Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a44a7cf2-aa58-3181-b0a4-c54d7c4afe5b.roa
File: a44a7cf2-aa58-3181-b0a4-c54d7c4afe5b.roa (raw, json)
Hash identifier: MLHzHlZHxaRajDXP6f9btMCwdqYfS4DBvqsXC/IfxX0=
Subject key identifier: 16:2F:32:EF:6F:98:00:22:E3:17:57:B0:C5:38:C7:56:CC:E2:81:58
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B83B98871BA3DA76AEB5F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a44a7cf2-aa58-3181-b0a4-c54d7c4afe5b.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.202.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:83:b9:88:71:ba:3d:a7:6a:eb:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=2b54d9f5-f0c4-4005-9eeb-6f4451fe9bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:9d:0f:4e:e9:1d:5a:9e:6c:f8:0b:75:fc:
d2:22:ce:ca:30:55:b3:9c:8e:03:89:d2:0b:65:32:
3a:cd:a8:e8:ce:07:85:9b:4c:22:31:6e:e9:02:71:
57:59:36:75:e6:eb:55:a4:ce:32:b3:fe:d0:cf:d3:
7a:0c:e4:89:5a:87:49:ac:76:89:4c:3e:23:da:2d:
b7:44:80:b0:18:91:58:9a:74:1d:8b:09:c2:02:2c:
c0:f6:d7:75:6d:43:97:e6:c3:b9:80:be:01:30:3e:
9d:95:87:ad:a0:a5:21:ce:36:62:f6:73:c0:4b:5a:
7e:6b:e0:ff:a4:b8:3c:0b:73:3e:1a:49:07:87:47:
47:3a:94:aa:83:df:08:55:ff:ac:d9:e0:8f:2f:a5:
c5:08:6e:22:1e:69:c1:0b:f5:3d:37:42:ff:56:0d:
54:3c:bc:94:87:dc:dc:88:fd:c7:8c:d4:1c:75:bf:
d1:45:ea:6c:22:a2:26:e9:62:66:58:85:12:d1:5a:
47:98:74:67:08:f1:6a:5d:08:58:04:32:a8:90:45:
b0:00:03:3c:de:69:87:25:fa:9c:b0:a7:69:d8:30:
fc:ef:23:c8:04:2a:7d:e5:96:b9:1d:3f:b2:ef:8c:
e0:5a:aa:21:fe:c3:fc:33:95:29:10:d5:93:ad:63:
ac:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2F:32:EF:6F:98:00:22:E3:17:57:B0:C5:38:C7:56:CC:E2:81:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a44a7cf2-aa58-3181-b0a4-c54d7c4afe5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.202.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:7e:5e:0e:8f:0d:21:19:95:44:ab:9e:c5:c7:eb:24:83:8c:
32:4e:d2:b2:cb:f3:09:18:06:c8:c7:61:3c:fd:c0:2e:cd:92:
94:cc:e9:d4:d3:3f:7f:01:48:6d:9f:72:ea:b6:d2:87:44:16:
5f:9c:d8:4b:4a:ba:b5:a4:45:8a:34:01:77:bb:22:64:34:8e:
d4:2f:c4:1c:85:cc:26:32:78:ae:2e:a0:02:76:44:ec:d5:60:
cb:e7:3b:88:cf:6c:78:3a:e1:8b:7e:b4:83:bb:ce:b5:b5:29:
91:c4:53:7d:0e:ea:78:81:51:7c:87:7c:0d:84:84:6a:f8:f2:
4c:db:bf:56:50:6a:61:b3:d8:d7:53:ed:a5:2a:e9:f8:c8:3c:
2b:80:84:81:62:3f:21:b9:af:16:6d:f8:d4:23:f6:74:81:6f:
36:f2:3d:a8:05:63:5c:ba:fb:2f:e9:2d:18:c9:71:7f:90:fc:
82:85:84:8f:6a:10:a3:81:5e:56:8b:29:a4:a4:8c:71:93:39:
44:21:1d:14:a0:e7:80:9d:27:7e:77:b7:6b:de:f6:c2:ee:14:
07:79:1d:79:c8:77:6c:d6:e8:93:fd:8d:0b:7a:52:9f:4b:bf:
8f:e8:9f:21:8a:c4:e6:cb:da:ea:96:87:a0:fc:ea:1e:54:e8:
55:ff:d9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:25:23 2025 by rpki-client