Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/66d8bc42-cc7d-3f53-926d-53cd5d689910.roa
File: 66d8bc42-cc7d-3f53-926d-53cd5d689910.roa (raw, json)
Hash identifier: /HBIavuV3YKH4xOQkZQSJj3v3aNy5Jr7N8a1q6eQou8=
Subject key identifier: 20:F9:29:4F:6D:A0:02:AA:AE:31:0A:13:EA:6D:40:FF:0C:ED:21:71
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E70BD6493264CA3FFF71C0580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/66d8bc42-cc7d-3f53-926d-53cd5d689910.roa
Signing time: Sat 02 Jul 2022 12:00:00 +0000
ROA not before: Sat 02 Jul 2022 12:00:00 +0000
ROA not after: Sun 07 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.34.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:70:bd:64:93:26:4c:a3:ff:f7:1c:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 2 12:00:00 2022 GMT
Not After : Aug 7 04:00:00 2022 GMT
Subject: CN=7f9ac44d-fe09-4b20-97f5-208aca97bd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:b0:a8:55:09:c7:68:bd:a9:5e:ce:0f:eb:
00:ed:48:32:f1:a0:77:ed:7c:dd:e7:38:9b:23:32:
01:de:64:43:ad:37:fc:79:83:fd:3f:35:08:e2:db:
4f:5f:94:e6:4c:c3:de:97:aa:47:f5:f1:c9:34:d4:
3d:95:54:66:be:47:14:d6:b1:c3:4f:7b:a6:3a:c9:
73:61:9f:fe:2f:61:3a:ea:3b:d4:43:27:dc:51:4d:
b7:52:09:47:1b:be:8b:5c:cd:53:9f:48:4d:f3:7f:
60:01:7a:cc:5a:66:0e:f7:17:22:2f:d6:a4:1f:8d:
bc:05:35:19:b9:f6:ba:5f:d2:58:91:89:69:92:46:
db:67:8b:0e:96:71:04:72:f3:e9:a0:1a:e0:51:73:
4f:03:a1:e6:37:3e:98:54:04:11:84:e4:95:14:36:
b9:fd:44:e0:6d:32:7a:d6:d3:f0:3f:d2:0f:f4:84:
50:8e:56:2a:82:14:90:e5:55:d5:50:5a:07:6c:46:
44:89:8c:37:87:f1:65:21:d0:97:10:eb:e7:d1:eb:
41:6a:74:67:04:32:40:f4:2d:eb:36:77:c1:d3:5e:
16:9f:55:43:a1:f1:b7:a6:ac:02:2d:37:4b:bc:39:
85:76:4f:87:95:74:63:1e:45:1e:f4:d1:f4:03:2c:
a8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F9:29:4F:6D:A0:02:AA:AE:31:0A:13:EA:6D:40:FF:0C:ED:21:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/66d8bc42-cc7d-3f53-926d-53cd5d689910.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.34.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:0c:0b:ad:b9:29:fa:35:5c:5f:62:c5:b4:22:bb:83:01:e6:
19:32:d3:7b:a1:05:59:73:39:08:37:a4:f0:ea:24:47:d1:05:
46:9a:09:17:f9:5b:6f:02:99:36:2a:d6:54:f9:d6:c5:1d:78:
86:23:04:3a:cc:68:b1:25:78:83:3c:d5:f5:65:c2:f4:40:db:
d9:14:15:00:2f:b5:f5:6a:9c:f4:e3:a5:ea:79:e5:9d:dc:b1:
44:7e:d3:e6:55:70:c8:86:a6:c7:bc:2e:98:aa:99:61:c8:5f:
44:16:5c:b3:ba:e9:da:f5:b1:40:3e:03:c5:b8:91:48:d5:3d:
9e:53:15:ed:14:95:79:57:d4:26:27:40:52:1a:0f:a3:ed:50:
b2:54:8e:28:a5:f4:ec:35:74:ed:ae:c2:93:21:ec:c1:16:c4:
75:1c:c2:b0:d5:c3:24:82:d3:f6:1b:5c:45:b2:fc:da:eb:c0:
44:97:da:6e:c1:a5:3f:05:79:45:b9:37:d1:8a:2c:b8:8a:05:
82:2b:4f:ef:6f:ae:63:ad:e5:3e:4f:45:7a:38:15:05:0a:e3:
29:f8:41:e2:c2:20:ec:e3:3d:1e:d7:e4:48:9a:a8:57:46:64:
87:f2:84:7d:ef:c4:5d:66:70:db:6f:04:1d:f2:24:57:50:ae:
04:11:eb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:08:48 2025 by rpki-client