Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6c576025-f0c2-3e6a-b08a-dbe7c1bfb6f5.roa
File: 6c576025-f0c2-3e6a-b08a-dbe7c1bfb6f5.roa (raw, json)
Hash identifier: iCN6CtDiELFaq+7HaaWamRZ72p1x5fi4MmChGLGKMbI=
Subject key identifier: 29:46:5C:3D:93:5C:16:9E:71:E1:FC:B1:71:6E:AE:A6:0E:97:73:5C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCC74E46A2C05103F99FFD080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6c576025-f0c2-3e6a-b08a-dbe7c1bfb6f5.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.240.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cc:74:e4:6a:2c:05:10:3f:99:ff:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=8d582f23-0047-433f-a0f1-a1d3db76a00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9c:25:7d:15:f5:4d:0e:26:d1:a4:95:08:d0:
5a:43:a5:85:6e:4d:e5:88:2a:20:39:28:4c:2f:3e:
0d:3c:cb:f9:63:56:9d:5d:c8:06:57:2d:83:c0:9a:
33:cf:15:f1:7a:d8:c7:2a:a7:98:86:2d:90:07:8d:
09:6f:59:94:a5:77:6f:b6:62:82:79:6c:73:5b:3f:
35:17:6b:98:c5:1d:2a:d0:ec:3e:d0:e6:d3:1a:d6:
73:55:62:74:75:90:8b:95:59:53:3f:d9:5d:0b:f9:
9c:94:9a:0c:04:18:c3:96:d9:36:de:3e:bd:32:9b:
de:79:57:3d:67:1e:4d:3a:1d:80:d9:1f:00:0d:2d:
75:f4:b7:92:c9:6e:af:70:dc:7b:a1:6e:9f:d1:69:
e5:b4:53:e3:b3:7d:b6:ab:b4:fa:d0:22:55:f9:fe:
58:cb:68:b5:83:24:19:e4:40:22:7b:59:73:4d:33:
30:89:35:aa:c3:fa:dc:bd:32:4b:67:30:ff:83:37:
19:3b:fb:5f:2c:fd:84:9a:d4:bb:82:31:a9:59:b7:
68:c0:f1:0e:e7:6d:4c:42:e0:98:f9:bd:3b:9f:5f:
af:af:33:69:a9:df:0e:e2:7f:65:07:04:b7:ea:90:
e4:6a:4c:ad:a8:97:67:5e:de:bf:6c:e4:86:0d:f4:
6f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:46:5C:3D:93:5C:16:9E:71:E1:FC:B1:71:6E:AE:A6:0E:97:73:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6c576025-f0c2-3e6a-b08a-dbe7c1bfb6f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.240.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:ba:e3:72:29:57:66:30:24:d9:54:8d:fc:24:aa:55:15:3f:
6d:0f:a1:fa:cc:e0:8e:e6:51:39:09:6b:4d:00:84:eb:da:97:
ad:fa:4d:6c:48:04:76:9a:bd:d4:da:3e:4e:06:a1:71:45:45:
25:54:77:45:f0:d5:d2:aa:24:c1:1b:c6:9c:5f:5e:e6:8f:5d:
68:e2:9c:99:04:28:a5:ca:45:5c:0c:ad:72:a9:af:a4:7a:28:
85:e8:05:95:6f:55:bc:2d:b7:55:c8:91:97:6f:17:ec:99:72:
d5:6c:35:47:ec:07:81:5f:45:6d:de:d7:f7:fe:f0:da:2f:dc:
ab:44:b7:94:98:00:f3:57:b3:f2:5e:dd:e4:e0:4b:d0:42:5e:
22:66:a6:e9:fd:27:13:3b:3b:8e:c3:fb:01:aa:9a:7d:d5:94:
15:51:e6:2c:c6:7c:7a:cb:84:1e:9d:cc:38:de:54:db:ea:51:
36:45:4a:ef:e1:6e:5c:72:a3:de:21:e9:73:f8:55:60:b2:dd:
e7:8e:f2:55:2e:d5:e4:43:72:84:4d:74:fc:80:ac:52:b7:38:
e0:ca:2f:dd:83:cd:00:5a:27:1e:7a:d4:9a:3e:a8:62:18:46:
ba:4f:0f:b2:cf:2b:76:b7:2f:73:ec:5c:d9:a2:c2:18:e3:aa:
89:84:0a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:07:00 2025 by rpki-client