Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b31d6df-54f1-3310-a333-51f2b4474421.roa
File: 3b31d6df-54f1-3310-a333-51f2b4474421.roa (raw, json)
Hash identifier: xrwOiqsxeDtVxIinHLXoPiTKC4D/u+AXzAfQ1KpFG14=
Subject key identifier: BC:A8:49:8D:8C:EA:D8:36:9A:AD:32:76:94:8A:34:53:E0:EF:0A:AD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F2EFC438D72CC61AF553CF3C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b31d6df-54f1-3310-a333-51f2b4474421.roa
Signing time: Thu 08 Sep 2022 12:00:00 +0000
ROA not before: Thu 08 Sep 2022 12:00:00 +0000
ROA not after: Fri 14 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2e:fc:43:8d:72:cc:61:af:55:3c:f3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 8 12:00:00 2022 GMT
Not After : Oct 14 04:00:00 2022 GMT
Subject: CN=c14603d8-cf1b-4e99-b88a-7c779f89b221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a1:fa:39:bb:50:9d:32:03:6a:4a:10:d0:52:
08:a0:ed:14:f7:f6:85:7a:a7:03:ea:2a:e7:e6:84:
80:a5:5b:b9:16:60:5d:6d:49:35:a5:43:93:1a:b7:
d9:d0:6f:9b:37:85:c2:0d:82:af:e4:fe:6c:6d:40:
3e:28:2d:a2:40:54:36:44:a3:8c:bf:cb:3d:f7:ea:
14:70:f0:89:d2:2a:93:7d:a7:33:06:74:bc:65:9d:
48:22:69:d9:31:78:54:f8:59:f9:fe:09:56:bf:cf:
b0:bb:67:ef:4b:a6:11:e2:45:07:69:54:dd:35:e7:
bc:da:4f:67:28:05:df:d4:50:10:5e:3d:fa:e1:7f:
b3:2e:c5:dd:82:8b:f6:af:bb:57:96:1a:cb:4b:9a:
f4:4c:ec:b7:a0:e4:e5:06:06:ef:00:6e:8b:93:a9:
12:e7:f5:09:43:2e:f8:93:c7:e3:bb:1e:b8:35:7a:
4f:12:da:c6:a6:d7:38:6b:99:a1:a9:0d:0d:61:67:
59:33:f4:af:d4:6f:9b:e9:c5:3b:fe:9d:62:ec:6b:
65:8c:cc:02:87:b8:30:39:60:1a:2b:e2:db:5c:ec:
8b:71:e6:48:28:db:ff:be:62:b1:0c:8d:f8:01:a8:
e3:88:01:e5:7b:40:0c:5f:7f:47:15:17:eb:2f:de:
0a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A8:49:8D:8C:EA:D8:36:9A:AD:32:76:94:8A:34:53:E0:EF:0A:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b31d6df-54f1-3310-a333-51f2b4474421.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:81:80:d7:4e:cf:fa:78:bc:d4:ef:3b:0c:a9:5f:34:83:30:
d3:ec:70:f5:94:1f:55:da:a6:36:c3:cc:63:cb:3a:db:93:f3:
50:7a:0c:f8:00:de:27:bd:44:e7:a5:a8:f9:14:cf:3d:93:05:
42:a3:dc:fd:28:d0:5b:2e:37:e9:b9:c3:2c:c2:75:bc:bc:74:
39:61:e2:16:67:e1:94:05:21:48:f4:10:0b:1a:9b:77:4d:95:
3c:de:30:e3:74:9b:45:b6:a0:ac:66:21:68:13:c7:7f:6b:ac:
d0:e8:cd:e0:41:40:54:4f:79:82:97:24:31:e2:c9:bf:cc:8e:
f4:3b:06:ff:dd:c4:a2:9c:e8:af:f9:54:30:85:0a:1b:c2:ac:
ee:8f:16:9e:4b:fc:79:a8:9d:d7:73:93:a6:06:8b:d5:4e:0d:
8d:2d:8a:88:40:99:69:0e:04:f0:a5:84:16:7b:71:80:55:04:
49:f5:e0:3f:36:15:35:f2:70:46:e8:e1:10:48:21:55:f3:98:
91:9f:4e:57:ed:5b:68:a9:aa:86:53:6d:19:af:a9:a8:1b:0f:
eb:0b:70:94:cd:30:7c:76:7b:bc:12:d8:dc:6f:d1:a1:8c:b1:
47:18:b2:7e:ef:06:6a:7b:65:a8:18:f3:56:40:f6:d6:d6:05:
b4:c7:8b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:57:14 2025 by rpki-client