Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6e674aeb-1840-31f9-a7a0-fbbea3c3287d.roa
File: 6e674aeb-1840-31f9-a7a0-fbbea3c3287d.roa (raw, json)
Hash identifier: 53yB9rsbCRMvMGxbH49LIjBImjVJqbLD6vwrlCtAQT4=
Subject key identifier: 9D:10:67:13:D9:9D:D8:A4:99:6B:19:71:85:F3:7D:84:87:57:9E:74
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E1CFCFCBC3CE3FE9700EBB3F8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6e674aeb-1840-31f9-a7a0-fbbea3c3287d.roa
Signing time: Thu 02 Jun 2022 12:00:00 +0000
ROA not before: Thu 02 Jun 2022 12:00:00 +0000
ROA not after: Fri 08 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.70.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1c:fc:fc:bc:3c:e3:fe:97:00:eb:b3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 2 12:00:00 2022 GMT
Not After : Jul 8 04:00:00 2022 GMT
Subject: CN=591e707f-c25d-485c-9cd8-bb95a270313b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fd:6b:8a:fd:f7:72:58:16:a9:70:15:5a:c7:
ce:04:c8:af:5c:28:47:7f:05:e2:5e:c4:6b:a1:6a:
48:e7:26:f0:7e:08:94:0d:6e:54:17:a2:87:ba:e5:
71:89:3b:bc:7b:ea:92:ce:fe:69:e7:62:a3:3a:f5:
9c:24:5b:c4:96:fb:1f:4e:97:1b:76:0f:3d:ab:84:
5a:56:8d:ba:11:04:29:1c:9b:b6:d3:cb:99:c7:fb:
da:8b:b8:59:d5:49:49:bb:7b:1a:2e:1d:2b:de:85:
f6:e7:d8:0f:d4:c8:43:73:43:2c:c2:31:f0:fa:32:
7d:39:b2:10:41:ed:f5:bd:0e:4e:a4:ae:25:59:46:
d0:25:8a:38:9b:05:69:8e:10:14:3c:8e:db:5d:6c:
5f:7c:47:0c:ad:5a:60:e3:c9:38:b1:52:e5:e9:73:
83:37:08:4f:dc:ef:e4:67:a5:c5:ce:53:68:10:d2:
1d:7b:c1:bd:5e:e2:b1:b4:30:4c:f7:a7:74:38:ae:
f2:3e:47:3f:79:98:c2:2e:6a:84:a5:33:d4:be:36:
ca:4d:3d:85:48:3e:53:f4:c2:a6:f5:78:c9:9a:78:
b5:02:ab:41:af:c3:b0:a3:95:47:4e:c8:5a:58:1e:
c4:8f:f2:df:c1:d5:4f:4a:e1:df:84:cf:e6:3e:79:
c1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:10:67:13:D9:9D:D8:A4:99:6B:19:71:85:F3:7D:84:87:57:9E:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6e674aeb-1840-31f9-a7a0-fbbea3c3287d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.70.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:b2:64:63:62:58:81:b9:11:7e:fc:87:f3:1e:93:65:d6:91:
23:3c:8e:2b:ed:31:10:54:ca:77:47:c6:02:a0:5c:31:49:4c:
45:9b:ea:8e:26:99:74:e9:4e:8a:72:44:f6:e7:4c:78:f3:c0:
97:44:8b:a7:da:a3:8a:f4:64:a8:94:49:8d:76:57:1a:c1:5b:
84:f3:34:c0:c9:68:31:ac:e2:80:b3:71:24:ee:a1:13:2d:42:
bc:f0:2c:64:23:24:d2:7f:25:11:09:75:ed:a5:d9:a2:a3:c6:
9e:fc:9c:aa:48:40:9f:a7:4b:17:97:03:3b:d7:8e:a0:d9:78:
80:6b:40:48:72:33:f1:ec:02:99:22:c1:ab:77:10:ec:d1:38:
92:ac:31:79:53:38:81:8e:d3:f5:63:47:83:09:72:59:ed:81:
2a:31:c0:1b:c8:8a:37:57:fe:fb:d3:ee:24:02:43:f2:6c:4c:
eb:ee:71:b8:b3:d0:e9:74:34:0b:61:dc:e9:f6:d4:2c:c5:bb:
34:7b:0a:27:9f:ea:92:c3:74:a7:60:a1:29:d9:a9:2f:0f:d2:
a0:03:24:1e:f6:85:81:91:56:7f:51:e3:73:8e:af:ea:c4:27:
5d:3a:15:55:56:f0:77:a5:44:33:40:2f:8f:2e:70:b1:11:36:
f5:5a:36:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 00:56:54 2025 by rpki-client