Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4776cad-d592-3f23-a684-327c98fdc1c4.roa
File: d4776cad-d592-3f23-a684-327c98fdc1c4.roa (raw, json)
Hash identifier: XH/PK6GYzVtn5lvCKVVNAabrxJoK9H4tw7uPhDDNRn0=
Subject key identifier: B6:E7:96:76:8F:12:FE:D3:F3:F0:A9:B8:B9:CF:F2:18:2C:BE:1F:12
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F33B2606C896F00EEEF9361E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4776cad-d592-3f23-a684-327c98fdc1c4.roa
Signing time: Sat 10 Sep 2022 12:00:00 +0000
ROA not before: Sat 10 Sep 2022 12:00:00 +0000
ROA not after: Sun 16 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.144.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:33:b2:60:6c:89:6f:00:ee:ef:93:61:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 10 12:00:00 2022 GMT
Not After : Oct 16 04:00:00 2022 GMT
Subject: CN=5d7f3e68-c9f0-499b-8b5c-49ca9350d6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8c:75:ea:3b:6a:0c:94:a2:aa:83:c7:47:e7:
4b:c5:a7:16:ec:d4:c6:c7:4b:80:3b:96:d5:c3:59:
ea:63:69:9d:7a:b1:b7:e3:27:03:3a:8f:69:fd:3d:
75:92:0f:3c:12:fa:3a:fd:8d:ab:d9:26:14:24:56:
61:3f:43:5f:5c:ec:6c:4a:a3:3d:75:da:49:ec:77:
69:b1:2c:66:f8:c1:6a:9f:d3:e0:65:08:2f:42:56:
d1:0d:3c:5a:23:6c:6a:b4:5e:2c:3f:58:69:d9:40:
3b:7d:ba:05:8c:9c:77:82:88:fa:f2:24:96:b8:b6:
a2:fe:e9:60:e2:46:80:24:96:85:6b:0f:d4:fe:9d:
fe:36:21:71:1d:b5:32:dd:7a:06:ad:6f:16:9f:34:
a8:a7:58:01:23:6e:19:fa:19:7c:7f:78:5e:9b:0f:
e0:67:7e:b3:33:b3:f3:60:fa:f6:15:39:14:a6:43:
65:7e:82:fb:4d:3d:73:39:41:77:c6:38:1a:21:32:
7b:44:e5:d3:74:51:69:51:bc:ac:87:90:0b:6a:60:
5b:4c:01:3e:0d:2d:4f:d5:83:c7:4c:cd:81:07:5a:
9f:85:92:d3:1e:d1:d2:97:3c:a5:37:a8:48:6f:a5:
54:63:2e:79:5f:50:c3:04:fd:d6:56:40:f5:2b:73:
85:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E7:96:76:8F:12:FE:D3:F3:F0:A9:B8:B9:CF:F2:18:2C:BE:1F:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4776cad-d592-3f23-a684-327c98fdc1c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.144.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:07:8d:c8:76:e3:70:5a:51:39:26:4c:9d:55:6d:46:20:6b:
eb:61:79:bc:a6:93:30:7e:d9:e5:a8:5d:87:3d:c1:68:dd:b6:
75:47:06:58:1b:59:4e:ba:a5:09:10:f1:f8:78:d9:ff:e0:4a:
80:29:68:c8:56:c1:f6:8c:87:a1:52:1f:61:c6:4b:08:e5:90:
a7:88:2e:08:f3:6f:ea:79:14:cb:6a:f8:57:ad:18:f2:20:80:
63:f5:40:f9:ac:25:13:3c:bb:5e:5c:c6:a7:c3:bb:11:61:ad:
04:7b:8e:88:e7:2f:22:20:ce:56:a3:f8:0e:80:df:e4:e2:c8:
95:d5:ff:c0:6f:53:cc:89:44:e7:9a:0b:30:36:61:e8:25:51:
8e:ca:15:ea:c6:8f:e6:ce:89:d4:17:21:17:b5:19:af:53:3d:
f4:00:8a:65:d3:98:03:e3:57:50:7c:d2:d3:6b:0c:ea:87:1d:
65:3d:07:dc:8f:cf:2f:62:6f:c1:90:a6:b9:4e:c2:10:57:8f:
46:3b:b5:49:97:e5:e3:26:b5:c8:9b:92:ac:4a:c8:3d:98:60:
79:13:8a:7e:30:fe:ef:54:73:3a:4e:9b:78:1d:c9:34:47:3e:
28:93:8c:f7:02:e8:b6:d4:d1:80:64:35:47:f6:95:54:32:dd:
23:57:e7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:43:45 2025 by rpki-client