Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3e19498a-ac13-3875-b00d-c38a51184b8b.roa
File: 3e19498a-ac13-3875-b00d-c38a51184b8b.roa (raw, json)
Hash identifier: /XQu5wH5q2Emp0ZTBapxmZPtchbtdnvjuyCnUls0ISQ=
Subject key identifier: E9:08:8F:D1:EF:3E:03:14:37:96:F1:21:2B:EA:22:70:B9:74:06:C1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FD07839EC5CDEEC5C80D42F20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3e19498a-ac13-3875-b00d-c38a51184b8b.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.136.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d0:78:39:ec:5c:de:ec:5c:80:d4:2f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=94f07da4-f8be-4ffe-abde-28008ca38df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:18:2e:d5:57:fd:11:9f:8d:cb:72:93:54:13:
0b:69:92:7d:17:88:9f:9a:80:50:99:91:98:3a:dd:
fc:2f:d8:fc:83:dd:39:0a:71:7e:cc:32:a9:46:0e:
38:e5:dd:17:62:13:c7:50:3d:3d:47:32:1f:5b:25:
b6:40:ae:b4:78:e7:34:66:6e:e2:b6:0e:c3:dc:39:
a2:86:33:8e:17:45:f9:20:aa:83:93:c8:f4:4e:4e:
7d:f2:20:15:41:3d:0d:6c:da:35:d8:56:33:2c:0a:
60:9e:53:13:d1:f9:63:2a:1d:91:90:b9:01:4f:5c:
a9:62:36:6b:c6:a3:8c:06:27:d3:f3:d4:44:e3:7e:
e0:34:97:89:4f:22:53:72:5f:d8:77:eb:4f:cf:c4:
b8:ab:10:4d:15:5a:ee:8e:df:fc:27:48:4d:e1:d0:
ba:90:5b:ba:ad:b0:88:f7:9f:09:f4:c4:6d:fd:cd:
8b:c3:b5:16:04:7d:9d:ab:3a:30:62:bd:7e:37:32:
ca:bd:66:ad:df:49:9b:68:e6:c0:df:f2:c0:ae:19:
40:3e:4f:96:5a:95:47:36:ea:7d:27:ef:e5:32:a0:
bc:30:be:51:e8:07:5d:0e:0b:66:06:32:d5:82:94:
68:73:46:40:0c:92:96:c9:9f:72:da:66:4a:e2:e3:
dc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:08:8F:D1:EF:3E:03:14:37:96:F1:21:2B:EA:22:70:B9:74:06:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3e19498a-ac13-3875-b00d-c38a51184b8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.136.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:c0:8c:24:53:a8:ac:83:c1:f9:9a:9c:8e:c1:d2:08:cc:6b:
fb:08:8a:d3:65:01:a2:2a:9a:07:8f:0c:e9:e0:f8:14:95:7a:
39:72:bd:8e:4d:1a:df:62:3b:3b:c1:9f:eb:1d:63:af:59:07:
f0:7f:88:bb:75:4a:97:9b:73:3e:6c:f7:60:38:b8:de:80:0e:
3f:86:59:db:9d:21:ec:72:37:47:c0:80:d9:45:44:75:21:91:
89:c5:fb:93:e6:ed:91:b8:2f:49:50:14:5d:47:44:ac:4d:fe:
a0:33:5d:ec:09:78:40:77:51:b9:1c:12:34:16:e1:af:c1:43:
ec:3d:bb:db:25:a2:36:58:eb:9a:3f:84:5c:f2:83:aa:7a:2a:
00:27:45:cf:15:f7:e8:98:7f:5a:9e:fc:d2:2b:9e:99:d8:3b:
ff:30:5f:a2:5a:35:8c:5e:d0:9a:bf:db:2c:24:a3:e7:65:b2:
ab:bd:15:66:d1:d0:81:6f:4d:ca:5c:3b:7c:71:dc:71:e2:2c:
42:10:49:9c:ef:f2:98:16:00:2f:b5:40:db:fc:a9:cd:ae:82:
01:9f:ac:56:52:87:61:4b:44:61:0e:9a:c5:07:2f:3f:df:f4:
d9:73:88:67:d0:ad:32:d9:f5:39:ff:63:c4:ed:f6:80:27:a2:
ff:27:57:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:43:16 2025 by rpki-client