Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a4f5d8dc-10d6-3a8b-bb76-9c062190456e.roa
File: a4f5d8dc-10d6-3a8b-bb76-9c062190456e.roa (raw, json)
Hash identifier: HOZnJ4kC8Td4sneqaqdqhCvwhJWbWEB/KT9PpAIQYFQ=
Subject key identifier: 9E:66:F4:CE:57:6C:4C:60:3D:30:A1:B3:22:87:28:0D:FE:CB:4B:56
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E4858E61247645EC84756A500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a4f5d8dc-10d6-3a8b-bb76-9c062190456e.roa
Signing time: Fri 17 Jun 2022 12:00:00 +0000
ROA not before: Fri 17 Jun 2022 12:00:00 +0000
ROA not after: Sat 23 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.220.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:48:58:e6:12:47:64:5e:c8:47:56:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 17 12:00:00 2022 GMT
Not After : Jul 23 04:00:00 2022 GMT
Subject: CN=ea26c78f-6139-459e-bbcb-dce1f922c33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:93:56:1f:71:48:95:25:f1:4e:5d:f7:a9:
f0:66:96:54:8a:9b:df:47:4f:67:9b:f8:99:30:65:
bc:51:d0:69:80:87:04:24:3e:fa:a1:ab:da:f3:7c:
92:98:02:be:01:ab:17:4f:ec:82:b9:47:09:5c:62:
74:32:7f:20:0f:a1:eb:83:bf:ba:a3:06:fc:74:1a:
02:dc:a0:3d:41:e8:87:21:a0:a2:cc:ef:b2:44:43:
46:b3:69:b6:a7:28:09:b2:fd:1d:a4:b8:02:59:f4:
d7:b9:ee:93:2b:d4:69:53:7c:6a:70:fc:90:d6:d1:
7d:d4:62:e6:02:95:2d:ac:50:a7:fe:90:47:7a:a2:
6f:6d:49:77:ff:3b:61:ae:a3:9e:ed:f4:e0:47:80:
1e:b1:f5:0b:f6:02:4e:05:98:c8:81:69:e9:36:65:
18:32:60:a5:33:da:c4:93:05:20:49:4e:23:61:1a:
61:b0:9b:8e:57:0b:f7:81:9a:e0:a2:09:97:95:87:
ec:2c:69:d9:f9:54:0f:c3:b3:dc:bb:7a:d2:55:7f:
3e:c8:67:8a:96:ff:dd:7a:2d:09:e1:32:e0:20:f2:
ea:54:6b:6a:19:89:f3:b6:12:c7:db:dc:64:49:cd:
bb:7c:a5:ce:51:82:6e:9c:57:15:17:1d:d6:4b:b9:
52:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:66:F4:CE:57:6C:4C:60:3D:30:A1:B3:22:87:28:0D:FE:CB:4B:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a4f5d8dc-10d6-3a8b-bb76-9c062190456e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.220.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:34:99:78:3e:90:6c:cc:da:c6:fd:f7:65:cb:2a:5c:32:f4:
11:dd:8a:a2:d3:98:c1:5c:11:cc:80:47:0c:de:67:d8:e6:f7:
d0:53:95:5a:15:c3:98:19:76:b8:e0:3e:b7:86:4e:26:ac:ba:
99:d2:f1:ad:41:64:21:f7:1b:53:5c:6a:e8:b4:7c:e5:f5:c0:
15:d4:c4:73:f6:48:39:63:31:5e:9c:0d:0b:86:fd:10:0d:bb:
a6:6b:12:ff:2d:c0:d2:a5:38:47:36:7f:b4:3f:86:0e:3b:d1:
b4:18:f4:d5:4f:35:43:fc:11:64:a2:ef:c1:c3:06:26:dd:5c:
66:da:c7:49:01:8c:aa:9b:0f:92:f6:41:3b:c7:c5:07:d5:30:
2a:ac:f3:62:a3:3d:81:fd:29:f7:d5:12:88:15:c1:52:be:18:
03:84:e4:4c:50:5f:08:46:f3:7c:b1:a1:42:13:a6:90:62:49:
47:9a:9f:55:19:11:e8:46:0d:51:c1:a2:52:94:d6:69:49:0a:
8b:b6:80:fa:d3:03:a2:52:d8:f4:f1:5d:5b:e4:d5:ed:e6:0c:
9c:85:a3:5e:38:00:0c:49:8c:be:7c:0b:a7:09:38:78:e5:a8:
57:b0:b0:38:4f:fe:fb:3d:6b:e5:ee:c4:86:1c:75:66:4b:2a:
b0:4c:47:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:14:42 2025 by rpki-client