Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3d16c368-43b3-3124-bdc3-5f7cd5781b9e.roa
File: 3d16c368-43b3-3124-bdc3-5f7cd5781b9e.roa (raw, json)
Hash identifier: 1ujIOReGoY1GuoyAXn8wHwLIdtcsJlcpI6S24YMc+Tk=
Subject key identifier: CD:4E:03:C0:17:1A:19:2E:2F:D2:BB:34:04:A3:E7:B9:BE:6D:16:CD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584046DB30AC3840DA4EB38C8E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3d16c368-43b3-3124-bdc3-5f7cd5781b9e.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.254.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:46:db:30:ac:38:40:da:4e:b3:8c:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=88508bcc-ec7b-4829-9da4-c91940659402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:29:05:f2:e5:36:60:a0:3d:c0:47:bd:34:2c:
2c:92:a6:9c:c4:26:6b:ad:89:c4:8a:36:b1:45:99:
7c:c8:4d:2e:36:56:5c:ff:f2:da:be:58:1d:c3:6a:
47:fa:15:3d:c6:35:f9:b1:bc:a0:9c:ca:f0:f6:4a:
fc:97:5d:55:71:70:90:14:f7:8f:29:58:5c:3e:22:
cc:42:05:7a:17:f2:f6:23:17:2d:6b:b2:ce:0f:94:
21:dc:68:90:b0:ab:96:ca:91:fc:5e:62:8d:ba:c8:
83:ed:68:f7:3d:7f:e8:24:25:e0:7b:2c:21:a5:d9:
86:10:7c:f4:d3:49:8e:a0:bb:6b:1c:6b:c3:f0:5e:
1b:23:71:ba:c4:42:d0:ab:55:1f:5b:35:cd:b3:01:
f8:f5:c8:21:20:55:ea:2f:07:1f:b6:ab:f5:57:6a:
86:27:6d:d3:fa:36:ae:e8:25:89:c7:2b:51:d0:ca:
8a:e4:fc:81:26:9a:4e:f4:ef:0e:73:f2:1c:bf:b3:
15:6f:70:d6:44:bb:2f:d1:85:f5:ab:eb:ec:22:cb:
18:64:a3:af:f6:9e:f4:7e:d5:10:80:5f:31:83:ce:
9f:91:81:00:21:fc:af:63:24:a1:16:d4:8b:3e:0c:
77:e0:b3:df:fa:0a:32:0f:b9:32:86:a8:7f:76:6c:
b0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4E:03:C0:17:1A:19:2E:2F:D2:BB:34:04:A3:E7:B9:BE:6D:16:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3d16c368-43b3-3124-bdc3-5f7cd5781b9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.254.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:61:1f:eb:ac:03:88:21:b8:43:8b:1f:12:7f:b8:2b:93:1b:
8d:5c:3a:8f:bd:a1:f7:64:f2:b7:03:07:c8:d1:22:d3:31:cf:
c0:65:98:bb:b3:be:c3:2c:1e:c3:a0:d0:cf:26:55:c6:83:46:
df:a7:8b:7c:36:05:3f:d8:f0:22:ff:e4:18:4b:13:21:38:a5:
19:bc:12:1e:bd:36:f4:ff:4b:87:65:87:36:5f:4c:49:eb:78:
d1:c5:71:35:c4:c4:2c:f6:de:9f:b0:44:0a:62:88:fb:2e:08:
52:8b:7b:a7:3a:f8:35:c7:fc:17:db:47:6a:50:03:60:f1:31:
d8:bf:19:a8:8d:56:fd:c8:4f:97:0f:d3:25:fb:70:1c:19:58:
ef:9a:7c:2c:0e:fd:a3:98:b5:46:97:9d:a5:a2:d5:06:fe:48:
ad:90:3d:48:db:29:7f:25:1e:7c:43:99:6e:f0:fd:57:5b:4e:
c2:fb:54:ad:c9:71:9f:0f:b4:75:71:3c:4d:ee:55:ed:8d:ce:
b4:6c:66:16:ee:68:91:cb:5d:a1:f2:2f:a0:94:54:00:bb:ab:
ac:be:0d:73:7d:ba:4d:a7:99:cb:db:24:b6:a0:c4:4d:08:4a:
cd:81:b2:a1:4e:86:ac:4f:45:de:88:0d:ea:0d:86:69:c4:55:
73:e8:ce:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:20:17 2025 by rpki-client