Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d60dd78f-7242-38b0-85b2-a5cf044b9a4e.roa
File: d60dd78f-7242-38b0-85b2-a5cf044b9a4e.roa (raw, json)
Hash identifier: fsUx0YXuuUGZk91Wtx8lbqodTjhR1FmUSE9LvAhJDoA=
Subject key identifier: 11:FA:AA:40:94:FC:D6:2F:AD:CD:4B:EA:91:56:C3:08:B8:CD:CD:1C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBCE8E5D2E72A2417EEEAD920
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d60dd78f-7242-38b0-85b2-a5cf044b9a4e.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.36.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bc:e8:e5:d2:e7:2a:24:17:ee:ea:d9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=42d1ed4f-5e5d-479c-9876-0c004fff0eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:36:3f:68:bf:d9:3b:bb:15:80:49:2a:65:22:
76:a1:62:28:37:54:4d:ab:09:5d:a4:91:68:36:ca:
b7:ff:6b:e7:b9:e2:73:fe:95:5b:7b:5f:02:f9:62:
87:dc:45:5d:23:a3:3f:a8:65:d5:e5:cf:d4:66:06:
d7:31:d6:18:5c:c1:d9:9b:89:44:0d:e9:eb:e6:20:
77:f2:92:64:8c:59:ff:30:bf:df:ab:52:c7:b5:95:
87:ab:d7:e5:31:5d:74:27:2e:2d:e1:87:cd:12:e8:
d4:75:3e:d9:83:68:12:94:bb:25:09:82:38:63:59:
0f:71:bc:4e:7e:13:76:15:55:2c:24:0c:e0:5a:26:
a6:60:ca:bd:ae:64:1d:f1:c5:27:ac:6f:2a:4a:f1:
8c:ab:7e:28:eb:ff:68:58:44:a5:e3:e3:5e:1f:77:
c3:46:10:a9:78:30:51:44:67:52:0c:eb:36:8e:b5:
23:02:58:e2:f8:87:29:73:6d:f2:4e:68:0b:b1:7d:
cc:27:0b:1e:60:21:31:92:33:e7:4c:1b:42:7a:a7:
0e:ea:21:f0:dd:92:89:8a:62:ba:7e:cf:15:0b:97:
dc:9e:06:9b:b9:70:2f:99:a6:73:04:ba:e2:46:87:
6a:44:43:96:b4:98:56:5b:42:40:e8:b4:91:32:4a:
12:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FA:AA:40:94:FC:D6:2F:AD:CD:4B:EA:91:56:C3:08:B8:CD:CD:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d60dd78f-7242-38b0-85b2-a5cf044b9a4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.36.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:ce:74:96:7c:ea:18:5a:83:93:da:b2:8a:dd:f0:d8:e3:fb:
a7:6d:96:1b:c5:89:25:94:4a:1f:b4:fb:d9:62:15:6c:bd:76:
ab:4c:e7:c4:87:12:07:71:83:8b:d1:bb:c2:3d:a5:39:e7:1b:
1b:f2:a1:2e:39:ff:2f:41:e9:38:48:4e:a6:df:d2:a4:25:b6:
dc:f9:ac:5d:7a:3b:9e:ab:d6:92:7d:8b:7c:8c:ec:38:c5:ee:
8f:69:f6:4e:45:fa:de:be:40:4f:98:33:6a:bd:6e:78:ee:d1:
20:40:14:44:fe:ec:d3:4a:e5:c2:0d:48:db:42:3e:9a:24:16:
3b:0a:91:95:4e:c4:4b:ed:2d:75:e4:3e:16:e7:a5:ae:e6:4b:
07:f1:5b:53:06:09:ce:75:86:d3:7a:b0:1c:b0:ab:2d:7f:07:
b4:2f:70:fd:37:34:4d:2e:70:13:63:ff:ab:5c:47:7a:d5:fa:
31:35:29:cd:66:12:d4:f2:bc:fc:16:9a:a8:4e:64:21:3f:3e:
4f:43:2e:9f:e1:5e:17:f9:91:67:d7:92:ab:4a:0e:c7:2b:4b:
eb:f1:ed:2a:fc:79:d9:ea:0a:45:0b:61:a9:00:ba:61:e6:66:
0a:aa:9f:0b:6e:a5:2e:9d:bc:87:21:4b:a7:60:98:63:46:8c:
e5:f0:2d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:40:31 2025 by rpki-client