Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d021f6f9-0541-3799-b1f6-052994db1fb8.roa
File: d021f6f9-0541-3799-b1f6-052994db1fb8.roa (raw, json)
Hash identifier: tGV0TbNPsFG38H+nBY4XnmYD78a7U+/ruud7CklhHYc=
Subject key identifier: 2B:81:87:38:34:50:E9:3D:C2:BD:E5:CB:FC:C5:D7:69:0A:A3:24:EB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA9FF22916AF30D942C88FB00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d021f6f9-0541-3799-b1f6-052994db1fb8.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.128.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a9:ff:22:91:6a:f3:0d:94:2c:88:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=f53f124a-65dc-4233-b593-9283c4fc5d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:71:0e:b7:17:a1:fe:db:66:cd:25:cf:d6:90:
2c:cf:60:65:6d:28:5e:06:b4:c3:bc:ae:d6:6a:53:
e7:bd:de:15:35:e9:92:3a:15:ac:00:7e:24:cd:6f:
a5:6d:2e:42:57:49:01:56:21:34:b5:5f:65:80:8e:
58:e4:cd:bb:4b:d2:ad:54:63:dc:04:99:8d:8b:f1:
a7:ba:69:ff:47:2f:db:4c:de:a6:d9:45:79:85:7e:
44:56:8f:b8:e0:ff:45:4f:c4:2a:e4:54:3a:f6:85:
f4:cb:25:c9:6f:fa:f7:46:32:44:bd:44:dd:db:45:
08:3e:d7:91:f4:d6:0c:27:f6:6f:46:a9:71:6d:b0:
a5:40:2c:5b:45:33:16:38:36:8e:ed:7e:e1:e6:aa:
90:71:cb:34:bd:d0:fb:da:59:81:c6:92:31:2c:66:
96:9b:a3:af:3d:4d:0c:6f:f3:1c:7f:43:2f:d7:ed:
bf:63:86:f5:83:f6:72:08:b5:bc:90:4e:fe:0a:95:
d5:3f:9b:8d:54:b2:93:42:06:3f:80:cc:a1:69:83:
fb:30:50:81:7c:f6:6f:9d:8c:24:69:19:41:fb:d7:
7b:42:43:e5:6f:aa:f9:c7:49:65:13:07:b7:1d:b3:
35:73:75:f9:b4:f6:fe:1e:5e:b3:50:2c:d4:f9:ff:
d2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:81:87:38:34:50:E9:3D:C2:BD:E5:CB:FC:C5:D7:69:0A:A3:24:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d021f6f9-0541-3799-b1f6-052994db1fb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.128.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:aa:cf:3b:f4:cf:dd:e8:c6:51:e1:76:18:47:0a:8c:82:a6:
47:b5:46:84:76:83:c4:0a:aa:c2:ed:28:e9:f0:bc:30:9c:8f:
c8:48:33:43:9d:42:5a:ae:a6:4d:02:ba:7e:80:21:60:4e:0c:
11:9c:12:71:01:f0:69:32:bf:53:ef:1e:f0:0b:39:e9:3a:47:
ff:b8:0e:ec:9f:0b:61:48:c1:ee:ee:ba:30:40:07:af:56:63:
fb:44:c0:bf:8e:81:96:61:ca:7d:34:d0:5c:5f:72:d4:58:c1:
ef:0b:c7:f3:ef:f4:46:7c:bc:b3:8f:13:12:0e:58:89:66:62:
f4:a3:32:3b:35:19:47:fa:ba:ba:66:25:d5:bb:77:82:80:10:
fe:31:77:d8:a4:c9:b9:5e:0d:6f:0e:70:1d:a9:73:46:7c:27:
25:51:4f:10:76:0d:98:8e:dd:8c:cb:5b:98:94:2d:9e:db:25:
03:c7:95:0f:16:d2:87:da:13:32:0d:60:fb:28:a4:c0:35:4a:
dd:8f:ac:31:db:48:45:89:63:13:b4:26:7c:65:a8:62:ff:bb:
84:7c:52:10:68:a2:9d:90:1a:4d:74:7a:e4:7d:24:72:e5:78:
27:83:25:0f:cc:2f:97:e2:20:10:9e:5b:64:63:39:64:83:98:
25:f6:29:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:42:32 2025 by rpki-client