Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b80b5201-6381-349a-8a9c-88f176430203.roa
File: b80b5201-6381-349a-8a9c-88f176430203.roa (raw, json)
Hash identifier: T1ykwmTPkCEHxhR7oVAEbz3Rdu/fr2cSDFZ6TI8yLsQ=
Subject key identifier: A4:C8:02:83:50:01:E0:71:FE:D2:49:68:8B:C7:60:7F:AE:81:25:5A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DFAD91385F8AA36114F9FC0A2
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b80b5201-6381-349a-8a9c-88f176430203.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.128.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:fa:d9:13:85:f8:aa:36:11:4f:9f:c0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=3598c1b3-3e88-457e-bbb5-57bb17ed302d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:51:7b:21:33:84:4a:ef:37:e5:40:8e:b5:f3:
9d:29:8a:12:00:31:1c:18:3d:8f:aa:96:8d:d3:49:
d5:ca:bd:e0:51:88:3a:4c:e8:b5:be:cd:da:18:df:
4f:5a:43:9a:16:92:5b:c3:df:d4:84:9e:e5:76:e3:
b7:9a:ce:db:3f:7c:26:a1:cb:03:b6:de:5c:10:af:
f8:cd:3b:5d:50:f9:7d:bd:dc:e6:db:6d:d5:2b:1d:
6a:47:aa:11:e8:c3:0e:75:af:0e:9b:aa:59:2f:9b:
c5:32:1d:6c:93:84:ad:31:ba:dd:a6:24:cc:ec:57:
ec:0e:c5:13:60:2b:7f:24:c4:11:9a:40:fc:74:f0:
41:b4:4d:6a:7a:c4:2e:39:64:9f:4b:55:95:24:cd:
f4:b5:e9:77:8f:d1:cf:a2:18:33:72:e7:4c:c5:3e:
dd:f4:68:b1:8d:c0:61:dd:d3:7a:23:48:20:3e:04:
4e:36:35:0e:9b:69:5c:f3:cd:e2:f3:de:ca:6b:ae:
90:ad:5d:de:74:97:c6:56:bb:df:f3:1f:1b:89:7e:
88:2e:d7:fc:7f:5f:12:a4:08:63:dc:9a:85:e0:60:
bd:16:30:4c:54:15:ab:01:93:8b:4b:a0:51:83:a6:
04:f7:b8:c2:2f:bd:60:39:2d:1a:57:33:35:29:f7:
44:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C8:02:83:50:01:E0:71:FE:D2:49:68:8B:C7:60:7F:AE:81:25:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b80b5201-6381-349a-8a9c-88f176430203.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.128.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:c0:77:b8:6c:37:38:58:c3:38:2b:82:95:42:e5:f9:ae:32:
5d:9f:a0:ce:34:ec:66:62:57:c2:d0:b5:5d:92:b7:e0:93:fe:
34:b0:ff:63:5e:36:fd:4d:cc:68:65:e5:16:83:f5:d3:84:7d:
9d:13:5a:bf:29:2c:0c:79:67:13:fd:72:eb:3c:71:18:5d:92:
69:06:ca:9e:8f:f7:4f:ef:c5:b4:bc:4a:30:89:50:8a:8d:a1:
c4:86:8e:b4:40:10:b3:87:e4:0a:d2:89:dc:0a:d8:ef:07:ea:
ac:67:d2:84:8e:aa:d5:df:90:16:f8:d3:f7:a0:1b:53:86:86:
17:84:a2:5a:66:a0:11:49:b2:87:6f:45:f9:f4:64:64:68:54:
b5:ce:e6:80:66:3d:60:4c:85:f7:ac:75:0b:f6:a0:a0:44:1d:
e4:27:ee:1a:a9:cb:6a:ea:89:5d:69:b0:cd:59:7b:7c:a9:74:
40:82:ec:15:b3:f8:8f:92:52:be:7e:38:3a:de:98:45:3a:9c:
5c:b4:24:06:dd:1a:0d:0d:30:ea:ed:fc:58:41:ec:e2:d0:c8:
83:8e:35:9b:70:1d:e6:7f:8c:81:01:c5:d2:9e:e6:7a:53:ca:
30:13:b4:d5:fd:8b:3e:70:74:0b:75:6c:9a:28:85:00:ed:4d:
50:c8:f1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:23:39 2025 by rpki-client