Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a70e4919-91fd-3abb-9727-7f51b7d45831.roa
File: a70e4919-91fd-3abb-9727-7f51b7d45831.roa (raw, json)
Hash identifier: Z6+Te5QlWIwJ9dz0UPvyx53rxxLcPgm4+QE794TJOQc=
Subject key identifier: 70:6D:39:03:51:EF:3E:BF:CB:3A:63:B4:EF:AE:E3:EE:81:6E:5B:E9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DFAE7F5379EB48D0863EA1080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a70e4919-91fd-3abb-9727-7f51b7d45831.roa
Signing time: Sat 21 May 2022 12:00:00 +0000
ROA not before: Sat 21 May 2022 12:00:00 +0000
ROA not after: Sun 26 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.102.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:fa:e7:f5:37:9e:b4:8d:08:63:ea:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 21 12:00:00 2022 GMT
Not After : Jun 26 04:00:00 2022 GMT
Subject: CN=0803c423-2ed1-4ab2-908e-0ae71d635a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:60:ff:7b:42:79:28:69:b9:fc:8a:4b:43:
4c:a6:2b:0a:61:32:f8:e4:32:4b:61:80:80:d0:8b:
34:8b:eb:de:f2:78:d4:ca:60:2a:59:e0:6b:72:44:
43:a8:ec:8a:a9:0b:ba:45:1c:b5:49:ce:e1:86:b1:
ad:5a:ef:a0:47:7c:1d:8f:4e:a1:72:48:2c:c0:8e:
ab:62:d0:4d:9a:10:07:a2:8f:2a:ce:9b:4d:a5:20:
5d:69:32:22:c4:41:4e:d5:5e:a8:1a:cc:9f:3d:49:
d2:9c:39:80:7a:2e:fd:e1:5e:4b:a7:d1:13:1e:63:
3c:a7:6d:12:79:7c:95:cf:bb:74:08:d3:0b:1e:d6:
36:2c:aa:63:1e:a5:7f:54:47:04:ab:04:43:84:89:
60:26:4e:85:5f:79:23:3f:09:74:39:35:4c:56:38:
7f:94:cb:7f:78:25:52:80:9b:35:46:a1:89:3e:ae:
67:c4:38:ae:9f:45:c9:96:5d:c0:61:2d:74:82:a8:
56:59:35:ea:93:ca:11:40:e0:91:d0:2f:8b:7c:dd:
f8:ea:53:32:5a:99:b1:da:35:b3:56:a0:90:ec:de:
89:53:60:eb:a7:6b:d7:37:a9:48:21:e2:dd:98:4f:
43:aa:a2:b8:0e:7c:67:79:dc:4a:f8:57:08:fb:a3:
3b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6D:39:03:51:EF:3E:BF:CB:3A:63:B4:EF:AE:E3:EE:81:6E:5B:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a70e4919-91fd-3abb-9727-7f51b7d45831.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.102.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:0e:25:6f:49:9d:e9:ff:1c:56:a7:b9:87:ee:db:85:79:f6:
f0:a5:77:03:e1:5b:4c:cd:68:4a:d1:fb:dc:89:8c:cb:32:4a:
56:64:47:72:01:ec:05:d1:4a:99:de:0a:91:72:9a:6f:fe:c5:
00:e6:af:e8:25:22:e4:1e:44:cc:e1:d1:d3:b6:79:d8:0b:62:
57:b9:d6:c6:35:e0:05:a2:31:ed:6f:c2:5c:aa:b3:12:79:a6:
14:09:6c:b6:8b:07:77:54:a7:2c:44:58:93:fd:27:79:ba:9d:
75:18:45:50:cf:1b:3e:40:7b:06:4f:61:eb:82:fb:c7:9a:57:
80:c3:98:9b:61:16:0d:77:4b:b8:c0:3d:19:d3:30:6e:a2:0c:
93:7b:1f:bc:33:0d:55:15:6f:df:a8:35:01:fd:2f:f5:6c:3d:
ab:0f:32:23:39:90:8d:55:3e:05:40:c4:67:5e:22:3b:ef:15:
f3:79:94:73:cf:3d:9c:0c:52:77:6d:bd:8d:c0:be:d7:30:87:
88:cf:7d:e2:88:92:ae:e7:97:37:20:0c:92:18:14:e6:38:55:
99:7c:02:18:77:4b:09:5f:af:09:b5:79:b3:7e:c5:23:0d:95:
b9:08:84:71:49:df:d4:70:8a:7c:af:cf:fd:a1:ee:74:82:c1:
41:47:8b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:48:30 2025 by rpki-client