Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f90c4e93-9467-3330-8937-1d6096e99730.roa
File: f90c4e93-9467-3330-8937-1d6096e99730.roa (raw, json)
Hash identifier: rNRVi56cCkN8x6pBI53aKMoAHYar9u1Q90Y4Uuf709I=
Subject key identifier: E9:20:AA:4D:54:ED:11:1B:8F:47:2A:EB:86:CD:6B:2E:BE:7B:78:4C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E70212C718DC2F1DF4175AE80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f90c4e93-9467-3330-8937-1d6096e99730.roa
Signing time: Sat 02 Jul 2022 12:00:00 +0000
ROA not before: Sat 02 Jul 2022 12:00:00 +0000
ROA not after: Sun 07 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.144.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:70:21:2c:71:8d:c2:f1:df:41:75:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 2 12:00:00 2022 GMT
Not After : Aug 7 04:00:00 2022 GMT
Subject: CN=275435de-4719-49a7-9691-9cc4e65cc4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6b:7b:22:a9:4e:29:2f:95:bb:5a:ec:60:b4:
b5:e3:d7:87:97:b0:e6:90:86:b9:f6:87:d9:1d:65:
ee:a9:d2:62:5a:11:33:05:0b:d4:a1:b3:6b:e8:26:
63:5f:d1:a4:b1:84:4e:59:7e:64:56:c0:4e:30:d8:
74:80:3a:7e:1f:b8:f4:a5:e8:70:69:48:60:80:ae:
a8:88:16:b2:e6:36:63:6a:bd:8b:3c:7f:b9:1f:30:
54:5f:c2:36:7b:4e:08:2a:bf:ac:f4:88:b1:0c:4f:
6e:5f:bf:83:2a:97:38:b5:f9:a0:61:83:0f:e8:c7:
e0:3b:f9:c9:df:c4:aa:8f:b0:e7:f0:ec:e8:fd:af:
22:3c:f9:8b:fd:de:ea:40:2e:69:de:63:2e:85:7e:
1b:8d:79:d3:27:99:ff:41:89:7c:98:33:59:64:4e:
9d:9a:b4:bc:44:af:66:fe:a3:11:c8:2b:b8:87:d5:
47:6d:26:3b:79:1e:42:ef:65:b2:7e:a0:4b:e3:fa:
b9:30:55:a2:4a:b5:6f:1e:25:df:5f:4a:a9:e0:56:
b5:7d:84:66:6e:f7:33:d8:8a:76:3c:8b:67:a7:d6:
e3:d4:8d:75:c1:80:d6:be:a6:2a:03:09:d2:84:be:
de:13:2e:f2:fe:57:96:1b:12:91:bc:6b:c2:e6:94:
39:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:20:AA:4D:54:ED:11:1B:8F:47:2A:EB:86:CD:6B:2E:BE:7B:78:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f90c4e93-9467-3330-8937-1d6096e99730.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.144.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:70:52:28:86:a3:7d:c2:fa:18:79:dc:d2:94:8b:4e:3d:c3:
86:24:62:82:c1:d8:cf:90:52:fe:84:f9:c4:08:77:93:29:f3:
83:db:d4:9e:80:3b:53:74:93:81:7e:52:68:e5:22:aa:49:20:
e6:48:42:a3:df:53:77:c8:9d:3b:51:ba:29:0b:b0:7f:27:58:
20:7f:b9:ab:7a:49:3c:0e:66:76:63:fb:b7:bd:a8:42:30:75:
20:d3:92:ca:3d:ce:ef:3a:89:d7:54:3d:9f:76:20:bd:e8:be:
d2:93:a1:df:17:17:83:9b:99:9b:d4:83:a7:9e:17:a1:28:21:
54:e3:9c:48:5d:24:fd:d3:46:7e:01:17:db:34:42:6f:71:81:
9e:8d:bf:3d:2a:8b:51:78:0b:a1:ed:ef:b5:1d:4e:43:da:dd:
58:d7:4b:74:32:bd:c1:fc:82:74:19:ed:41:ef:dd:23:3a:3a:
bf:57:5e:65:ce:c0:59:19:b9:a2:08:89:35:67:2c:8b:76:75:
c7:da:16:f0:0a:ce:25:c0:88:da:d9:aa:b3:d1:4c:8f:dc:b5:
5c:f4:fd:3f:b9:13:9f:23:bb:e3:bc:e1:a9:63:39:43:eb:ae:
23:02:06:13:5a:9b:0d:9e:79:66:36:d2:41:e8:46:de:65:c5:
4d:fb:2d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:10:21 2025 by rpki-client