Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cfe170ec-37c3-3058-9067-cb8b86fb09b6.roa
File: cfe170ec-37c3-3058-9067-cb8b86fb09b6.roa (raw, json)
Hash identifier: B3+dS7uuHTie2+6pFnoVitWJsZhIOUGpjemHdTplTVA=
Subject key identifier: 45:61:02:51:8A:73:45:12:FB:9F:B1:63:0D:FF:9F:A2:1E:E8:91:83
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C95F9AAF8886D699DE40CA600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cfe170ec-37c3-3058-9067-cb8b86fb09b6.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.128.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:95:f9:aa:f8:88:6d:69:9d:e4:0c:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=da624c66-6292-41ca-a856-224011f9155d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:df:c4:f9:2f:e4:15:ec:6e:37:a2:dd:15:0a:
a1:6d:73:b3:fc:90:95:07:b5:c4:95:44:93:42:f8:
b4:47:af:42:9c:13:d1:93:fc:04:15:dc:20:c5:f8:
87:bd:c2:0c:6b:8c:74:5b:bd:7d:de:00:fb:11:c1:
96:95:21:23:81:e7:9c:e5:08:5d:88:75:97:29:f4:
9d:ac:dd:3c:9f:7b:94:fd:c8:6b:e6:4c:77:1a:a3:
ed:0d:1f:20:57:62:39:2e:17:d7:85:a1:f4:d6:0d:
39:63:13:95:aa:89:1c:b1:a2:4d:e2:26:64:9e:76:
62:23:c7:ec:b0:6f:cc:bc:ae:9b:80:bc:d5:a2:50:
8e:fb:3b:a4:b0:7d:84:9e:30:bd:9c:b5:b6:81:a6:
d1:65:40:3b:2a:b5:91:d5:4f:44:d5:1a:ce:34:6d:
ec:81:4b:c3:cd:aa:a1:5e:cf:3e:e8:9d:bb:bd:d0:
9f:a9:fb:f5:99:2f:02:fe:c1:3a:f9:53:35:89:96:
52:7b:52:8d:1d:4c:b5:15:4f:db:1e:0e:d9:12:2e:
06:fc:ea:ef:af:97:3b:6a:80:0f:66:2e:c5:5e:4f:
d2:a1:bc:ca:ce:ac:a9:89:4c:a3:fb:ac:61:61:a9:
ec:a5:22:70:7b:8f:79:36:3f:d4:ee:fa:f3:2f:ed:
4b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:61:02:51:8A:73:45:12:FB:9F:B1:63:0D:FF:9F:A2:1E:E8:91:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cfe170ec-37c3-3058-9067-cb8b86fb09b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.128.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:7d:d6:a4:81:aa:35:41:eb:32:71:46:16:41:df:7e:a1:07:
3d:54:da:20:92:57:50:59:5b:38:ab:50:bf:84:44:03:e1:b1:
44:ce:3d:10:1d:62:27:3f:4e:ea:e9:61:09:3d:5e:bf:fa:43:
13:47:72:50:3e:df:4a:f4:6b:e7:a1:f6:61:3a:73:ab:73:3c:
9d:c7:04:ef:12:74:b6:fb:d1:d4:77:d5:e0:df:04:c8:53:b5:
a8:de:9f:ab:8e:11:5b:2f:4f:6b:88:1f:36:bb:ff:b8:59:a7:
1b:2d:92:9f:b6:69:2b:18:80:3e:ae:e8:34:c2:e3:2a:b1:bf:
5b:71:02:b3:80:86:1a:e9:6a:d2:56:d7:a7:b1:fb:a0:dc:a6:
ee:19:b2:06:c2:10:97:7e:26:0b:d2:02:35:e6:52:53:7f:c8:
ad:7d:36:88:c3:36:fd:38:9c:09:cb:bc:40:ad:83:fe:c5:0c:
fa:0e:91:42:6c:61:09:92:3b:0c:9d:dc:0d:91:a2:fb:6f:f9:
d0:ff:d7:33:58:26:4e:46:58:ca:63:b0:35:da:05:bb:48:45:
0b:73:13:9c:4e:db:d5:81:23:25:73:3f:28:16:c6:3a:74:df:
dc:94:16:03:b7:c0:be:34:54:d9:82:b7:c6:58:36:9b:9c:18:
dd:15:d4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:48:46 2025 by rpki-client