Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/60a2ef74-59ee-3198-844c-0cce39fc3472.roa
File: 60a2ef74-59ee-3198-844c-0cce39fc3472.roa (raw, json)
Hash identifier: DImdWXqMwg/iGEYrIuQdRG6YToUyHYnhgml2xu505DI=
Subject key identifier: 49:87:D9:D8:D1:BF:86:2E:57:F6:18:86:44:27:79:B0:0B:53:5B:E6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBCF0C6F9C2831DF3A2E0E9C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/60a2ef74-59ee-3198-844c-0cce39fc3472.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.42.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bc:f0:c6:f9:c2:83:1d:f3:a2:e0:e9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=18e30135-d8b8-4306-9259-b4d08e484aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:46:1e:d8:83:d1:0f:16:a3:4f:2d:1d:f5:
20:e1:85:24:c0:54:26:d8:d5:6a:88:cd:fe:29:f2:
cc:08:60:02:62:53:1e:c6:8b:f7:4b:8f:1a:9f:cc:
99:d4:50:50:39:36:f4:60:91:dd:4a:ea:3d:df:05:
d9:1b:ca:4d:67:9d:87:69:74:f3:d8:ae:3e:12:7f:
61:81:74:87:b5:6a:74:95:c8:5c:8b:07:82:27:fc:
f3:9a:bb:61:a2:25:1d:87:e4:14:ec:f7:fd:73:a5:
a8:9f:7a:dc:73:7f:47:8b:23:c5:ae:e3:e2:4d:37:
a9:21:c5:5d:27:02:40:73:aa:3b:2d:3d:87:91:74:
5e:b5:0d:d7:19:f7:de:a3:ae:fb:6f:1e:9d:4c:f8:
71:27:1b:a9:58:f0:1a:73:40:f2:e0:c3:72:11:c1:
77:3a:a4:53:f1:2d:fb:dd:4a:90:78:90:a7:25:e3:
40:08:7b:09:91:cf:84:53:48:1a:ae:a2:57:05:8f:
d2:a6:dc:c0:ed:18:d2:87:3e:1f:83:df:95:78:84:
b1:f8:d0:60:98:47:46:49:0f:cf:c5:1f:24:03:7b:
36:2b:32:fd:a3:4b:e4:83:f5:bc:ed:f3:5d:33:4b:
36:8e:85:c4:af:1d:15:49:ad:b0:0c:c3:16:9a:c8:
d7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:87:D9:D8:D1:BF:86:2E:57:F6:18:86:44:27:79:B0:0B:53:5B:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/60a2ef74-59ee-3198-844c-0cce39fc3472.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.42.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:84:a0:11:ce:96:78:2d:db:85:a3:e5:bf:f1:1b:eb:5d:5e:
4c:15:6a:12:8f:a0:1c:50:be:c2:fd:89:b0:cd:87:14:9d:3c:
00:68:d8:1c:05:97:ab:fe:58:d0:f2:97:b5:25:eb:e1:05:3e:
e6:cb:3e:90:0a:06:4e:29:04:d4:f7:83:29:4b:43:44:5f:f0:
2c:27:e3:5d:84:5d:d7:e0:f0:02:7f:34:7d:b2:71:4e:60:c6:
a8:34:48:3c:e0:5d:62:33:f6:62:8e:4f:5c:67:57:2a:a0:de:
71:93:91:33:30:51:f6:4e:01:33:48:c3:80:98:20:f6:bb:74:
30:b7:9b:c4:d3:4f:5b:2a:30:be:00:6e:51:84:17:38:91:77:
bd:15:0e:e9:11:1c:ec:39:6a:a7:85:71:c6:44:4c:f5:09:5f:
3a:33:dd:2e:40:3c:f1:6f:4c:60:05:44:cd:1b:e7:16:a0:be:
f0:ed:06:b6:45:10:c2:df:9b:69:c1:28:b1:fe:4f:41:1c:86:
d8:ae:c8:1b:6f:69:5e:68:07:e3:88:36:d0:6e:32:91:6e:bc:
89:50:21:aa:5c:2f:fc:0c:38:bf:7f:16:ab:aa:9c:79:4b:7a:
75:1a:ee:fa:9c:f8:2a:e8:a2:2c:bc:25:47:fe:f8:0e:02:39:
d0:1a:fb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:24:32 2025 by rpki-client