Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6b1af638-af66-3f00-9e02-d01a85f69ffc.roa
File: 6b1af638-af66-3f00-9e02-d01a85f69ffc.roa (raw, json)
Hash identifier: rWDJzBIdfZqNKnoJo3oiZ0zPpxsWPtTHYoIwPm/uwHs=
Subject key identifier: 04:16:C9:6E:D1:F1:5F:B5:EC:F7:C4:EF:50:25:89:4F:EE:4A:2A:CB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F32F09E3CF6C221A83FDD6E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6b1af638-af66-3f00-9e02-d01a85f69ffc.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.248.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:32:f0:9e:3c:f6:c2:21:a8:3f:dd:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=382b49a2-c847-4db4-ad7b-36540d233828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:99:15:00:d3:87:09:ed:79:f0:61:60:b0:
04:2a:80:d0:9c:03:16:b6:93:f2:f1:1e:d2:a4:cf:
fd:69:95:9b:f8:31:8b:c8:2b:a6:53:a4:50:7d:8f:
60:95:67:06:d7:a3:d4:6a:0d:2e:7a:d9:d8:fb:72:
9e:fc:a5:12:89:e4:c5:db:8a:1f:22:70:76:8a:f7:
c0:3e:78:e6:c4:7f:5c:dc:a5:a1:ee:db:20:89:28:
d4:9e:51:db:91:7a:7d:be:7f:e5:4f:9e:66:b7:a5:
16:7c:ac:b1:6a:a8:bf:ea:e0:68:71:a0:1a:dd:62:
0a:f0:4f:b2:dc:7b:85:bf:74:6f:56:38:8b:a0:84:
e8:1d:c0:62:ec:25:13:b1:dc:f1:ba:3a:31:dd:07:
da:73:ac:72:c2:61:d2:de:53:f0:40:e4:3a:ed:2f:
97:fd:ab:b4:6e:7d:71:74:9f:7b:4e:f2:ac:6f:07:
d5:11:44:d2:c4:d8:fb:78:92:14:b8:b9:26:32:da:
86:8f:4e:09:48:00:0e:f8:ec:60:31:8f:a9:33:a1:
b7:f8:fa:9f:df:9b:5b:df:83:c7:d6:e4:eb:d8:f2:
e2:c3:a5:f1:4c:c3:ee:cc:2c:75:68:13:83:14:73:
a9:b4:93:ed:7f:16:16:b3:69:eb:56:2e:f2:25:eb:
e5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:16:C9:6E:D1:F1:5F:B5:EC:F7:C4:EF:50:25:89:4F:EE:4A:2A:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6b1af638-af66-3f00-9e02-d01a85f69ffc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.248.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:29:ed:61:74:60:e9:fe:94:3c:bf:78:79:36:cb:83:59:ae:
c3:71:ce:18:49:ca:eb:89:aa:a3:4a:9d:5a:42:45:60:34:b3:
b1:63:f9:03:58:fc:22:4a:e8:42:02:7a:53:b2:40:72:e7:d3:
14:3f:ec:9b:92:d6:a1:47:0a:62:ff:96:c7:a6:e4:c5:4c:1f:
93:e4:58:dd:60:cd:96:c1:bc:8f:28:9e:3f:c2:33:73:dc:4b:
b4:f8:cf:08:39:c9:91:cf:57:67:f2:69:88:08:1f:0d:b5:46:
8d:e9:4e:4e:44:25:88:55:40:b2:ff:5f:db:da:77:91:66:9b:
bd:1b:bb:29:5c:23:1a:d2:9d:22:43:f7:f1:05:ae:9b:c8:8b:
72:72:de:1d:09:d7:bd:20:04:01:23:71:a0:b2:83:d8:ef:df:
d8:d2:ed:74:02:99:d5:0d:9b:4d:15:9f:be:cf:7f:e2:dc:1a:
8a:5b:25:b5:af:a3:90:f8:10:29:ae:25:50:ad:ab:ba:ad:be:
1b:05:10:0e:c0:b9:40:32:cb:6e:53:30:8f:bf:48:19:fe:f3:
99:4e:0a:21:8f:0a:78:e8:26:ca:b6:eb:07:13:3d:c3:d0:a5:
38:e0:51:fb:50:47:51:f0:ce:b4:55:65:67:4a:45:c1:ec:a0:
5c:23:54:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:29:43 2025 by rpki-client