Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/687cfd4c-53ec-3e8e-90ef-707e32cff3e6.roa
File: 687cfd4c-53ec-3e8e-90ef-707e32cff3e6.roa (raw, json)
Hash identifier: hWuK4KVcAV40F4Q9LY7sqydQxy3UI7TGOOoCsnDtbXk=
Subject key identifier: 54:0A:EA:C7:4E:AA:42:BA:F8:D4:00:D4:B5:AF:5B:EB:B2:A2:B7:7D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B845E498A82E663540A0700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/687cfd4c-53ec-3e8e-90ef-707e32cff3e6.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.238.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:84:5e:49:8a:82:e6:63:54:0a:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=b360f3da-a31e-414c-9596-a3247aa303b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:08:8c:e8:5c:3a:ef:60:6f:5c:8b:83:1b:
e5:9a:e3:b6:b4:06:92:26:c1:55:f5:be:54:a6:88:
17:24:1a:2d:8a:14:ec:e6:9d:ad:bc:01:3a:a4:b4:
6c:d4:ae:fe:6d:8d:6d:b9:a9:ac:16:90:3b:26:30:
0f:ea:0a:84:4d:cb:05:9c:49:35:7b:b0:28:96:8b:
fb:86:51:f1:40:23:fd:6d:40:05:04:3a:fd:ea:57:
2b:f7:b1:27:80:5d:2b:97:77:d8:fb:e2:38:6e:5e:
a5:91:05:5d:1f:c2:38:ba:a6:90:b2:f0:1b:c6:fd:
61:99:38:a1:0c:48:5a:10:ba:9b:37:93:07:e0:8f:
76:58:4a:91:43:24:c2:33:06:97:44:da:a1:95:e1:
5b:58:6b:7e:06:a0:43:17:89:40:f3:ed:24:c0:ef:
9b:d0:a5:ec:9e:72:c2:75:0a:ea:f4:7c:3c:5a:43:
07:00:ff:72:fd:81:db:94:b2:ce:a6:81:bb:6e:87:
ca:81:2d:2b:57:d8:00:4f:2b:ed:27:85:dd:26:9d:
40:d4:f9:f5:a3:f4:2c:1b:c0:82:47:d9:9a:c3:9b:
0b:41:6e:82:45:2a:74:f2:05:f2:39:f0:70:0a:1e:
f0:5b:ac:06:3e:8c:bd:bc:25:8c:d0:45:59:41:d9:
6e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0A:EA:C7:4E:AA:42:BA:F8:D4:00:D4:B5:AF:5B:EB:B2:A2:B7:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/687cfd4c-53ec-3e8e-90ef-707e32cff3e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.238.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:27:4c:3f:ce:23:f1:93:f9:87:fc:bd:22:9b:2f:1c:62:57:
b7:73:84:e0:a2:b1:a9:3b:00:48:a5:17:3f:02:2f:07:b7:9a:
b5:a4:03:25:5e:a1:bf:d4:53:bf:26:75:d9:c4:fd:82:0d:57:
06:96:c0:68:06:4e:5c:b8:d2:74:c5:78:dc:9f:42:99:ad:30:
ab:33:3e:df:12:55:e6:76:a0:27:13:9b:89:7c:8f:e4:90:cb:
1a:6b:15:33:da:e5:c7:74:18:92:1f:f9:49:bc:18:0d:f5:10:
8f:70:91:93:86:fa:b2:0d:a9:ad:62:41:10:ee:47:64:fe:23:
f3:39:c4:44:43:16:cd:56:95:5b:73:3f:56:6f:0d:0f:90:fa:
78:5e:c3:08:54:f4:4a:d9:d8:7a:e3:71:42:1d:28:93:ab:5b:
2f:64:52:b4:5e:80:96:52:7b:f1:72:4c:6b:4b:c8:f9:5a:f2:
c7:3e:2a:ba:fe:be:28:c9:e5:23:21:07:9f:f7:09:d1:87:5c:
8c:5b:f6:b4:1d:ba:70:da:f6:a0:ab:3a:4a:2c:0f:bf:23:81:
0c:c5:3e:1f:60:1a:5e:ac:c9:5c:08:e6:f8:70:0f:fd:d7:5a:
1d:f6:78:89:96:20:6a:9a:05:13:8d:f5:59:cf:ce:d4:5d:a2:
f5:7b:95:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:07:42 2025 by rpki-client