Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/491c5bd5-ccba-3172-8078-24ac2105864c.roa
File: 491c5bd5-ccba-3172-8078-24ac2105864c.roa (raw, json)
Hash identifier: 0D5h0U9N+BFMvpzLcXuZtYOky/4hc74I3KoT7kZ0J3A=
Subject key identifier: B1:DD:81:55:8E:00:01:2E:A6:2E:C7:CF:F4:5A:A5:BB:BA:F3:AA:F2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E92543665646FAA0AB027B000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/491c5bd5-ccba-3172-8078-24ac2105864c.roa
Signing time: Thu 14 Jul 2022 12:00:00 +0000
ROA not before: Thu 14 Jul 2022 12:00:00 +0000
ROA not after: Fri 19 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.70.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:92:54:36:65:64:6f:aa:0a:b0:27:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 14 12:00:00 2022 GMT
Not After : Aug 19 04:00:00 2022 GMT
Subject: CN=21792921-a6a7-4535-b75b-537712b3c1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e9:c8:7e:17:6b:ef:8d:aa:b0:06:b8:b8:6c:
7c:93:5c:74:91:c9:66:ec:eb:7c:2e:67:86:dd:57:
74:36:b0:30:7d:f9:e3:84:92:d6:c8:5b:17:20:00:
56:31:ef:e8:14:34:1d:b5:0a:e5:89:bd:f0:e0:ee:
3e:be:e7:3f:9e:27:1f:a2:41:aa:0e:33:5e:c9:70:
e1:38:83:fe:84:77:2b:f7:8e:bf:cd:00:78:7b:0c:
94:38:5d:51:8d:62:f2:d0:cc:df:82:c8:3c:fb:8e:
de:3d:fb:2e:6d:24:5a:9a:1d:2e:20:bb:35:21:f7:
be:c7:3e:eb:d5:90:d3:b3:14:aa:b5:83:b5:46:d5:
ce:7c:e8:ae:50:a1:68:7e:16:19:98:8c:cc:93:6d:
52:ab:d4:07:d9:d8:80:bd:68:fa:59:1f:4c:11:76:
9d:f2:d3:fc:76:92:a3:a8:f4:c6:1b:64:a5:d4:cb:
60:f8:8c:1b:12:b6:d1:25:a1:28:24:1c:80:a6:e9:
a5:50:8a:9d:44:71:a2:aa:32:bf:a8:bd:27:a2:de:
66:b8:91:5d:3e:ea:f5:25:0b:d1:cc:0b:e3:98:f0:
c2:a7:0f:3e:45:4f:7c:2f:74:ae:37:d6:3d:34:02:
37:af:42:2e:dc:9d:c9:72:60:07:ca:06:26:cd:8c:
91:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DD:81:55:8E:00:01:2E:A6:2E:C7:CF:F4:5A:A5:BB:BA:F3:AA:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/491c5bd5-ccba-3172-8078-24ac2105864c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.70.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:f6:a1:6a:1c:ab:66:66:b2:03:b7:ef:dc:d0:e2:17:9f:8e:
16:73:72:93:b4:3c:97:4d:7c:15:f7:3a:1c:bc:02:cb:8e:ec:
16:a3:18:b8:c7:49:23:2c:16:af:0e:e5:94:de:a6:4e:69:0f:
2a:9f:dc:28:5a:ca:b1:b2:8c:47:aa:4f:44:e5:bb:96:06:31:
9f:a9:eb:07:98:46:13:d3:af:36:2d:2c:c7:b5:a1:4b:70:53:
1d:63:67:e5:31:72:da:7b:15:13:74:85:08:07:65:d9:61:1d:
e4:8a:d2:15:7f:19:34:02:d6:c3:b1:97:e3:4e:71:e0:1e:85:
f6:b9:94:30:74:40:45:b6:43:c2:b9:6e:fc:b2:80:1f:f1:bf:
94:03:a8:ec:d6:b6:6f:2d:0b:87:22:42:0f:7a:d7:fe:0f:38:
0c:58:2c:31:53:d7:84:6e:c5:32:0a:a7:04:1b:98:83:3e:82:
fa:ad:e4:b7:6f:77:b5:e2:e9:2c:26:1a:1d:4f:71:19:49:f0:
44:2c:12:66:b0:95:f3:a0:b8:fe:78:52:ae:e4:32:76:0a:eb:
95:e9:a3:da:3d:28:70:12:bd:04:75:25:85:31:52:27:05:17:
95:2c:aa:2c:9c:df:66:9a:eb:d2:30:29:36:42:31:13:18:f3:
7d:17:1b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:32:59 2025 by rpki-client