Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/85e90ec0-7267-30e8-a1c5-d3a24650249f.roa
File: 85e90ec0-7267-30e8-a1c5-d3a24650249f.roa (raw, json)
Hash identifier: 2auFeIjC87M2QTyTjAyUvQJxjCHPEGY0RP1m1RH28YE=
Subject key identifier: 43:9B:60:BB:12:35:25:4F:88:08:8D:51:22:F8:27:5C:23:EC:E8:A4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F5785F8F7415D8418E79752C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/85e90ec0-7267-30e8-a1c5-d3a24650249f.roa
Signing time: Thu 22 Sep 2022 12:00:00 +0000
ROA not before: Thu 22 Sep 2022 12:00:00 +0000
ROA not after: Fri 28 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.69.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:57:85:f8:f7:41:5d:84:18:e7:97:52:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 22 12:00:00 2022 GMT
Not After : Oct 28 04:00:00 2022 GMT
Subject: CN=bf4c5bc3-863c-4589-ba06-4cf2ed440230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:45:f8:7a:b6:9a:6d:5c:d1:35:e0:3c:f3:
d7:a6:2a:2a:12:53:81:64:6f:75:2f:dd:91:c2:5c:
6a:2b:d6:fb:bd:45:14:3a:41:32:12:d4:34:7b:88:
15:8b:1d:9a:f3:0f:39:b0:4d:bb:2b:a1:e4:ac:d1:
06:66:0f:86:d8:7d:e7:42:9c:13:57:ce:f7:fd:11:
d2:b3:2a:fe:fe:5b:c4:da:92:6d:3b:fa:b7:93:09:
a3:98:ba:22:50:3f:07:51:e8:ea:5c:fb:11:92:f2:
2e:62:48:c6:62:5e:eb:5a:6e:b9:be:de:01:e6:82:
d6:23:a6:c6:be:22:50:51:c2:2b:ba:59:47:50:73:
2e:81:61:1a:c6:3f:d7:70:4e:0f:58:75:2d:83:37:
66:c9:05:44:fa:d2:57:7f:a7:a6:91:2f:9c:c2:ec:
09:c7:b5:9e:29:1a:77:9c:f0:82:00:82:66:42:ee:
a2:d4:87:91:5b:ea:8c:4f:dc:c6:ab:f9:65:b8:6d:
10:44:f2:23:e5:cb:a5:1f:3b:e6:25:e7:c8:2f:85:
4a:df:06:4d:fe:ce:cf:54:6d:d1:0c:53:fd:56:5b:
0b:ec:ad:e9:e8:07:30:e4:77:c8:67:44:bc:98:23:
d7:8f:0a:e4:b5:1e:95:05:03:da:c8:91:1a:ac:ef:
85:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9B:60:BB:12:35:25:4F:88:08:8D:51:22:F8:27:5C:23:EC:E8:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/85e90ec0-7267-30e8-a1c5-d3a24650249f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.69.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:a0:42:e7:9c:15:d7:30:0f:59:85:11:f9:e1:51:8f:8e:7b:
58:79:24:da:3d:28:d8:ba:1b:7c:5e:ef:e4:71:6d:5a:55:57:
52:ce:ef:75:b9:54:84:df:e3:f7:7b:21:e4:0d:e7:4b:7e:b1:
bd:45:fd:c6:41:0f:9d:a9:c9:dc:a2:86:82:f8:a2:60:e3:98:
8a:ff:4f:19:96:03:62:1c:2b:4b:0a:c2:fa:1b:05:5c:e9:15:
45:e6:8b:e6:b7:d1:35:62:ca:e8:77:ef:27:aa:38:bc:84:70:
71:27:f4:39:88:c6:a8:4a:a5:61:02:44:fa:f1:7d:19:e2:b4:
dc:b9:d0:81:82:ab:f2:64:cb:8e:78:db:90:8f:58:11:8b:8a:
da:c7:18:e8:61:4e:ac:24:94:6c:f3:80:ac:ec:d6:29:f7:31:
13:c5:c6:74:1f:5c:a2:0a:89:a1:4d:be:e4:b4:33:70:07:81:
40:18:6f:85:e4:c4:17:66:09:65:03:12:fc:16:72:54:1a:10:
9b:01:61:c4:17:e5:43:69:8e:f9:fb:1b:da:34:cf:64:39:0a:
e4:54:cc:32:24:b7:61:cb:54:b9:79:73:89:5b:22:a0:25:39:
30:65:5d:c6:41:7d:20:9e:de:b3:e7:26:ce:6e:b6:0a:76:7a:
23:a4:a3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:14:24 2025 by rpki-client