Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a5d205b2-d495-3403-91a7-ec180cf27dbe.roa
File: a5d205b2-d495-3403-91a7-ec180cf27dbe.roa (raw, json)
Hash identifier: /2QU8o7zHa5eHJBA1dxmu4wsiBNg+Ak68iC2uVvN4Rg=
Subject key identifier: 7A:EF:BA:2E:74:8B:DF:C5:B4:77:61:E4:21:3B:59:37:2E:26:8C:F0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584067391FD6FD6A564691C84400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a5d205b2-d495-3403-91a7-ec180cf27dbe.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.131.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:67:39:1f:d6:fd:6a:56:46:91:c8:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=22cbc7e4-4df2-43b1-85c6-ac8d6ad4afb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:eb:10:b1:24:00:f8:31:83:45:b5:98:7c:
e0:b2:38:06:c0:2f:16:cd:c8:12:58:5e:77:e5:9e:
5b:53:e7:69:9d:fe:c7:30:08:cf:cd:88:80:7a:d9:
72:d4:78:b5:04:21:3d:cc:4f:1c:6c:aa:4a:b7:6a:
cd:f2:58:b0:79:4e:9d:d3:5a:e7:5f:53:fb:85:31:
3b:b9:2d:30:b0:61:54:d9:b7:ac:6f:2c:03:de:d4:
70:14:79:0f:a8:44:ed:5b:c2:13:e7:39:71:48:f1:
13:8f:fd:d8:a0:fc:36:d1:ed:c9:07:e8:76:ad:af:
9c:28:0d:ce:f3:a8:13:c5:85:11:cc:b7:25:61:8e:
53:b0:d2:62:32:35:2e:d5:04:6e:f5:51:f4:93:41:
27:53:8d:e1:2a:bf:21:80:b8:09:1d:c1:5d:1a:4a:
13:14:82:a3:ed:58:2e:c6:f1:7a:c7:b2:ec:56:55:
b7:31:48:ac:07:cf:2e:9d:c4:f2:a4:c1:00:5c:1b:
b2:71:29:71:82:e1:02:bc:94:b2:86:84:3d:97:e2:
ce:b0:e2:13:75:00:58:84:c2:8e:5c:a2:42:0f:ef:
5b:69:40:6a:4c:24:3d:85:47:6f:05:fc:bf:ba:71:
78:75:a7:6c:3f:6a:15:54:c2:1a:2e:7f:4a:38:c0:
c2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EF:BA:2E:74:8B:DF:C5:B4:77:61:E4:21:3B:59:37:2E:26:8C:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a5d205b2-d495-3403-91a7-ec180cf27dbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.131.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:fc:88:de:1c:5d:5c:cf:db:c2:16:26:60:09:1a:f9:6f:1b:
1e:76:3b:9c:c1:70:0b:a1:05:75:1a:2e:d0:22:cb:1a:62:17:
5f:12:18:c4:17:a5:b3:8c:c3:2f:24:33:bb:8e:56:d1:c9:d5:
9f:61:39:f1:e4:65:c1:22:dd:eb:73:d5:22:e3:77:9f:e6:65:
27:8c:1e:65:38:7a:99:20:55:19:2b:cb:dd:72:f9:c2:a3:4c:
c1:c6:54:b8:5f:ad:08:2e:e8:b3:5e:6b:ff:20:a7:1d:80:7a:
1e:d8:0f:93:bf:e9:95:d2:80:b0:7b:12:15:7a:a4:da:fa:fc:
d8:a7:c9:b0:a8:0f:26:a8:fa:3d:dc:63:62:f2:e0:4e:4b:93:
b2:86:5c:4d:48:d6:e0:97:3b:e2:86:d6:d4:c3:56:aa:af:87:
0a:1f:6a:65:06:bb:a3:fd:7a:fb:3b:cf:47:8d:4b:8c:cc:81:
2c:95:5d:3e:23:c0:cd:c4:c2:5e:87:38:81:9a:3c:36:96:6b:
ca:cb:3a:57:04:f9:6d:57:ce:c7:af:42:45:d9:74:1e:81:23:
34:12:74:37:d5:f1:3b:b7:b1:cc:25:62:02:2c:1a:e0:15:24:
7f:1f:f4:d8:16:eb:fc:6d:92:08:da:a3:8e:9e:8b:d1:f7:29:
8a:2a:5b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:49:33 2025 by rpki-client