Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2ed3cf40-e0a7-36c8-b09d-72f7adb75f20.roa
File: 2ed3cf40-e0a7-36c8-b09d-72f7adb75f20.roa (raw, json)
Hash identifier: PS5P6wD3JWQpyUy3Gy0VDx0lbzcMGP9WFGpbCIRZxbw=
Subject key identifier: 20:21:73:92:A5:A1:34:2F:6F:E0:21:B0:4B:87:99:A2:6F:4C:78:D8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD3CB100F58240B2535B5CF30
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2ed3cf40-e0a7-36c8-b09d-72f7adb75f20.roa
Signing time: Sat 07 May 2022 12:00:00 +0000
ROA not before: Sat 07 May 2022 12:00:00 +0000
ROA not after: Sun 12 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.102.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d3:cb:10:0f:58:24:0b:25:35:b5:cf:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 7 12:00:00 2022 GMT
Not After : Jun 12 04:00:00 2022 GMT
Subject: CN=e1f6bde2-028a-42b2-ad8d-4f97d60c6d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:d2:f3:af:d3:04:bd:3b:a3:21:d8:bd:8b:
4d:e5:8d:ab:c6:96:5b:4d:d2:46:73:93:4c:48:ed:
9f:7b:f5:a1:45:28:3a:f6:9b:5e:d5:68:c0:7e:2d:
cf:55:e9:a8:1d:fa:58:70:4f:fe:e7:3d:84:46:00:
9a:cc:d3:37:c1:14:7b:cf:8a:f7:b3:d5:63:2b:1b:
0c:5f:e1:64:fd:83:d9:d4:fc:0c:db:0a:f6:bf:bc:
87:cf:84:24:b2:84:3f:3d:2a:62:74:7f:5f:1e:31:
e2:37:f5:e2:da:d9:4a:7b:0f:24:95:e5:74:17:54:
9a:66:7e:d9:e3:2d:2e:b9:cb:fd:5e:ed:bf:a0:75:
b3:d6:fa:4b:26:4b:c7:07:9a:02:8c:13:c1:1f:36:
3a:a1:0b:59:11:41:22:bb:f7:39:a0:ff:89:f0:3b:
aa:3b:97:95:34:26:a7:1f:cb:5c:84:2b:3f:8d:f9:
8a:62:5b:c6:86:69:bb:16:80:57:5d:a5:6b:52:8d:
40:12:8c:42:0a:44:c1:11:62:45:64:27:87:bc:47:
9b:6a:2d:2a:54:54:42:b0:ae:c5:43:5f:17:09:9c:
b7:fd:4f:09:af:a1:77:16:ca:67:c8:a3:d6:60:d9:
1a:94:97:5d:ed:db:74:87:72:1a:f3:ad:58:d9:f7:
df:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:21:73:92:A5:A1:34:2F:6F:E0:21:B0:4B:87:99:A2:6F:4C:78:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2ed3cf40-e0a7-36c8-b09d-72f7adb75f20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.102.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:81:13:30:30:6b:58:85:82:bc:f3:8b:06:f6:bb:66:cd:ae:
4f:ac:db:dc:fc:93:05:f0:8d:49:87:7d:a7:71:0a:7f:f1:f1:
78:4d:a3:eb:5f:f1:ed:14:96:a8:6f:1a:ad:62:17:e3:aa:a2:
b0:b7:bf:18:35:3a:99:72:ec:14:3e:f1:bd:52:b7:f0:a1:2c:
ab:25:9b:3e:16:20:93:93:9b:e9:9b:62:8f:30:18:95:83:9a:
39:5c:c3:c8:bf:b9:52:c5:b9:a4:33:74:37:86:8b:23:be:c9:
7c:38:41:2f:5c:b2:8d:bc:46:9e:e8:51:cc:58:fb:66:c1:9a:
63:af:f1:3a:c8:ee:3c:38:46:47:e7:1b:b3:3f:41:18:8c:04:
84:c3:61:e6:c5:56:8f:54:e9:ed:0b:27:70:2d:d3:1e:4c:79:
9d:b5:13:13:02:58:ec:14:a0:80:b2:30:eb:c1:f2:61:be:25:
61:91:bd:5c:5b:5a:45:e6:8c:43:76:5a:0a:d7:04:ea:ed:63:
7d:58:87:5b:7b:50:a6:c2:79:37:a5:7a:85:1e:96:44:bd:e0:
92:15:40:87:6f:73:69:b7:b9:1a:3e:a3:c7:d1:84:84:a9:08:
12:8b:07:84:f6:d7:dc:be:4f:52:38:9c:d2:0e:34:60:f7:5a:
49:6c:43:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:44:02 2025 by rpki-client