Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/00d7cc2a-92ec-3764-abb1-a434c8fdae52.roa
File: 00d7cc2a-92ec-3764-abb1-a434c8fdae52.roa (raw, json)
Hash identifier: eQzH+rH6RbFQSNcXnEOLUhCtuE8v0wSoP/HbCtDqt44=
Subject key identifier: CB:3F:08:7D:C6:C3:26:BD:06:D6:06:94:60:45:CA:C2:31:33:B7:AE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401EE690FE2429E11F9FC2CA80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/00d7cc2a-92ec-3764-abb1-a434c8fdae52.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.90.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1e:e6:90:fe:24:29:e1:1f:9f:c2:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=4d179b2e-4e6e-43be-85d7-8e4f56114566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:6c:5f:b6:28:6d:7e:3a:74:5d:63:6b:b2:
98:13:c5:c2:ad:43:d6:f0:17:26:0d:66:5b:94:bf:
6b:7e:84:f3:15:b5:26:95:ef:ed:f0:0e:20:e8:b4:
98:a3:0d:33:b6:55:90:fc:14:53:c0:3d:17:94:6f:
37:f5:fb:75:a6:e9:df:21:25:c5:09:dc:45:dc:46:
25:db:8b:3b:ac:49:24:02:32:da:15:fb:b5:51:2c:
7f:15:cb:73:df:5e:25:20:4d:66:30:41:dc:23:c1:
c9:a8:16:fb:80:d5:7c:32:a1:b6:d1:6c:a6:13:e4:
62:be:7e:0f:3a:74:c4:a5:87:73:8f:6b:f2:4b:51:
86:6c:2c:be:50:03:1a:e3:1f:88:9c:05:b9:7b:79:
e9:fb:5f:3d:8f:86:a8:79:4e:20:64:8d:0c:f5:d0:
b2:5d:02:95:92:60:3a:5b:65:cb:ec:20:71:f0:0e:
ac:26:c7:ed:60:0c:d9:71:9e:d1:dc:d2:bb:68:b6:
6a:7b:d8:b6:1f:fd:c1:23:be:ff:4a:5a:65:86:3a:
8d:94:38:02:20:a2:a8:7f:d3:1e:c0:9a:1a:2b:98:
14:fd:55:2d:77:87:d6:24:59:df:56:fa:4e:a3:16:
37:0a:79:60:a8:28:76:1f:1a:02:be:72:c3:30:a9:
63:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3F:08:7D:C6:C3:26:BD:06:D6:06:94:60:45:CA:C2:31:33:B7:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/00d7cc2a-92ec-3764-abb1-a434c8fdae52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.90.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:7f:be:0b:6d:cd:60:e7:f5:90:64:60:b7:51:d2:75:b4:23:
d7:01:3c:29:81:84:e7:ea:5d:bf:15:33:b6:ac:79:c7:3e:54:
a8:5f:2c:e2:97:58:e5:d4:99:05:62:01:61:aa:80:5d:3c:a4:
76:e8:4a:09:08:d1:b9:8c:bd:4a:7c:c0:29:b1:26:5a:3d:7b:
3e:5b:72:2e:05:39:7b:2e:88:b2:78:17:2a:69:34:34:2a:05:
62:63:54:2a:09:b0:8c:91:28:f2:43:0f:3e:dc:10:50:5b:db:
c4:9b:0d:67:b7:8b:06:cf:78:b4:90:e3:f5:e1:6e:e4:09:da:
35:ba:4e:3e:31:2a:ce:ab:5f:1d:46:48:a3:b4:a0:76:bd:73:
c1:3c:8e:7a:08:75:ef:35:80:fd:25:7d:18:cc:4f:91:1a:60:
c9:a6:3b:25:99:83:2c:5a:fc:e5:4a:55:5f:56:92:53:76:9f:
9f:e7:c0:a0:17:13:e9:ab:a3:2d:1d:c0:3d:6e:15:64:63:65:
8e:3f:e8:fb:d4:8b:7e:73:88:e4:e6:69:a1:a1:0d:60:9f:a3:
a5:5a:cd:c1:95:c9:a5:21:fd:18:de:7d:ed:6f:f1:ff:06:8c:
77:51:43:88:34:09:3e:f2:1f:a8:b0:8a:5a:e5:ca:fc:51:60:
a1:e0:b7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:23:46 2025 by rpki-client