:7c:6f:50:0a:
e0:df:fc:eb:44:8e:2f:c1:8e:af:85:08:92:4a:71:e1:59:bb:
ee:76:be:e0:45:92:3c:b5:1a:a8:ce:00:a0:ed:8d:bd:a5:91:
82:84:72:d5:3d:e5:9a:84:45:3f:ca:2d:2b:65:e4:ec:d0:79:
b1:c2:3f:4b:01:a6:c6:ea:ea:42:5c:5f:84:6d:4f:c1:08:29:
0b:4c:91:85:65:99:20:69:4d:36:3b:22:a8:f6:a6:55:7b:ac:
ec:63:72:91:ed:27:80:0b:b5:b6:0a:ed:37:11:21:98:72:87:
de:60:82:8d:82:dc:fb:66:eb:60:12:f8:80:c0:6f:b0:28:f0:
a3:79:f9:0a:72:7a:d2:1b:c1:f7:ac:df:b8:f0:1d:e9:57:e6:
54:e5:ef:15:ff:96:ea:29:8d:c1:52:0d:63:8c:9a:10:63:aa:
ed:d7:eb:ed:c2:ee:0f:e0:12:eb:5d:00:3d:7e:75:6d:60:96:
92:82:a0:64:88:49:ef:53:84:a4:ca:91:db:35:72:c5:4b:ef:
7e:92:9a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:15:09 2025 by rpki-client