Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6228171b-9b27-3ff4-a971-22599c930752.roa
File: 6228171b-9b27-3ff4-a971-22599c930752.roa (raw, json)
Hash identifier: XA3Cm9AtJjBgl8scSetGABdbzqrhq3y+4t46k6D8Jgo=
Subject key identifier: 12:6F:10:E5:E4:6B:B4:D5:F6:F8:64:71:98:D5:CD:91:D8:DC:20:6A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCE2C3DCC8C8540F9DCA9D180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6228171b-9b27-3ff4-a971-22599c930752.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.153.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ce:2c:3d:cc:8c:85:40:f9:dc:a9:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=ceabf3a3-48aa-4d01-9d83-225318f34ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:87:9b:82:64:1b:96:45:f2:82:c4:c7:1a:
3a:b6:9e:83:f3:8d:ba:ad:be:be:3b:90:a5:09:d6:
84:d6:17:e7:b0:6c:5c:65:14:cf:81:3d:e2:f6:5d:
6c:7e:8b:ab:bb:c6:00:82:85:7b:e1:34:a3:8f:a9:
6c:cc:7a:ef:f3:83:bd:67:08:1b:b9:96:01:85:98:
26:90:d9:d6:de:c3:8d:6a:34:05:36:2e:9f:0d:11:
53:3d:13:43:6e:28:44:32:b7:8a:b3:c4:58:ef:63:
dc:fd:5e:f4:9b:43:d7:55:d5:57:82:5b:b8:fc:8d:
1b:3d:23:35:9c:f2:16:e0:c4:fe:4f:aa:c9:f8:2c:
19:d2:6e:56:70:a6:36:41:da:d3:ff:83:f1:0a:8d:
51:61:b4:c5:9e:17:6b:d3:04:8c:83:69:7b:31:55:
47:b2:83:22:28:6b:86:53:35:2a:68:1a:82:ff:32:
d6:09:36:ea:21:36:3d:d2:f3:28:4a:35:be:d4:6d:
e9:36:ec:3e:c5:a1:d3:fa:94:e0:5a:09:99:77:aa:
27:74:eb:57:03:01:7f:6f:77:b3:df:f4:b6:4d:7c:
10:db:f2:8f:89:c5:a2:5c:df:62:3b:db:e6:fb:82:
25:44:0e:7d:55:39:04:13:b5:01:a1:d9:92:48:7a:
be:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6F:10:E5:E4:6B:B4:D5:F6:F8:64:71:98:D5:CD:91:D8:DC:20:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6228171b-9b27-3ff4-a971-22599c930752.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.153.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:7f:12:d0:9f:9d:6e:fc:b9:e9:7d:3e:d1:78:44:fe:6a:fb:
f9:e9:47:0a:11:e8:9a:4d:2d:bf:63:57:23:d2:1a:4d:f2:b7:
df:bb:a6:28:0a:f5:d0:38:9f:30:4a:80:1c:f0:3c:0f:f5:d1:
1a:d3:de:50:93:2e:d4:b4:16:66:97:94:46:c9:4e:77:8f:8b:
74:04:c0:a8:36:79:05:5e:56:41:9d:20:4d:20:b9:a8:52:b1:
53:dc:de:f5:14:01:0d:8b:4f:33:84:9f:aa:0b:fd:24:7b:6a:
ab:42:6c:dd:4a:cb:7e:f0:ab:77:73:f2:08:fc:d1:9f:c6:ec:
4a:2d:95:01:a5:47:1a:20:e7:60:f6:81:a4:53:2f:eb:65:0a:
27:89:c5:67:95:c7:90:a4:8e:fd:b9:93:5d:41:82:d3:1d:ae:
34:30:ca:47:be:d4:77:55:6e:b3:e2:73:69:08:7e:a0:ae:a7:
8e:1a:f8:c0:91:8f:84:1e:9e:3e:53:0e:3e:21:ad:5e:11:21:
17:6c:19:44:f0:8b:35:51:96:d5:21:f9:7d:16:de:26:34:f6:
c9:3f:45:03:b4:97:92:21:bc:3e:b8:d9:82:35:66:6e:ba:fd:
05:94:8b:38:27:bd:5a:4c:39:07:69:12:2d:3d:84:b7:56:3f:
87:26:e6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:17:00 2025 by rpki-client