Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/da3ddd88-1e5a-354d-b6ad-7d5a716f40ea.roa
File: da3ddd88-1e5a-354d-b6ad-7d5a716f40ea.roa (raw, json)
Hash identifier: nzd99z524OgHrI4p6ytnALpZzxz9aJOkjJwb/KNgVLo=
Subject key identifier: A9:CC:45:25:52:B0:D2:C4:78:35:31:B7:7A:E0:8F:F9:9D:5D:42:0A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D80D4094EC5FAE495EB628780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/da3ddd88-1e5a-354d-b6ad-7d5a716f40ea.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.198.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:d4:09:4e:c5:fa:e4:95:eb:62:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=ad1855aa-4942-45e7-9f92-ff8492da6bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ef:59:51:70:b4:50:4e:28:33:4f:72:c9:42:
9e:9e:34:e3:a1:94:3b:28:9c:6d:7c:3c:e7:4f:70:
5b:0f:89:6a:24:c9:04:6d:50:61:84:68:12:c6:5f:
07:cf:13:65:b9:c0:de:50:6e:3e:48:97:72:5c:9a:
5f:51:2a:ca:fa:dd:52:46:d5:a1:69:d6:a7:af:76:
1b:c3:c3:e5:cd:28:24:7f:f0:71:1f:ad:51:c7:b4:
ac:b0:33:2f:06:45:5b:ce:da:23:87:d2:40:dc:4b:
71:df:c0:b8:a2:2f:06:ae:14:30:cc:16:bd:62:f3:
ff:e5:cc:ca:b6:88:c4:31:ba:05:a0:fb:22:c1:0c:
45:12:fe:e9:03:6f:13:b3:9b:30:1c:ca:91:ba:66:
b3:33:32:1a:b3:b9:fc:61:0d:f0:17:9a:f5:c1:4d:
26:06:16:24:bd:88:ac:36:aa:8d:bd:b1:7b:66:5c:
5e:74:11:7c:55:6a:08:4e:2e:9f:97:ee:67:a0:d4:
b3:d6:14:44:29:e1:6d:59:6f:a6:32:51:51:d6:63:
a6:04:bc:a3:17:28:1b:8f:5b:af:79:4c:a6:cc:b4:
16:af:89:ca:f6:ed:a2:3f:3a:ef:53:04:9d:bc:11:
f0:8b:59:63:2d:3b:28:ce:63:8b:8c:73:eb:47:50:
95:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CC:45:25:52:B0:D2:C4:78:35:31:B7:7A:E0:8F:F9:9D:5D:42:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/da3ddd88-1e5a-354d-b6ad-7d5a716f40ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.198.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:20:0b:2d:5e:7b:6a:0d:9c:72:36:cb:b6:0d:bd:61:19:7f:
f4:04:70:0c:b6:3e:27:1d:d6:af:a5:b6:64:b0:41:59:27:be:
ac:2b:61:bc:fd:c4:69:82:fa:b3:c4:1d:f5:3b:ad:e9:a3:67:
96:f3:5b:86:08:a2:62:49:88:3d:2f:6c:4f:ba:83:3b:7a:47:
0f:e4:8a:53:f6:93:98:c5:93:be:99:a7:69:1e:db:77:12:1e:
21:f9:55:a4:ae:29:f6:3b:c4:42:45:b3:b4:02:3c:b8:c1:a4:
dd:7b:f4:66:54:ac:5a:d7:54:f0:8f:5c:99:77:6a:50:61:ad:
62:51:2f:50:67:80:ab:65:22:1d:65:dc:9e:9e:20:ff:e5:47:
44:4c:97:bb:0e:42:e4:17:25:c0:ae:1a:6d:be:63:3f:5a:43:
a9:b4:69:b9:8f:98:df:ae:cd:fd:8f:8d:62:00:58:bc:ca:bf:
97:af:f3:81:f6:e2:c6:51:ab:ec:7b:a1:1f:7a:fc:01:07:2f:
bd:76:c0:1e:a6:54:51:8a:71:32:a4:bd:f0:eb:2e:2d:f4:a0:
79:e5:21:7a:3f:f0:36:1b:0e:ec:0f:7d:50:c9:a6:67:09:0f:
66:81:26:64:4e:8a:40:07:94:03:84:97:cd:e1:b1:ce:e4:4a:
82:e2:e1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:26:45 2025 by rpki-client