Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b90057a3-ac2d-3f1d-af2d-8d7102c1d67e.roa
File: b90057a3-ac2d-3f1d-af2d-8d7102c1d67e.roa (raw, json)
Hash identifier: RhKzwgXQ4QN4ZGRnz0UB1e4JNo4aVhefE6eLjsUJ4rE=
Subject key identifier: A5:F8:66:2D:25:F1:9A:2F:00:EA:94:01:AE:FF:7C:64:32:F6:BD:5D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE4CCFB76B9AC8DD5F71AC700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b90057a3-ac2d-3f1d-af2d-8d7102c1d67e.roa
Signing time: Fri 12 Aug 2022 12:00:00 +0000
ROA not before: Fri 12 Aug 2022 12:00:00 +0000
ROA not after: Sat 17 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.220.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e4:cc:fb:76:b9:ac:8d:d5:f7:1a:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 12 12:00:00 2022 GMT
Not After : Sep 17 04:00:00 2022 GMT
Subject: CN=3b150c90-be97-45df-b170-5c228eb114d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:9c:21:da:7a:e0:6e:d0:2b:83:77:bd:f2:
a7:4e:7d:a7:17:c6:7f:3f:10:92:f8:e3:bf:69:f4:
91:72:3b:80:77:09:96:40:b3:d2:2d:5c:9e:ef:b6:
28:0f:f2:c5:8c:bf:a1:b3:53:74:9b:e9:3d:47:3b:
73:a3:57:62:91:aa:fa:b4:0a:6c:11:36:76:25:ff:
48:45:93:92:c9:e2:a6:c5:b1:23:21:bf:b8:14:02:
7c:7c:f6:b2:00:7b:af:2e:a9:7e:cf:4c:23:88:19:
01:73:20:bd:96:bc:64:60:9c:6c:72:b7:73:c6:6d:
8b:f8:32:a1:b2:8d:95:1a:92:6b:79:94:51:75:7f:
ce:5f:2d:73:8f:cf:67:5d:62:e6:c7:aa:54:b9:6b:
5c:99:49:5d:67:09:ee:ed:b3:70:bc:d3:00:f8:cf:
cf:c4:16:e0:03:af:2e:e8:a2:a3:41:9e:86:ee:c3:
a7:89:bc:18:06:ed:1f:eb:64:57:04:3e:d6:66:f3:
4b:e6:01:1b:b0:57:22:57:d0:de:65:60:95:75:38:
53:b1:03:dc:67:33:25:f3:73:4b:5c:d8:13:ff:20:
1a:ba:4e:8e:1e:65:8e:7d:b6:4d:39:f5:a7:c5:4f:
c2:c3:8a:a3:19:63:55:16:ef:f7:b9:f9:45:5a:d0:
f5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F8:66:2D:25:F1:9A:2F:00:EA:94:01:AE:FF:7C:64:32:F6:BD:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b90057a3-ac2d-3f1d-af2d-8d7102c1d67e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.220.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:0b:3f:06:a8:5f:b4:0d:8a:75:61:8a:24:42:a1:52:63:a4:
69:68:fb:40:23:b7:1b:c8:94:b1:6e:21:ee:67:05:c2:0c:64:
a3:84:74:fd:ad:8b:f9:55:86:aa:08:f6:f2:f2:bb:8b:75:51:
40:d3:4d:35:47:39:33:a4:72:a2:04:19:e7:d0:45:f7:2a:9a:
3f:cf:ff:86:6e:e3:6e:b3:f6:0a:10:16:34:62:7e:e6:b5:ba:
bb:15:f1:14:00:18:e0:68:2f:6a:7e:fd:e5:72:3c:d9:a8:81:
20:9b:4a:23:d9:9e:be:98:d2:3a:43:22:1d:ff:8c:98:88:f0:
05:96:ee:98:24:32:b4:99:17:09:ba:67:be:b7:87:9c:6d:e1:
13:a9:f5:ed:73:d8:93:c3:39:c7:8e:84:ec:76:4e:23:b8:d0:
13:45:f2:e3:7f:65:e7:7f:26:c8:28:46:d0:de:b4:eb:12:f9:
07:17:8f:93:88:21:41:9d:55:8f:89:ea:21:80:d5:0f:77:21:
bd:aa:1d:a6:77:e4:99:f1:ca:47:17:e0:33:b6:62:46:7b:6b:
91:b8:8f:88:4b:b6:e1:aa:0a:f8:d6:bf:30:d4:97:28:32:b2:
02:f4:4a:ac:63:62:22:b5:4d:3a:63:36:95:41:e7:68:dd:1b:
cd:6a:76:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:03:30 2025 by rpki-client