Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e1ae4509-b1cf-3590-9390-f952c6cf7e3d.roa
File: e1ae4509-b1cf-3590-9390-f952c6cf7e3d.roa (raw, json)
Hash identifier: Kdnb8o+PfNbU9VsMvI/GTMVvd7utj5Jgidbrd3SGK8k=
Subject key identifier: 71:46:D5:4A:E2:50:E5:56:99:19:CE:34:D6:D8:DE:79:6A:CF:8C:9B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E21EE7A88C712959037A53780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e1ae4509-b1cf-3590-9390-f952c6cf7e3d.roa
Signing time: Fri 03 Jun 2022 12:00:00 +0000
ROA not before: Fri 03 Jun 2022 12:00:00 +0000
ROA not after: Sat 09 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.136.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:21:ee:7a:88:c7:12:95:90:37:a5:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 3 12:00:00 2022 GMT
Not After : Jul 9 04:00:00 2022 GMT
Subject: CN=bdd60b47-75f9-4079-ad51-209ff30930d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:80:3a:ea:28:4a:27:3a:ef:b3:77:33:1a:
b6:5e:e1:92:06:38:9f:48:46:91:d6:3e:24:7b:3f:
5f:f0:ba:9f:76:86:a3:3b:ab:73:2e:3e:9a:f4:06:
6b:d9:07:22:0f:6c:05:9a:f1:ed:17:de:39:18:b6:
e0:e7:75:94:c4:87:4c:03:d9:47:ba:db:2f:a5:7a:
31:60:7b:97:a4:17:cf:ab:fe:37:b0:25:cb:fa:d5:
df:13:59:11:7f:6d:02:f1:ec:e3:75:87:cf:30:29:
53:da:d4:47:9d:01:7f:2a:3a:81:4b:a0:89:6d:5c:
62:0b:d5:7c:4f:b3:68:3c:3c:b2:f3:a4:e7:23:d4:
0f:d4:8f:c7:63:4e:e7:be:31:89:53:b7:1c:ad:17:
06:b0:6f:5f:ee:39:42:6c:e7:59:4e:8e:d1:12:6c:
73:44:36:e4:99:d8:37:ff:82:9e:a4:07:d1:5f:87:
fb:ce:e0:e7:28:e0:bf:7c:57:cf:c4:a0:43:ce:a1:
96:ca:2d:ad:d9:06:31:b7:09:cb:7c:ae:b7:af:55:
3f:45:8c:eb:ac:6e:6c:bf:fa:d2:70:ed:01:c8:d4:
b4:17:6c:10:df:01:a2:79:a4:bf:02:5d:dc:94:da:
d3:59:11:f1:62:6e:97:09:2f:85:c3:cc:a1:65:00:
b4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:46:D5:4A:E2:50:E5:56:99:19:CE:34:D6:D8:DE:79:6A:CF:8C:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e1ae4509-b1cf-3590-9390-f952c6cf7e3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.136.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:f7:84:9f:49:b1:ba:79:90:2d:50:6f:96:27:13:e3:fe:ad:
5b:69:88:72:8e:39:60:d2:02:f1:ae:2c:c2:bc:9d:30:c7:bd:
c1:ab:88:e5:f4:db:10:3a:a0:f7:50:8f:a5:d2:49:b7:3a:61:
61:c9:e8:5b:0c:42:b4:c3:93:61:9f:f7:b5:42:32:1a:a2:69:
2d:3f:ac:0f:8f:ee:4d:9d:40:d8:34:b1:26:73:35:12:5e:1c:
9c:30:80:3f:10:11:47:ef:0b:6e:53:31:fc:56:d3:22:90:fe:
93:77:e3:1b:2e:bf:93:4c:44:43:5b:05:87:b5:84:d8:b2:48:
a7:de:80:8d:ba:5c:67:1a:78:8b:74:f5:52:9d:da:aa:7f:07:
3e:0c:c4:87:c8:d8:2a:0a:8f:31:49:ee:d3:d7:e7:76:05:c0:
20:e9:53:26:af:ef:a6:a9:5c:df:df:b0:5a:e2:54:c7:53:e4:
33:b9:af:6d:d8:de:96:6e:e8:13:74:76:9f:19:c9:cf:cb:8d:
e3:7e:c5:c7:07:0a:72:57:8d:28:0d:75:0f:86:b3:47:d7:a7:
f7:4a:7f:f9:3d:58:86:c4:d9:79:64:ca:fd:40:3a:26:8c:30:
54:90:43:e4:c4:f7:f4:9b:11:f1:e1:80:2b:ab:3a:5a:75:84:
3c:5e:31:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:51:22 2025 by rpki-client