Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e64360ef-6ab4-3386-8c21-c200205f8e30.roa
File: e64360ef-6ab4-3386-8c21-c200205f8e30.roa (raw, json)
Hash identifier: 2N3vUkQtgHzm63363vjOf64RKrQuLEO1zW8EI6k67tk=
Subject key identifier: A5:E5:64:3A:C1:9C:F5:3E:F5:A8:FB:D9:21:04:D3:8E:48:0A:20:8B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD0E667E4DDC7FD4C4F7E480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e64360ef-6ab4-3386-8c21-c200205f8e30.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.96.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:0e:66:7e:4d:dc:7f:d4:c4:f7:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=453601a5-41b7-4a77-9a36-287ae7a32ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fb:e0:41:f3:28:ad:52:22:e9:31:82:a2:25:
ea:06:ec:5d:2e:b0:05:19:13:54:63:1b:c0:5f:a4:
7f:d4:59:6f:f2:d4:3d:21:03:e9:0d:85:4f:d5:0c:
60:da:d0:f0:56:77:c0:20:5b:db:9d:b9:0e:b9:41:
af:2b:09:9d:7b:cd:06:f1:59:c4:d8:bd:b9:9f:1e:
4a:f9:ee:62:2c:7c:f1:36:63:eb:17:02:84:da:87:
86:bc:c0:86:59:de:93:30:d2:d1:20:f6:1f:4f:05:
df:9e:d0:f2:8c:32:ce:e0:85:e8:9f:42:ff:5a:20:
53:90:fa:6c:41:20:3c:ea:27:a1:97:e4:a5:fc:e9:
c4:e1:79:87:7b:64:1a:6c:31:79:fc:7e:1b:a8:c3:
2b:15:52:73:90:96:8c:8a:d5:71:62:7d:00:1c:a4:
26:5d:40:c4:c3:ea:9a:2d:69:66:79:b2:00:82:42:
64:6f:e2:18:35:4a:9b:c7:30:4b:40:a4:11:e3:09:
2a:3f:51:32:99:25:b1:09:d8:63:ae:21:f4:a0:5c:
8b:a8:a7:70:9f:3a:f8:5d:2e:93:b2:cd:9e:5d:4d:
19:f3:f4:6b:0b:e8:c5:17:41:88:f3:ba:3d:54:5a:
0e:4e:f9:21:cf:4a:23:a0:d2:da:ef:2b:f9:f2:15:
e2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E5:64:3A:C1:9C:F5:3E:F5:A8:FB:D9:21:04:D3:8E:48:0A:20:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e64360ef-6ab4-3386-8c21-c200205f8e30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.96.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:2f:3d:d2:a6:75:72:76:09:69:bd:bb:ae:26:ea:5e:45:5f:
fc:3c:f7:33:e2:7a:c9:de:61:90:6a:0b:c2:e5:2f:89:cf:87:
75:04:65:c4:82:72:e9:d2:e9:ca:26:63:1d:08:aa:bf:3e:fe:
1a:e5:a8:99:81:ee:16:22:95:df:fd:2e:77:b2:2a:62:f9:2d:
a1:5f:e2:ca:da:70:0f:d8:75:0c:c7:42:08:85:af:cd:8b:ac:
8f:c7:27:8c:f1:b0:47:e8:10:0e:db:54:ab:e4:40:3c:d6:c1:
90:fd:5b:99:03:46:d1:e8:50:5a:3b:0f:b8:67:93:ea:18:51:
91:29:fa:b3:12:c6:30:be:1c:6f:4d:87:76:7f:91:d7:71:9b:
7d:c0:52:71:27:4a:bf:44:2c:a6:fd:a6:4f:7b:43:6a:4b:0c:
80:88:f8:e4:fa:ea:0a:7c:63:23:e0:76:89:16:68:8d:09:67:
f4:e5:0a:77:fd:34:05:f5:f0:c1:ee:b8:37:4c:d3:76:c4:c2:
e4:73:c0:a0:48:05:46:58:dc:9f:29:90:2c:6d:9e:39:dc:ae:
a7:6a:70:80:4b:c9:72:37:3c:d3:1f:8e:63:47:ca:d5:51:53:
c1:bf:46:13:17:d0:8b:61:04:d6:78:e3:87:a1:12:19:01:30:
b0:2f:64:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:07:28 2025 by rpki-client