Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/51a8b8b0-fa8c-3b05-85e6-7c800c1e2e2d.roa
File: 51a8b8b0-fa8c-3b05-85e6-7c800c1e2e2d.roa (raw, json)
Hash identifier: VZjtZdXQLj6yxSHWvQCj/IBM2Y+Wk39SLtUnqPDq8BY=
Subject key identifier: 01:FA:6D:5E:9B:1F:B2:BC:C0:60:86:E7:FD:92:DD:CF:5E:CF:BF:4A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBCFF5C316360B6D17338C2C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/51a8b8b0-fa8c-3b05-85e6-7c800c1e2e2d.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.43.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bc:ff:5c:31:63:60:b6:d1:73:38:c2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=6aafc1d1-d0eb-457f-b6f0-da6580bea3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:9e:dc:33:21:62:99:c8:1f:b9:ad:22:ad:
3d:bd:ed:cf:36:98:33:6f:35:6a:27:c3:62:e3:e4:
d5:1d:c2:92:1c:14:79:08:5b:70:5c:03:5d:f1:d1:
17:8d:fe:9f:68:7a:b0:dd:46:d9:5e:cc:c4:80:48:
99:72:6a:09:c1:30:e3:e0:f4:fa:d2:b3:e2:d4:8d:
12:46:99:6a:02:d4:88:a1:57:f3:9f:18:ca:c2:e8:
53:1d:ca:88:9f:06:65:57:57:64:15:a9:c7:02:40:
28:dd:b2:fe:73:79:a6:1f:61:86:0b:d7:8a:b9:fd:
1a:d4:8a:c0:96:4c:a5:60:95:79:46:a7:bb:6a:d0:
33:bb:e5:6d:e2:9e:ef:9e:57:e8:65:7b:0e:83:d1:
3b:96:d7:ae:e8:c3:9f:48:03:50:0e:7d:9e:0a:f0:
ce:4a:bc:ca:8a:0a:1b:ae:95:3a:37:8f:3a:1d:6a:
29:3d:38:33:e0:c4:8a:97:65:d4:36:f7:c1:7b:83:
93:e8:e5:0a:62:91:b6:86:32:76:0c:c6:e2:a8:36:
9f:a0:45:a9:f2:38:85:03:1c:3d:c7:db:c3:a1:bb:
56:ea:b4:7d:87:30:f3:cf:97:ee:bd:40:b3:5e:e4:
61:c8:fd:82:59:74:98:03:90:50:39:b4:ae:6e:ef:
ec:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FA:6D:5E:9B:1F:B2:BC:C0:60:86:E7:FD:92:DD:CF:5E:CF:BF:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/51a8b8b0-fa8c-3b05-85e6-7c800c1e2e2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.43.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:a4:82:cd:0c:11:0b:82:d5:99:9c:4e:e7:18:e6:4b:c2:e7:
c4:f8:eb:76:46:49:81:ff:ff:a3:77:d6:26:57:dd:07:56:61:
76:ac:cb:4e:3e:db:d1:ad:a0:6f:30:cd:5a:ac:2b:30:96:aa:
10:86:d1:96:c1:88:9b:bc:d8:96:51:63:aa:4d:01:9c:7e:4a:
bb:e5:df:c4:15:5a:04:5b:4f:c4:a7:77:02:4d:95:a9:53:fa:
04:4d:99:72:0f:48:a6:49:4f:59:7c:fd:0c:5d:9c:df:bb:9c:
37:70:db:f7:55:0e:5f:da:24:bf:bd:46:3b:84:a0:64:11:05:
4e:6a:71:83:2c:dd:d7:c9:63:a3:dc:bc:37:dd:5a:8f:e5:8a:
3e:76:d5:c8:32:d7:da:85:c3:36:5e:11:91:c9:9e:95:9e:f6:
d6:7a:b1:f5:ad:86:f8:aa:67:1d:9d:ee:01:ba:83:b8:24:d7:
fd:04:6f:d0:b5:4b:03:24:56:63:db:35:22:7d:61:3e:98:6f:
e2:4b:0c:95:c6:3b:02:d3:25:39:0a:f5:33:da:2b:36:a9:6c:
89:d5:06:ed:70:9d:59:f0:58:d5:19:50:28:b7:9f:55:1f:cf:
5c:e3:64:7f:1e:e9:48:22:3b:39:79:de:c2:47:c1:06:33:60:
86:10:0d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:28:40 2025 by rpki-client