Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/66872226-8150-364c-8639-f9bd6facd953.roa
File: 66872226-8150-364c-8639-f9bd6facd953.roa (raw, json)
Hash identifier: 5AGtXxkEessPRrn/od4Sw6EbSE5iu/48ywjju0YstNE=
Subject key identifier: E9:7C:EF:A3:7D:E2:0E:53:84:40:A0:7F:3A:77:FF:BE:72:3C:0E:BD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCAC509FE7EF1460979B36540
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/66872226-8150-364c-8639-f9bd6facd953.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.131.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ca:c5:09:fe:7e:f1:46:09:79:b3:65:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=1b82a078-b1b5-4f0b-9f55-7abfbfab95f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ae:9f:47:97:02:5b:26:66:83:1e:df:b3:aa:
9d:8f:90:4d:94:ba:49:15:1e:69:76:f7:35:b1:45:
09:25:e1:1c:48:ff:70:41:ad:b1:88:c2:51:83:8b:
3b:f9:08:68:e2:56:4a:5c:90:ec:94:9c:ba:e7:52:
0a:7d:8f:01:32:ef:0f:84:cd:4d:72:c4:03:63:a2:
96:1b:4e:1d:3f:cf:13:d9:c7:78:62:98:af:00:31:
4c:43:5e:5c:0c:5e:bd:ea:41:81:80:f0:d8:a7:0a:
9b:75:c2:de:a3:16:d3:24:7b:bb:b2:6c:7e:96:45:
2c:09:6e:17:ca:86:18:8b:6e:3e:5c:21:a8:09:6f:
cd:3e:36:a2:10:4e:1f:58:6d:86:91:3a:de:cd:9a:
4a:57:f1:af:69:af:86:2a:30:71:46:e8:c6:6e:57:
22:70:ce:dc:1e:d1:e2:4b:59:ff:73:da:84:98:89:
7c:47:43:b8:da:83:eb:ae:0b:4c:51:b9:fb:c5:e9:
b3:eb:e6:40:3c:d9:95:6b:da:ce:2f:09:24:51:db:
b1:82:4b:02:8a:63:18:ae:2c:e1:0c:eb:ad:1c:6c:
4e:ff:72:04:13:ee:6a:e7:9e:da:20:bd:78:e4:12:
18:51:1b:86:bb:59:3d:59:d3:88:26:df:9b:32:e9:
d3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7C:EF:A3:7D:E2:0E:53:84:40:A0:7F:3A:77:FF:BE:72:3C:0E:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/66872226-8150-364c-8639-f9bd6facd953.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.131.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:fe:21:7b:bb:ba:7a:b6:34:0f:28:21:d9:2f:27:09:d6:10:
5c:b7:b4:bf:8c:76:22:28:34:40:e8:f4:f1:a5:fd:5c:d3:cb:
b3:6e:6a:0a:ba:5a:db:09:6f:fb:f8:2e:c6:96:c0:06:9b:a8:
4b:25:2e:6b:d8:d8:ac:e2:ac:96:d7:8d:2d:f4:dd:cf:64:ea:
11:07:ea:89:05:3b:58:1a:3d:0c:bc:d1:56:36:f8:8b:6d:ee:
de:07:27:7a:3d:f4:fe:18:16:9c:dc:40:18:a4:60:ba:a1:5b:
fe:e5:63:2f:ce:a9:d7:88:89:fe:d7:2d:f2:25:fa:68:cc:ce:
eb:94:94:bb:1e:84:44:a7:1b:ff:5e:9e:b9:15:9a:bf:7f:23:
43:70:5f:55:ee:88:9d:02:88:ab:da:cc:be:fe:f1:c9:d0:58:
f5:f9:7d:99:2a:66:7d:8c:4d:07:80:24:85:e4:00:c5:80:e4:
c3:7c:df:b5:09:ca:89:7f:78:52:33:30:7a:41:23:00:d1:49:
13:75:e3:03:c7:9e:f3:97:8d:35:ff:91:dc:1a:e9:72:20:f6:
bc:dc:d9:94:a6:da:5c:95:00:1d:e6:1b:d4:94:f3:90:e1:12:
3e:f4:bf:d3:d3:66:ed:c8:e4:5b:c5:22:f5:9c:71:e6:67:60:
22:f8:4b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:08:12 2025 by rpki-client