Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/313d3e38-a980-3861-98d4-90da6e607788.roa
File: 313d3e38-a980-3861-98d4-90da6e607788.roa (raw, json)
Hash identifier: 1npppvwWIy3dLS9VE6xiDgycSu3uNYYqBoDGGJ053a0=
Subject key identifier: B0:1E:CB:89:D6:3C:73:EE:1A:6B:BA:7F:A8:59:5D:AA:F1:DA:14:75
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F82723930525E9AC046BBDD40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/313d3e38-a980-3861-98d4-90da6e607788.roa
Signing time: Sat 08 Oct 2022 12:00:00 +0000
ROA not before: Sat 08 Oct 2022 12:00:00 +0000
ROA not after: Sun 13 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.35.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:82:72:39:30:52:5e:9a:c0:46:bb:dd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 8 12:00:00 2022 GMT
Not After : Nov 13 05:00:00 2022 GMT
Subject: CN=bad8619c-a0a4-4dfc-8ca4-654ec30c80ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:45:fc:16:d8:b0:9c:b1:b5:2b:1e:b7:dd:
c7:c1:c4:e4:fa:ee:38:b4:5b:96:31:62:d3:29:46:
5d:56:94:37:9d:d3:af:cc:fd:16:1b:ea:0a:42:6b:
8f:b2:73:a4:bf:dd:7a:e6:64:90:ef:20:09:2c:52:
b2:63:71:d9:a3:02:ae:cd:df:e5:7e:10:1f:e8:e1:
36:52:e4:40:27:16:74:94:5f:80:d6:ae:90:30:a2:
ee:3e:e2:e5:1a:ac:16:dc:6d:3a:04:c0:2b:90:27:
bb:28:31:f7:25:3b:57:cf:73:2e:44:c0:61:38:46:
eb:c9:6a:a6:cd:11:84:d1:dc:a4:aa:d1:20:0b:96:
7a:3a:e4:9e:36:c0:79:bd:5d:17:02:98:e9:2c:44:
dd:d3:02:4f:53:26:f5:62:9f:e0:7c:df:a0:b0:a5:
f1:5c:ba:19:d1:7e:8a:02:ca:c1:65:83:1f:14:67:
13:e6:34:13:0e:e0:8b:c0:a7:da:8d:8b:7f:df:78:
bb:27:37:a7:a9:b9:00:88:bf:75:92:9b:4b:d8:1f:
84:50:bc:23:53:20:6f:17:df:e1:af:ca:9d:94:e5:
b6:46:90:28:93:e2:c9:43:6b:ed:75:49:e7:b1:9e:
0b:f4:8d:85:a3:d8:98:69:4b:7e:7e:24:1c:a2:73:
0d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1E:CB:89:D6:3C:73:EE:1A:6B:BA:7F:A8:59:5D:AA:F1:DA:14:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/313d3e38-a980-3861-98d4-90da6e607788.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.35.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:6a:ad:dc:7c:1d:45:ea:5f:1c:04:2a:b4:1e:9d:47:d5:6e:
38:8e:96:3c:44:80:54:9a:65:2b:1b:44:5e:79:a5:e3:e4:25:
73:49:39:b1:d5:7f:06:69:fe:81:a7:b5:17:d8:3c:c0:10:c0:
c2:65:60:7c:37:b7:3a:43:40:88:44:bd:db:d0:97:33:c1:0e:
fe:b7:33:bb:15:44:2a:38:e9:cb:de:91:ab:17:e5:ec:99:53:
27:1a:8f:4e:65:65:fa:81:fb:97:ca:4c:1e:cc:bd:53:ed:7d:
5f:4c:86:7a:36:88:5f:df:75:71:39:dd:af:93:98:91:c7:b3:
54:70:be:29:ce:fd:b0:bb:00:6e:47:da:59:97:3b:08:ef:cf:
46:e6:7a:bc:f1:7d:1d:d0:65:97:c6:9f:fe:c2:0e:6a:99:23:
57:5a:bd:ca:87:e8:78:10:c2:f6:1d:25:9a:3b:31:cc:54:9f:
0d:a2:37:89:3e:15:22:f9:e4:5c:0d:a1:dc:f0:43:d2:f4:23:
61:69:0f:27:84:1e:22:87:96:b3:45:60:da:97:93:de:7f:c8:
6f:b8:8f:a4:ac:06:72:04:b4:74:b4:98:f1:ef:8f:33:6c:bf:
db:81:81:85:1d:8c:b3:c7:b0:f3:97:10:24:ef:5d:71:85:1e:
59:ee:07:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:43:27 2025 by rpki-client