Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/651bbdae-eba1-372b-9dfb-c80b1bc9f22e.roa
File: 651bbdae-eba1-372b-9dfb-c80b1bc9f22e.roa (raw, json)
Hash identifier: J6gRZhP3IKuXwuEIhMW3XKgP1AjXaWIhmAtlkTkzRbA=
Subject key identifier: A5:0D:EA:55:CA:74:F8:1E:6F:A0:8E:67:34:67:E8:D4:17:8F:58:F0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBE7174AFC3EF9BF628DB77E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/651bbdae-eba1-372b-9dfb-c80b1bc9f22e.roa
Signing time: Sat 30 Jul 2022 12:00:00 +0000
ROA not before: Sat 30 Jul 2022 12:00:00 +0000
ROA not after: Sun 04 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.120.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:be:71:74:af:c3:ef:9b:f6:28:db:77:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 30 12:00:00 2022 GMT
Not After : Sep 4 04:00:00 2022 GMT
Subject: CN=de3a73fd-bf9d-43ba-b9f4-065db8b27b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6e:22:fb:14:08:58:58:9a:fe:f6:a9:74:e6:
88:09:cb:ef:35:ed:a2:ae:b2:e9:17:86:4d:a2:4d:
af:e6:02:88:15:e2:f7:b6:db:67:0a:b5:1b:9b:8b:
a9:03:d2:b2:76:30:91:6e:7d:67:e7:f5:d1:ab:f8:
55:ae:f9:e0:92:1f:f3:64:3b:8a:0e:2d:3a:ca:d7:
7a:2d:31:e6:5a:01:88:33:b6:0a:75:6a:e1:b1:5c:
70:7a:12:18:53:14:5a:81:63:bd:d6:9e:6f:98:2d:
a7:2f:ea:18:d2:10:de:43:1e:b6:df:b2:e6:de:da:
bf:dd:4b:78:10:c6:45:b0:bd:02:32:68:69:58:d0:
e6:c3:e0:fa:83:fe:c1:7c:0c:20:13:e3:5d:75:03:
20:ce:a8:7d:32:2b:79:9e:b7:f2:5c:a4:89:86:e6:
a1:f5:c2:2d:00:7c:b3:d2:d9:f0:41:6c:a0:91:0e:
14:3a:c9:49:f6:fb:51:e1:04:7b:fe:99:31:a1:0e:
8c:7c:bc:21:1c:ef:05:40:e8:78:e1:a1:a2:73:d8:
ef:65:84:4f:3e:50:ef:2b:b2:fa:ca:dd:13:80:00:
86:fd:0d:e4:dd:84:ba:20:c2:19:90:4f:bc:4f:c5:
5e:81:00:3f:d3:5f:68:33:8b:c3:0e:57:4c:e2:f7:
1c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0D:EA:55:CA:74:F8:1E:6F:A0:8E:67:34:67:E8:D4:17:8F:58:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/651bbdae-eba1-372b-9dfb-c80b1bc9f22e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.120.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:2e:e8:7f:60:0f:ba:fe:07:8b:d4:e7:46:56:00:63:01:0a:
5e:63:ba:43:cf:8f:ad:83:3a:68:d7:9c:ee:ff:56:ee:be:f6:
2c:0c:69:ca:65:e2:24:cf:82:54:f3:4f:e8:7c:9e:d1:2d:d0:
b5:4f:90:f6:cb:75:19:27:fb:89:0a:f8:87:5b:52:de:58:49:
89:fb:cd:10:5a:5c:93:0f:7c:24:f7:91:88:f2:bc:93:64:a4:
02:e1:c7:ce:db:a9:65:49:91:af:21:82:ad:5a:eb:7a:41:90:
5f:ae:55:89:2e:c6:5e:f7:49:1b:89:ad:58:db:b7:f2:c6:76:
34:34:c8:54:a0:a9:5b:36:92:a2:6c:f4:72:eb:3a:81:24:e9:
7d:8f:7e:11:6b:34:74:ae:01:83:2f:a0:04:de:68:0a:ae:3f:
0a:77:5b:d7:42:8c:a4:0c:f5:36:81:97:13:dd:b4:0e:2f:08:
cd:1c:39:da:64:4f:a1:44:7c:25:70:b3:27:d2:4f:84:9b:ba:
25:71:ac:0f:2d:5a:9c:cc:56:63:2c:cd:d4:04:fe:7e:73:97:
f5:22:1e:ed:e5:e9:6a:c6:12:61:3f:d3:c8:c0:dd:a2:1c:a2:
53:55:6f:46:db:6b:c8:ae:bc:e9:86:a7:f0:9a:5a:f2:79:5c:
35:c4:17:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:36:48 2025 by rpki-client