Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a482eadf-7b16-3a8c-b073-729afd422966.roa
File: a482eadf-7b16-3a8c-b073-729afd422966.roa (raw, json)
Hash identifier: qzPVo95/DLgM6jzA8Wdovj8bm8zRTV5G/du4/2aVyyY=
Subject key identifier: 47:F3:31:B0:25:C8:C0:72:8F:C8:F1:D9:99:DD:C0:7B:A7:34:7E:95
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE4498921AB8A191F72825280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a482eadf-7b16-3a8c-b073-729afd422966.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.148.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:49:89:21:ab:8a:19:1f:72:82:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=f3b4b94b-6750-4f29-928f-62027f6ff232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:37:79:81:f2:c6:58:e4:ed:2d:1d:93:8b:4f:
ff:d4:5a:5a:f2:a2:5c:dd:3b:f8:12:ea:e5:83:f2:
f8:9c:8f:af:ef:24:33:a6:01:3f:83:dc:9b:a8:4c:
d1:2b:3a:ed:83:e4:78:40:60:5a:8a:92:16:73:34:
e4:ac:a8:ce:d6:95:f2:13:90:84:d6:e3:fe:37:a6:
a5:60:82:3b:dc:79:20:e4:9b:96:03:f4:96:dd:10:
a2:48:fd:56:56:19:bb:43:67:67:02:89:ee:f2:bb:
53:6d:6b:1b:fc:c7:ba:a2:75:7f:a2:94:b5:f6:25:
8b:10:e9:db:1a:72:33:9e:f1:84:ab:36:67:b0:f9:
76:93:f6:13:67:17:e4:b6:8a:d0:90:81:ad:ca:00:
5e:4f:77:9b:6d:73:50:22:5b:55:a2:6f:bc:4f:69:
a4:fb:2c:68:55:df:0a:68:7f:2c:81:fe:40:fe:cc:
a9:b2:e1:40:50:94:2e:11:8b:a5:8d:e4:e6:c1:b9:
c5:8f:fc:1c:00:55:50:29:25:a8:c3:00:a5:af:f6:
fa:e9:c3:86:8b:43:7b:bb:b6:dd:1e:8f:6e:14:0f:
62:2c:2c:4b:5a:c0:fd:4d:b3:65:08:79:cf:28:a4:
22:0d:ba:02:a9:25:ac:93:82:b2:c0:68:1a:c8:29:
d3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F3:31:B0:25:C8:C0:72:8F:C8:F1:D9:99:DD:C0:7B:A7:34:7E:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a482eadf-7b16-3a8c-b073-729afd422966.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.148.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:4f:f9:c4:d3:af:4e:9b:4b:8e:32:b4:82:63:bb:32:3f:9c:
d7:36:cc:e6:b8:ee:f7:b8:7e:11:92:d4:e3:ab:a7:2c:4a:63:
95:cb:da:28:54:8e:a8:9a:10:04:bf:55:78:38:92:9f:b9:f5:
d7:e1:87:6e:16:c2:f7:8c:89:6d:a6:62:05:28:09:69:a2:ad:
2a:16:56:c7:c5:30:98:8e:bf:bc:2e:21:9a:1f:05:88:de:3a:
63:28:ec:cb:ba:5e:32:39:7d:a0:e7:c3:4a:4a:ab:93:3a:a1:
be:66:d5:91:a3:38:7d:37:16:c9:3b:3f:5b:9b:fe:2c:3e:4c:
27:e3:6b:ca:03:43:19:c8:17:cb:76:6b:98:b8:1e:09:5f:79:
5b:6f:84:02:f3:3c:4f:08:3d:97:31:0a:0a:e6:fd:2c:50:c4:
fe:4b:13:68:f2:5c:90:f7:f0:78:bf:40:b6:01:ad:72:2a:a5:
40:8d:7b:79:73:73:2f:77:bb:bc:6b:b3:a3:41:16:16:66:08:
51:c5:57:31:43:15:93:be:ee:79:39:cf:85:6a:47:5a:37:bc:
ad:8f:71:b2:7d:17:5f:8e:fe:da:0a:8f:30:f8:09:67:29:1a:
c0:1c:36:2f:28:89:f1:38:38:bc:2b:21:12:01:a0:4e:46:b8:
fa:bc:61:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:48:30 2025 by rpki-client