Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f94baf49-fbcc-3102-8297-477e3c4f8eaf.roa
File: f94baf49-fbcc-3102-8297-477e3c4f8eaf.roa (raw, json)
Hash identifier: fL+LYtvxHufHr140bIlhpDTbwbMNUAfaWBwXaRSg+fc=
Subject key identifier: EE:82:2E:43:03:9C:F7:CB:E8:DC:5D:CE:A5:B1:67:98:4C:AB:8E:2B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DACA651D0118EEBBAC2111000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f94baf49-fbcc-3102-8297-477e3c4f8eaf.roa
Signing time: Fri 22 Apr 2022 12:00:00 +0000
ROA not before: Fri 22 Apr 2022 12:00:00 +0000
ROA not after: Sat 28 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.120.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ac:a6:51:d0:11:8e:eb:ba:c2:11:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 22 12:00:00 2022 GMT
Not After : May 28 04:00:00 2022 GMT
Subject: CN=ea64d428-d292-4450-bf2a-0c5c9af752f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0c:c9:80:dd:73:10:69:52:68:fe:d7:1a:d5:
9a:06:a5:34:5b:d1:64:49:30:93:ab:42:77:89:6a:
d0:d7:b5:18:ca:c6:52:01:a0:09:26:d3:af:68:ee:
b8:37:9e:6d:81:be:9e:e3:9e:86:b8:7f:31:f2:ee:
c9:6c:d4:a4:6a:e0:c6:c1:b1:8c:0d:b3:2a:78:27:
9f:a2:48:96:f0:1e:93:18:81:ab:33:0b:ad:64:85:
86:ae:8c:09:c9:35:19:4e:22:60:3b:e7:54:51:f7:
80:89:e9:31:5a:83:26:b4:d0:10:ff:1b:ea:d7:45:
45:97:33:98:aa:5e:09:4b:8e:bf:a1:5c:ce:2b:ac:
d0:9f:e4:90:17:c5:e5:13:34:cf:80:dd:aa:ed:bb:
f7:73:75:1e:6d:c7:66:37:75:7d:22:d3:2e:ad:93:
a4:11:7e:a0:e1:fe:76:aa:cb:52:a6:12:04:7a:fd:
e0:8f:be:a8:f7:93:7d:29:58:3f:a0:09:2a:76:b2:
8f:71:dc:ed:c9:1e:b8:80:8b:68:bd:3c:b3:30:1f:
5a:70:f9:05:93:b5:8b:4c:9d:12:f7:42:e1:be:63:
6d:2d:37:14:d4:1b:af:7d:24:71:19:70:7a:98:c7:
af:c2:19:4a:6f:b4:73:f6:87:a6:43:95:8c:3d:91:
4e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:82:2E:43:03:9C:F7:CB:E8:DC:5D:CE:A5:B1:67:98:4C:AB:8E:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f94baf49-fbcc-3102-8297-477e3c4f8eaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.120.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:a2:c6:c5:ba:b0:2a:54:2b:26:23:1d:92:70:0b:d0:fa:97:
2e:1d:c6:7e:b4:c5:9c:a3:95:02:22:9e:e9:f2:ca:11:7f:d1:
b4:e1:bb:88:75:7c:bd:77:37:b6:48:dd:0e:32:e3:59:be:ef:
75:04:ea:88:a0:2a:66:55:ee:c6:aa:64:fe:42:db:ac:0d:2b:
3a:05:d4:21:fd:ce:82:6b:78:ad:94:24:03:66:36:4d:60:f2:
18:c8:89:f8:34:55:2f:05:63:8f:95:fd:bc:f0:cc:05:da:19:
5c:86:bc:93:71:e6:de:45:16:77:0a:9f:b3:dc:c7:31:7f:88:
86:bd:e9:a1:1c:f6:2c:33:1d:99:49:1d:96:98:da:db:52:74:
90:cb:3a:c8:66:5f:0c:af:00:45:4c:17:5f:dd:93:ab:4c:a2:
19:62:33:d5:b7:93:c4:35:9c:59:00:61:fb:98:3d:5e:37:ab:
bf:b2:d7:25:94:78:f6:e5:7d:74:db:76:21:da:fd:95:89:7a:
f6:15:ed:7b:23:84:a9:aa:13:a4:82:b1:02:5f:f6:27:ae:b9:
0f:39:0f:d3:04:9d:8d:e0:f8:bc:8e:8f:7b:bf:ab:f5:1f:53:
1b:15:ea:f5:5d:2b:85:19:a4:cb:b5:72:98:de:ec:d2:06:26:
43:4c:01:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:14:05 2025 by rpki-client