Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/daf6d754-9472-3aad-a040-9d0581c29daa.roa
File: daf6d754-9472-3aad-a040-9d0581c29daa.roa (raw, json)
Hash identifier: XB7oNXv1cnNB0WI5t4+2IMCA4c3xA6Rr+nicsjTHqW8=
Subject key identifier: 9A:03:BE:32:26:1B:51:DD:BE:10:EF:E5:98:4E:DB:14:45:10:30:A6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E220C413F9E2F56B84C6C9300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/daf6d754-9472-3aad-a040-9d0581c29daa.roa
Signing time: Sat 04 Jun 2022 12:00:00 +0000
ROA not before: Sat 04 Jun 2022 12:00:00 +0000
ROA not after: Sun 10 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.95.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:22:0c:41:3f:9e:2f:56:b8:4c:6c:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 4 12:00:00 2022 GMT
Not After : Jul 10 04:00:00 2022 GMT
Subject: CN=f7e06867-79cc-474f-8297-95f22765002d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:af:9a:10:a0:70:8a:59:e5:74:be:1f:a9:
1a:97:a1:c4:2b:e0:28:df:f5:d8:78:9c:23:ab:f0:
6b:12:0e:ab:05:45:3d:09:40:fb:c0:e2:6f:d0:a0:
36:93:df:b3:47:b3:65:2d:16:cc:b7:40:7c:5a:a1:
7f:08:f6:da:d0:0f:35:80:67:f3:ff:b6:d7:84:0e:
7f:8a:f8:50:95:b0:82:2e:b5:10:84:37:81:c8:b3:
14:e0:b8:c0:57:27:ae:f1:4c:b1:69:9d:45:c1:b5:
e0:7a:2a:40:66:17:36:92:25:b0:34:ed:cb:fa:46:
42:cc:61:a6:ef:a0:e4:39:04:e5:11:62:62:68:1e:
57:3a:41:86:a0:5a:69:06:35:05:f6:18:60:3d:72:
83:9f:b8:13:23:6e:1e:09:d3:73:03:c9:5e:cc:22:
f3:97:18:a6:f8:96:24:85:46:49:ce:cb:49:0d:fa:
f2:80:2b:db:f1:c0:dd:83:9f:05:43:1c:f2:64:23:
b6:22:35:6e:26:87:5d:cf:32:ea:eb:93:b9:e4:0f:
27:8b:7f:99:e2:4c:87:14:84:b9:3d:3d:c8:50:a1:
77:9e:34:3d:4f:ac:2d:3f:8b:5b:90:30:9f:90:7b:
30:60:d4:c0:cc:2a:09:91:ec:95:7d:f1:40:87:97:
bb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:03:BE:32:26:1B:51:DD:BE:10:EF:E5:98:4E:DB:14:45:10:30:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/daf6d754-9472-3aad-a040-9d0581c29daa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.95.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:bd:3e:2b:7c:88:3f:36:67:97:06:8f:93:12:27:aa:2e:f8:
5a:cc:a7:43:d7:94:d3:ea:bf:7f:fd:83:bc:90:8f:b3:c0:8d:
a6:ce:ba:1a:8a:a9:75:5c:93:ae:5b:76:f2:04:3e:59:0c:42:
eb:96:65:93:b0:0d:0f:dd:4e:04:10:41:a4:c5:3f:47:b8:23:
c1:24:c6:65:eb:49:20:da:9e:43:09:23:d9:97:07:b5:19:27:
02:c5:27:69:31:cc:38:74:c0:45:89:4c:56:44:a9:bf:fc:e8:
ef:4a:d3:c5:e3:23:94:6e:08:1b:44:cd:07:c8:24:98:7e:81:
de:9b:53:c0:d1:70:13:57:cf:68:2d:84:2d:e8:10:61:a0:74:
78:2d:9d:f6:bd:c7:9d:de:c1:98:7c:21:ff:3c:3e:c6:3c:a1:
35:da:dd:e8:a7:bf:c1:53:83:c8:7b:18:19:86:fb:06:1d:d8:
22:09:41:f3:a9:10:0b:20:1c:ea:e6:ef:c7:fa:5c:fa:20:82:
37:75:33:56:9d:66:aa:f9:46:91:c3:09:db:34:94:19:62:32:
ed:76:b7:b8:09:87:b3:98:84:eb:28:3a:61:79:be:4a:27:0b:
fe:93:22:f5:21:48:32:c9:58:b3:f6:59:fe:a8:6d:20:05:71:
4a:c9:ca:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:53:58 2025 by rpki-client