Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8a4db9be-0166-3a92-8fa0-a6d494f43303.roa
File: 8a4db9be-0166-3a92-8fa0-a6d494f43303.roa (raw, json)
Hash identifier: to0ZyZ3G+0qEM+N955HQJ/ZkzSQGUCCy6Czl0vkPkiQ=
Subject key identifier: 9A:71:97:ED:13:01:BF:68:CE:85:AF:A0:A1:A2:2A:5F:E2:2D:6A:D7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DACCB88A606E14E33607AA600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8a4db9be-0166-3a92-8fa0-a6d494f43303.roa
Signing time: Sat 23 Apr 2022 12:00:00 +0000
ROA not before: Sat 23 Apr 2022 12:00:00 +0000
ROA not after: Sun 29 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.45.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ac:cb:88:a6:06:e1:4e:33:60:7a:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 23 12:00:00 2022 GMT
Not After : May 29 04:00:00 2022 GMT
Subject: CN=1368a6a5-d4fd-46e5-b547-e825bc5651e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:16:6b:8c:b4:df:98:3e:85:ef:84:60:64:2c:
9d:7d:e7:d6:58:2d:ba:b8:93:50:51:45:2b:66:9e:
36:cb:3b:0d:18:22:9f:7d:96:30:5a:44:dc:11:02:
4e:69:12:5c:c2:b3:43:e3:c7:3e:28:b3:6d:c9:92:
85:3b:03:1e:bd:50:ea:4e:d4:76:44:e2:de:41:fc:
67:95:85:77:89:30:76:2d:64:c9:51:fd:44:f5:33:
86:e9:87:6e:ee:f8:66:82:a3:0d:fb:76:b0:61:d0:
8c:b3:79:6d:b3:44:0a:33:65:3e:7b:50:c5:f8:ee:
01:b1:b6:bc:c0:15:a4:ed:92:ca:10:90:9a:1c:3d:
a2:fe:1d:7f:60:39:5e:fd:fe:b7:4f:6e:67:26:6f:
a8:b2:a9:f2:b3:0a:05:a3:7e:1c:18:a7:ab:5b:20:
5d:4e:3e:eb:a8:87:99:22:a4:8f:55:97:d5:be:0f:
6e:ad:71:7e:45:ab:df:61:0c:ec:16:f6:b9:8f:c7:
60:db:70:de:75:51:86:18:f1:8a:99:86:9c:d7:a5:
ae:71:b2:62:7f:5f:c4:0c:43:4c:d9:6b:78:96:f7:
83:7d:ed:ef:c5:94:e4:7f:3e:b9:ee:97:91:82:85:
7b:d0:86:22:23:70:9b:c6:5c:d0:b6:b1:84:1d:cb:
95:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:71:97:ED:13:01:BF:68:CE:85:AF:A0:A1:A2:2A:5F:E2:2D:6A:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8a4db9be-0166-3a92-8fa0-a6d494f43303.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.45.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:15:94:03:fe:3f:a1:6e:b3:3e:4b:62:c9:08:9f:00:50:fa:
10:e9:44:34:48:29:0b:0e:14:94:a9:70:70:75:40:bc:a8:46:
a8:13:6a:8a:ae:0b:fa:29:25:d5:94:37:14:da:6b:e7:10:d6:
74:81:ed:a2:8c:33:dc:0d:fe:2d:74:20:51:c5:7a:a7:87:1a:
4c:86:91:32:c6:66:a3:4c:a3:c1:d5:13:31:4f:a0:31:60:0b:
e0:c9:67:b4:5d:c4:2c:80:9b:d3:2c:9a:43:37:24:d3:9e:27:
12:3f:db:75:70:03:7e:6f:22:eb:ac:71:cf:12:94:e9:a8:88:
f0:fe:0d:9b:58:2b:16:a2:a1:2c:83:d3:72:5b:01:34:29:b2:
79:b5:a3:c9:c0:a7:c3:61:3c:ba:e8:bb:1a:62:ef:de:d7:cb:
55:11:36:2f:31:9a:e3:bc:3f:d1:ef:e1:ba:1d:e0:18:47:2c:
bd:23:3f:ae:05:80:f7:49:56:3a:f6:bb:2b:6d:58:e9:35:92:
ea:37:8c:d9:c7:0c:19:eb:c9:8d:83:2f:33:59:97:ab:4a:b2:
b8:80:fd:1f:04:f3:fb:92:a8:ba:be:0d:da:ae:41:1b:58:a5:
6a:4c:2a:cb:20:0c:c7:e3:c6:52:85:ba:36:e8:75:0c:54:96:
01:d4:bf:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:46:00 2025 by rpki-client