Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34751cd5-b407-32c0-842d-f7117dd2b14c.roa
File: 34751cd5-b407-32c0-842d-f7117dd2b14c.roa (raw, json)
Hash identifier: fZH7/dJvx3hvuZ4R3I+FAvts92u/a9wqnngTYOwCidY=
Subject key identifier: 45:83:AD:44:22:A9:66:CB:7D:B7:C0:85:D9:FE:49:44:9B:A3:6D:2E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DAC97BFB9A89ECCCD07DA0340
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34751cd5-b407-32c0-842d-f7117dd2b14c.roa
Signing time: Fri 22 Apr 2022 12:00:00 +0000
ROA not before: Fri 22 Apr 2022 12:00:00 +0000
ROA not after: Sat 28 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.126.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ac:97:bf:b9:a8:9e:cc:cd:07:da:03:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 22 12:00:00 2022 GMT
Not After : May 28 04:00:00 2022 GMT
Subject: CN=02fe898f-3fcf-4970-b107-ebc2d3dde08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fd:61:a9:b0:24:1c:24:b3:de:0f:8e:18:12:
1e:ed:a8:2f:a6:29:7b:23:e2:e3:bd:05:61:be:71:
0c:51:2f:ee:3e:6c:25:a9:87:cc:5b:71:99:fd:b9:
f9:ae:f4:e5:48:1d:4e:1a:2e:61:48:24:b3:a1:c3:
1c:2a:66:11:46:5c:a6:37:cb:0c:9e:dc:6e:8b:56:
e8:55:d3:28:3d:15:f3:1f:29:aa:ff:fc:81:2e:43:
dd:bd:f4:5b:5d:75:ed:d9:bf:3a:1c:a4:20:47:42:
1f:b5:83:7a:a0:7e:f5:1f:60:a2:43:4f:cf:53:ce:
1b:8a:7b:10:5c:b8:f7:70:d8:39:43:cd:9f:91:37:
83:60:40:d4:6e:71:b2:32:5c:a5:ac:cb:6c:ef:81:
fb:d4:66:ef:1c:96:a6:87:78:76:bb:42:81:29:73:
6d:f1:25:a6:9a:e5:df:61:15:f6:cb:69:96:a5:a1:
fb:df:49:d5:c1:e8:94:03:8b:b0:a0:a9:e3:f1:bb:
94:be:52:1a:2b:6d:27:d8:73:c9:3e:71:23:c2:b4:
96:b7:2e:29:65:99:7a:4b:ab:5f:09:47:2b:37:01:
94:c6:b7:51:00:6e:44:9a:ce:7a:99:51:c8:a2:a8:
92:e6:6a:2b:41:bd:73:a9:a2:6e:ed:2e:52:5e:ab:
66:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:83:AD:44:22:A9:66:CB:7D:B7:C0:85:D9:FE:49:44:9B:A3:6D:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34751cd5-b407-32c0-842d-f7117dd2b14c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.126.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:d1:3c:fe:e2:4d:5f:7b:5f:e2:fb:d4:03:c0:57:35:48:10:
62:dd:a9:0b:49:d1:de:c1:1e:ef:01:57:9a:87:61:69:e7:60:
e9:74:34:27:01:58:89:11:26:ba:ec:e2:61:01:6c:b4:ed:31:
5a:0f:a4:6e:6f:53:f0:17:c3:1b:09:24:5a:e3:6b:bc:b0:65:
dd:19:fb:46:eb:6f:d0:56:09:b2:21:07:e8:97:a0:ba:fb:50:
4f:47:89:e1:56:ca:3a:90:43:29:3c:8b:94:be:75:17:0b:b6:
dd:5e:97:d0:ec:7a:22:46:5d:59:41:9a:94:f9:63:4f:a6:7b:
cb:df:22:9a:03:07:ae:6c:d5:64:c2:49:91:5e:f3:a0:d0:6a:
31:65:6c:83:1a:a4:b6:08:cd:e3:6c:b5:23:c0:e2:a6:f5:72:
78:28:a6:71:13:84:b9:79:94:57:0e:b2:ad:01:b9:97:2a:e8:
cd:1a:5e:36:50:5d:71:f9:4e:32:5c:2c:19:41:be:96:f6:a7:
7f:24:49:b1:e3:4a:4a:86:14:ad:c3:8e:14:84:35:a6:e2:8a:
46:21:f8:fb:5f:29:c3:49:97:bd:ae:8e:80:a9:58:ab:4b:a4:
83:9e:d6:b0:f8:be:92:30:d9:cb:18:a8:9d:9f:3d:9d:c0:a4:
1c:8b:dc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:59:31 2025 by rpki-client