Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3547add1-b822-338e-bce4-a3496ad27f1f.roa
File: 3547add1-b822-338e-bce4-a3496ad27f1f.roa (raw, json)
Hash identifier: OOhtNYPdL6fHRWNl08OC4e3LScBWqg+gTiTXZWuBflk=
Subject key identifier: 8D:A4:29:CA:64:FB:B4:9F:D0:9D:D5:CA:28:7A:04:6A:2E:DF:30:30
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D80D3E9784AF8BF60242AD700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3547add1-b822-338e-bce4-a3496ad27f1f.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.191.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:d3:e9:78:4a:f8:bf:60:24:2a:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=9caa76f7-0716-4e87-bfc5-5405672634b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f6:e6:8b:c2:99:aa:09:a0:45:ef:28:fb:bd:
af:a9:ff:7c:87:e1:ab:1a:e2:f3:4e:ce:dd:2e:93:
f5:01:44:db:a1:37:6e:b9:63:45:22:70:70:0d:ba:
cf:68:c4:70:11:61:5d:22:24:d4:a6:98:8a:f0:fc:
1f:6f:a5:6f:c5:2b:9d:81:4b:0c:4f:20:46:57:09:
cc:e4:0e:db:60:b6:3f:de:22:fe:0d:e5:c6:ed:dd:
c1:c2:d5:12:25:63:20:30:10:de:94:07:8a:6e:40:
64:b5:48:c5:c7:71:7e:bf:d2:28:80:fd:e2:f9:e3:
90:ef:c9:07:12:aa:35:c7:42:62:f2:e6:1f:3f:e0:
d2:5e:5a:2c:23:af:a2:d7:57:1f:5c:f9:62:44:75:
b7:06:c4:b3:35:17:bc:4c:83:a0:03:92:9e:b0:04:
dc:53:82:8b:55:50:77:c0:5e:3f:09:48:60:05:2e:
58:87:be:93:c4:bc:e6:36:57:28:dc:eb:5a:38:63:
40:62:5d:48:e6:75:4d:26:e9:94:5e:f6:cd:2a:17:
cc:4a:d2:2f:b8:88:c6:b0:14:ae:0b:69:97:9a:a4:
f7:be:25:6f:b7:a6:00:9a:df:a9:29:45:b6:af:7d:
22:01:fc:42:65:0b:c0:6c:35:6f:f9:ac:9e:0c:e5:
e7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A4:29:CA:64:FB:B4:9F:D0:9D:D5:CA:28:7A:04:6A:2E:DF:30:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3547add1-b822-338e-bce4-a3496ad27f1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.191.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:dd:7b:60:f9:07:f5:47:73:97:09:42:9a:1f:df:a9:d9:12:
76:c3:46:81:23:b0:0a:f7:f2:20:4f:71:1b:87:b7:a8:de:8c:
a3:c3:48:07:aa:03:61:d0:a5:55:13:75:d4:dc:0d:4c:ae:e8:
56:4f:e3:7c:8f:4f:d7:a3:9c:6f:03:b9:d7:2e:79:5f:04:f0:
d8:0b:91:32:38:28:81:48:9b:cc:42:a3:61:6b:f4:a7:14:7a:
7b:c6:2f:43:6e:f8:1d:0a:d5:01:df:14:47:bd:da:1c:19:6a:
1b:05:1a:04:88:1f:53:4c:79:79:d8:61:bb:70:81:28:0e:dc:
d5:23:e7:98:70:9f:78:7c:f8:a2:3f:30:cd:d9:a7:c1:f6:27:
6c:20:61:5b:93:4b:2c:42:92:1d:c5:01:b6:e0:63:f6:0a:c6:
9a:bd:9c:ca:5b:e8:bf:95:a7:fe:14:8d:1c:7f:aa:22:84:24:
62:3c:5e:18:fd:b9:6c:6f:da:af:50:61:05:e7:54:6d:51:51:
d5:69:5d:16:7c:10:b1:81:a3:54:74:be:e2:3c:f2:bf:f1:14:
db:d9:27:ad:bd:34:77:9e:3d:3d:5d:81:a3:27:37:99:64:46:
5f:83:d4:59:1e:92:e5:5f:bd:a4:5e:d1:1a:42:dd:f9:c3:16:
52:8b:98:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:04:23 2025 by rpki-client