Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01fef90b-be01-3384-9401-0d462570afe2.roa
File: 01fef90b-be01-3384-9401-0d462570afe2.roa (raw, json)
Hash identifier: GtC0zHZYFGyYzk0d5VAviqhgC44I6c1lW287T2/1kmw=
Subject key identifier: 4E:18:56:EA:1B:C3:76:80:EA:66:5C:91:D9:35:35:EC:47:5B:A3:8E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584094C388272574F5B72DD0B380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01fef90b-be01-3384-9401-0d462570afe2.roa
Signing time: Sat 14 Jan 2023 12:00:00 +0000
ROA not before: Sat 14 Jan 2023 12:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.120.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:94:c3:88:27:25:74:f5:b7:2d:d0:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 12:00:00 2023 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=54e3e87d-c01d-4a03-b597-ff1f068844fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d6:b4:81:25:a9:99:4c:a7:d7:55:0a:ba:15:
8a:26:e4:2c:b4:da:54:e6:4b:35:88:ce:d7:9b:7d:
65:7c:b1:46:1d:1b:da:ba:3a:af:9b:16:8e:78:e3:
e0:6f:61:7c:25:8e:64:64:11:ae:aa:9b:45:27:68:
c9:b0:e3:5f:14:32:8a:6d:e6:eb:a9:8a:89:f0:e0:
e7:e9:00:b7:65:89:b4:2c:72:ce:ad:01:27:15:43:
ba:c3:42:ce:14:f7:12:44:12:5a:e9:7a:bc:1c:36:
c8:3a:6d:76:59:70:8c:2c:fd:b7:4e:a7:62:a8:c0:
e3:db:93:ce:1b:b8:b6:7a:f4:a3:3e:5a:47:65:1c:
61:74:4d:81:06:e3:0b:5f:6d:8a:6d:d7:e6:a1:d5:
f6:79:be:5b:18:9d:7e:d0:e9:f4:de:f7:7e:01:c1:
10:3f:98:60:42:2d:04:40:2e:1e:0c:ae:fc:36:d5:
fc:ce:ba:45:9a:b6:b1:6c:3d:88:9d:73:a8:6e:8e:
d2:88:88:c5:c8:3d:53:52:de:40:65:9c:3a:97:d8:
29:c4:d6:86:01:f1:ed:97:37:29:5a:ec:5a:8a:69:
ca:93:63:5f:ee:c6:3c:9f:65:4b:7a:7b:9d:69:3e:
b6:d9:fd:29:de:bf:f9:ec:f5:d2:f8:c1:a6:a8:8d:
e3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:18:56:EA:1B:C3:76:80:EA:66:5C:91:D9:35:35:EC:47:5B:A3:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01fef90b-be01-3384-9401-0d462570afe2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.120.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:39:bc:7d:a0:67:03:35:78:58:fe:8c:a2:b8:65:19:5b:a3:
10:e5:70:be:db:62:a4:7f:cc:3d:ab:b4:f8:fc:c9:83:ce:56:
b0:1a:d5:2a:8e:24:25:5f:4e:3b:c0:87:a1:61:e0:e2:3b:60:
58:75:2e:88:1d:30:6a:7f:21:53:29:d9:2c:4e:2f:08:88:ac:
2e:27:b0:61:a4:ef:34:83:b5:c8:46:59:02:65:2b:5d:3f:20:
6e:2b:17:58:8f:0b:e9:78:92:95:4a:a4:d2:68:95:f7:a6:a2:
ad:84:9a:71:fc:70:ba:51:f4:04:fc:0a:08:64:cc:3c:9e:c6:
70:67:e6:9b:ca:17:84:93:e8:31:71:4b:e4:c5:2b:26:a4:b4:
f6:01:61:68:50:50:c2:e6:f6:12:75:d3:64:74:4f:e0:5b:2b:
9f:a4:e1:bd:f1:90:7d:46:8c:f4:1d:0e:76:50:6f:34:f0:34:
64:b6:7e:0d:b5:a4:ee:b0:c3:2a:ce:a8:ed:66:11:a3:db:6f:
c4:1b:c6:02:f1:30:20:89:01:b8:30:08:e5:a7:38:1b:ec:39:
06:09:f5:f7:b3:91:86:aa:60:f2:12:eb:33:9e:ef:de:2d:08:
d5:43:cd:7f:ea:f7:db:9b:4d:99:fd:ed:a4:ba:a6:5a:e3:f7:
84:70:7f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:12:30 2025 by rpki-client