Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3aeac8da-112a-3827-b5b2-5a114f27ff11.roa
File: 3aeac8da-112a-3827-b5b2-5a114f27ff11.roa (raw, json)
Hash identifier: 3MPmupZnXePo/+OdpJmSdUfLKT3U1HmCOr57eSltWmw=
Subject key identifier: 1F:17:48:B0:E8:E0:CB:4E:69:0F:7E:B2:8E:95:CB:7B:47:80:4E:BE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7D71BE89C1901688CFC68CC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3aeac8da-112a-3827-b5b2-5a114f27ff11.roa
Signing time: Thu 06 Oct 2022 12:00:00 +0000
ROA not before: Thu 06 Oct 2022 12:00:00 +0000
ROA not after: Fri 11 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7d:71:be:89:c1:90:16:88:cf:c6:8c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 6 12:00:00 2022 GMT
Not After : Nov 11 05:00:00 2022 GMT
Subject: CN=84557d7a-34f5-4e83-8bde-63076f145ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:e4:dd:d7:c5:c0:a7:23:d1:19:ac:ff:c1:
48:2e:f0:71:55:76:21:ac:60:71:9c:94:96:11:4a:
e7:60:76:c1:60:f0:f5:13:fb:1c:d8:12:8b:74:c2:
8d:3f:99:ee:23:19:ff:3c:56:6e:b5:99:18:03:61:
b8:0e:1b:63:af:74:b6:59:58:23:51:e0:aa:60:24:
cf:45:0c:4f:b6:97:5b:87:28:a4:e3:7c:44:4a:6c:
bd:d9:47:c2:d7:79:df:a5:42:83:93:56:ce:52:f6:
86:c1:f8:1a:f0:e4:11:85:eb:de:0e:79:35:ef:2c:
37:04:66:da:68:04:12:5a:26:bd:e6:62:06:d9:e4:
32:97:e8:80:4c:69:f0:e1:83:9a:20:73:04:02:aa:
d1:b7:84:52:5f:09:f8:6e:00:0a:28:bb:32:6a:9b:
c6:ca:e0:f5:59:af:8a:7a:9c:d8:98:20:a7:51:ef:
3d:99:34:a9:63:78:27:8a:19:33:86:0c:7c:68:cf:
2d:c5:e4:f0:d5:f9:ae:5d:22:ea:ce:72:56:6d:5f:
d0:be:19:f7:7f:11:d7:99:4f:ee:de:97:78:eb:63:
b8:5d:2c:8a:d2:e8:ed:99:dd:4e:af:93:4d:3e:7a:
7f:7b:08:95:a4:4a:e1:3f:31:e3:a3:f0:8b:47:5d:
d3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:17:48:B0:E8:E0:CB:4E:69:0F:7E:B2:8E:95:CB:7B:47:80:4E:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3aeac8da-112a-3827-b5b2-5a114f27ff11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:4e:49:21:cb:27:a0:f4:14:83:f7:61:c9:c8:f4:8e:4f:66:
6c:76:c6:df:1b:6b:54:9f:37:48:6c:35:db:10:44:f1:35:25:
41:49:de:d8:ec:8c:8e:2b:2f:46:44:52:23:3b:6b:19:b0:ba:
94:99:eb:b9:a6:21:a2:13:b4:f9:2f:d8:04:94:1a:17:24:14:
08:92:5d:d5:a8:3a:1c:e0:e5:ed:3f:b7:b9:af:52:d9:89:64:
e6:77:c2:09:44:5d:e1:0b:d9:8e:71:3a:d6:e8:b4:a9:73:0d:
7e:5e:be:9a:ea:38:51:3f:a4:89:7e:1c:d1:5b:75:99:fb:56:
1d:57:c3:96:ad:ef:c4:30:47:09:d3:14:df:fb:74:e0:43:9b:
c1:17:f5:ef:e2:17:a2:b7:4c:73:f7:89:ee:0d:b2:98:10:e8:
d1:50:fb:dd:26:3a:e1:b7:21:81:06:b1:93:32:97:21:35:41:
eb:17:b3:8c:ac:4d:24:1b:fb:6e:d0:35:59:65:75:df:69:c2:
a2:82:ef:79:03:c6:1e:38:03:dc:cc:51:5e:33:22:41:db:c8:
da:dc:d0:5f:0f:28:ac:18:db:04:69:2f:d1:3d:c3:70:61:5d:
8f:a5:30:65:e4:29:e3:b4:43:6a:3f:b7:19:ca:18:62:59:01:
7d:4f:bb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:29:55 2025 by rpki-client