Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a1502a64-68c7-394e-ac23-bb9720f77997.roa
File: a1502a64-68c7-394e-ac23-bb9720f77997.roa (raw, json)
Hash identifier: 7NcZjd81Q2aU1utxl+gY+hFs9cUzIz6pd2WZ7Em/fB0=
Subject key identifier: 4C:0E:BD:DD:72:43:31:5B:0E:C5:F5:65:3F:7B:D4:3E:A2:A1:29:E7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EB9CA4CB3E8272771A68C5600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a1502a64-68c7-394e-ac23-bb9720f77997.roa
Signing time: Thu 28 Jul 2022 12:00:00 +0000
ROA not before: Thu 28 Jul 2022 12:00:00 +0000
ROA not after: Fri 02 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.208.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b9:ca:4c:b3:e8:27:27:71:a6:8c:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 28 12:00:00 2022 GMT
Not After : Sep 2 04:00:00 2022 GMT
Subject: CN=88d6e26f-78c5-4bb4-aa6f-a3ab0b791136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:6e:ca:33:e4:59:12:ab:44:ba:82:fd:99:
2b:ea:3e:86:4b:44:36:50:59:5c:c5:25:21:5e:b6:
cf:59:25:18:0f:3d:59:5d:8b:22:5f:17:e1:dc:4e:
13:72:0c:0b:3e:ac:15:82:f8:ba:48:8c:a3:d7:f4:
1d:7a:f3:0b:ff:64:ac:3c:1d:34:90:04:08:7b:8e:
09:b5:34:04:50:de:36:a0:30:4d:5c:b7:6b:1f:4f:
98:c9:63:9e:b4:c4:48:98:ef:a4:7c:11:e3:27:ff:
b6:02:20:b3:e1:12:2e:80:df:b7:38:22:e7:96:d4:
fe:0a:45:1d:0d:70:ea:38:3b:b9:79:c1:43:64:ed:
d7:48:a6:2b:a8:01:1f:a1:3a:a4:d0:08:5b:d4:69:
fe:6d:e1:ce:62:a8:0c:19:db:16:7b:54:36:e9:7a:
b7:b2:50:98:e6:97:04:80:32:ba:05:3b:8f:23:d5:
9a:3a:1e:d0:5d:8c:83:5e:26:f0:d2:7c:cd:ed:35:
1e:14:f9:28:de:a6:3e:d5:0d:10:32:cf:eb:be:20:
26:8d:30:c2:a0:0c:e2:f3:e9:9f:9c:5a:44:fc:fd:
eb:4b:ac:8b:91:cd:ab:e8:f0:10:23:01:01:22:75:
7f:58:bd:91:95:42:40:bb:ca:4a:d0:5d:bf:17:35:
c6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0E:BD:DD:72:43:31:5B:0E:C5:F5:65:3F:7B:D4:3E:A2:A1:29:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a1502a64-68c7-394e-ac23-bb9720f77997.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.208.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:02:54:34:55:54:23:22:ad:6c:4d:e2:d0:11:a9:f5:0f:9b:
03:27:c3:f0:ca:d8:69:c5:29:aa:be:ab:3d:3b:ff:70:c9:71:
07:7f:f7:63:a8:e5:5d:a2:e0:ba:e2:32:9a:3c:d1:43:31:f1:
22:a1:e2:fd:8b:c3:90:18:7d:88:65:3a:44:e8:d4:06:d2:68:
82:61:89:1b:f3:a1:f7:ce:b9:2e:d1:db:3a:30:31:08:6f:4c:
e3:64:b5:ed:58:28:b2:1c:63:36:30:bb:92:61:ad:ad:7c:d7:
ed:23:46:a1:56:f7:02:bf:90:61:7e:e5:15:1f:e1:dd:c2:46:
53:0e:d6:74:8c:c5:ba:ea:4a:20:b0:c9:39:81:6f:c3:a6:19:
69:41:39:04:2d:b8:48:0f:a3:7c:f1:4b:3a:36:4c:20:26:af:
06:39:a6:f4:7a:89:26:0b:a6:96:b2:a0:09:f0:04:9e:71:47:
3b:0e:35:e7:a5:f6:b2:fd:8e:06:f9:52:ca:6e:f0:a4:16:2d:
a4:8e:85:02:17:17:82:d3:3a:d1:a1:a8:06:66:ec:92:86:9c:
c8:a8:55:74:91:f1:44:17:38:17:70:e7:1e:e0:8d:0f:d4:15:
2c:6d:41:fd:12:79:1a:cf:b2:eb:bc:b9:4f:d9:84:86:3f:ba:
af:66:28:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:23:38 2025 by rpki-client