Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ff48f031-cd40-3d8c-b30a-f79089743642.roa
File: ff48f031-cd40-3d8c-b30a-f79089743642.roa (raw, json)
Hash identifier: 37JS/9/1pTlN14MCdT+7kkHZOkg2rC125QwkWxfJZ2Y=
Subject key identifier: 81:7D:5E:54:85:39:DA:F6:1F:C4:97:D9:64:65:FD:12:E8:43:4F:E4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858408FE0E45FA8D3BA4995F63AC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ff48f031-cd40-3d8c-b30a-f79089743642.roa
Signing time: Thu 12 Jan 2023 12:00:00 +0000
ROA not before: Thu 12 Jan 2023 12:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.240.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8f:e0:e4:5f:a8:d3:ba:49:95:f6:3a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 12 12:00:00 2023 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=284bd635-6661-4270-b92a-f0d00fd71756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:b7:b1:60:04:dc:80:38:05:01:53:b0:d9:
bc:e9:3c:a2:e2:06:d7:0b:c1:6a:80:fb:fb:fb:81:
e7:64:3c:33:49:0a:d5:0e:80:89:04:9f:b3:30:32:
f5:f6:ec:85:07:bb:f4:8f:81:e9:6c:aa:f5:60:00:
2d:01:19:eb:e1:bd:dc:6c:34:c4:94:c9:56:d7:6f:
84:46:95:f6:74:d0:49:d0:88:69:5b:8e:c8:2c:41:
a5:e7:6d:52:5d:26:64:3f:44:b5:01:76:39:b4:4e:
55:4a:62:2c:71:ba:93:0a:04:45:1a:10:ea:ad:80:
3e:6a:2f:ff:a7:18:36:56:5a:f2:66:1c:cc:fa:d4:
05:3e:50:c9:0a:2c:c4:61:0f:fc:9c:46:2c:0c:8b:
b0:fb:9d:5c:c3:84:64:f3:b7:ec:03:a3:59:d6:9c:
1e:e3:a7:09:21:14:5b:eb:8d:c4:d8:51:de:65:3c:
bd:7a:01:df:33:40:86:08:b5:ec:84:27:bb:75:ca:
47:58:f7:78:70:6f:72:64:df:44:dc:14:bf:f1:97:
ea:94:18:0d:ce:18:09:28:2c:53:72:30:c8:ae:3e:
39:49:26:99:48:0e:2b:91:f2:92:38:7c:0b:03:68:
bd:58:7b:d1:60:05:33:ab:05:50:b2:cb:b4:41:2f:
9e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7D:5E:54:85:39:DA:F6:1F:C4:97:D9:64:65:FD:12:E8:43:4F:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ff48f031-cd40-3d8c-b30a-f79089743642.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.240.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:fe:97:6b:3a:6d:c5:dd:ec:0d:85:fc:df:5e:c4:bc:bb:a4:
a5:df:e5:3f:5b:8c:46:70:a8:c2:b2:43:e9:bd:67:41:8a:81:
b1:41:b1:75:06:33:64:7a:73:56:27:b9:76:a3:19:43:0d:22:
9b:17:15:8d:58:68:61:a8:67:83:a7:5d:3c:39:34:a9:16:00:
5e:92:96:12:fe:41:bd:e3:34:54:2a:19:1c:c2:f1:0e:17:ff:
20:63:8d:e4:cc:ba:77:95:23:75:ec:97:3f:7b:37:c5:13:1f:
95:ab:ba:4d:d8:be:83:1c:d0:6f:ea:c5:6f:bf:36:de:21:b2:
0e:94:45:f5:06:bf:a7:4e:29:46:6b:3e:4a:2d:c3:88:8a:e7:
fa:c9:c1:c0:ab:92:56:77:cc:ef:6d:bc:79:96:51:21:8f:bc:
0c:5a:a2:46:99:66:2b:04:5f:7d:c1:8b:1a:0b:d1:eb:d3:fc:
ef:f0:03:f5:f4:26:47:d0:d6:4b:16:dd:4b:6c:9d:84:6a:12:
cf:ab:d9:b1:10:d1:b6:34:c0:13:42:1e:c5:4a:0c:b4:44:22:
4c:5f:f4:02:d4:4a:7d:39:ad:fa:bf:57:44:a4:a9:3f:05:db:
46:aa:70:ed:7e:d4:28:f6:fd:41:13:eb:89:21:1d:b5:b1:ba:
d0:fa:a4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:26:58 2025 by rpki-client