Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d60c98fc-05a6-34cd-be4e-bede2d02b878.roa
File: d60c98fc-05a6-34cd-be4e-bede2d02b878.roa (raw, json)
Hash identifier: eOp/iKL0aQQB+qTg2q2PHcDuWJX7TQCmN+xvpfO1lus=
Subject key identifier: 58:E3:C2:5E:AC:18:63:5A:38:AC:00:71:8F:3E:EA:C8:77:E6:E8:1D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D8089EC834CBF9F1DCC998480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d60c98fc-05a6-34cd-be4e-bede2d02b878.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.80.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:89:ec:83:4c:bf:9f:1d:cc:99:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=ab4b6710-3baf-4b77-aa12-ece9834e9f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:a6:5f:15:3b:9f:0d:6c:d9:bf:3b:53:3e:
67:ce:59:88:0d:0c:64:7f:b0:a9:de:40:1c:60:ad:
3e:50:f0:9e:34:63:da:8e:8b:a2:a1:15:02:74:26:
a7:99:71:47:70:e1:f0:a5:52:52:c6:85:bd:d9:f3:
72:ef:e6:45:61:06:2f:e3:a4:6e:fa:c9:8d:77:35:
de:bb:b7:3c:c8:1b:c0:7e:e5:41:ed:1b:87:dc:63:
9b:e2:ba:e2:71:dc:6a:0c:7c:ed:7a:54:90:b1:f9:
33:b3:85:9c:3e:43:db:94:24:2b:8e:80:c7:1b:ba:
01:ce:69:e6:b9:8e:39:75:41:86:6f:87:aa:cf:59:
17:bf:3b:ec:d1:e6:f6:c7:f3:05:55:38:18:cb:9a:
4d:78:df:f5:43:36:5f:ca:fb:1f:d7:88:a5:82:a8:
73:48:65:ff:7a:16:81:87:14:5f:86:9a:7b:bc:88:
ab:97:b6:3e:19:af:60:59:2a:35:0e:28:97:c6:10:
76:01:4b:26:f9:1f:0c:43:b3:46:8e:20:11:f7:9f:
cb:1f:09:a0:44:5d:d9:65:9f:a9:b1:80:37:63:a8:
cc:76:6d:63:c9:86:37:b8:97:28:9f:99:6a:9f:37:
8c:1b:4f:ac:f4:d0:56:ce:a8:e1:b4:fa:33:11:97:
53:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E3:C2:5E:AC:18:63:5A:38:AC:00:71:8F:3E:EA:C8:77:E6:E8:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d60c98fc-05a6-34cd-be4e-bede2d02b878.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.80.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:31:7a:0d:b4:79:3a:c3:ab:46:28:a5:12:a8:72:ff:31:f5:
9b:e9:71:82:a9:a2:d1:8d:54:61:9d:52:ee:24:25:7c:fb:1e:
1a:df:42:c3:72:75:62:ac:db:50:83:22:ae:8d:12:4d:84:22:
61:de:2b:6a:af:fc:7d:22:6c:1a:6d:3d:19:ae:ff:69:dc:55:
5e:d1:9a:e3:e7:cb:1d:75:d7:0f:fe:ff:9a:d7:ad:46:be:25:
54:4f:64:29:27:ef:48:ea:7d:b6:92:90:9a:c2:9c:fd:eb:62:
a0:e3:26:9f:f0:c4:c8:7c:b3:06:6c:41:ed:20:4e:c9:fb:4f:
14:5f:b5:40:33:8b:fa:07:4a:28:49:50:ba:02:1f:39:40:f9:
1e:d1:e9:e3:41:1e:8e:61:9f:32:5d:be:29:77:58:72:c7:5d:
6f:24:1f:a3:cb:eb:c6:98:a9:88:30:d9:69:69:66:0a:95:ec:
aa:48:4d:0e:ba:76:55:67:2f:d5:12:7c:bd:63:3f:59:f2:6d:
ba:f5:19:a3:91:c1:44:3f:18:b4:d5:f9:fe:1c:7f:2a:5e:b9:
f0:da:56:d3:e8:87:8d:63:1c:99:78:8b:88:25:b2:5e:98:9e:
93:c1:ed:0a:4c:f0:21:cb:95:96:97:47:b2:06:8c:75:34:b2:
fb:8e:1e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:26:28 2025 by rpki-client