Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0457f4bc-29ce-3ea7-97d0-e94c9f217a23.roa
File: 0457f4bc-29ce-3ea7-97d0-e94c9f217a23.roa (raw, json)
Hash identifier: K2ERO53chp4NzB1vyQBeWWzJxjr0iIxURlK7dTX8AMs=
Subject key identifier: 14:8A:8F:01:05:E6:05:4B:AC:A3:A5:F3:71:7F:56:CA:3E:8A:6A:C2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E70985B71DB907EC23E4D1447
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0457f4bc-29ce-3ea7-97d0-e94c9f217a23.roa
Signing time: Sat 02 Jul 2022 12:00:00 +0000
ROA not before: Sat 02 Jul 2022 12:00:00 +0000
ROA not after: Sun 07 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.57.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:70:98:5b:71:db:90:7e:c2:3e:4d:14:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 2 12:00:00 2022 GMT
Not After : Aug 7 04:00:00 2022 GMT
Subject: CN=22a79324-cfe4-4c78-80f6-573f9efe71fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:29:54:63:cf:1d:04:13:3f:df:f0:6d:55:4a:
f4:e6:0c:9e:38:f6:cd:37:0a:e0:ae:39:bc:3d:22:
6d:4a:42:f8:8f:ba:05:0f:85:56:95:54:26:94:fd:
79:27:c4:57:6a:08:c5:ef:2e:6e:26:c0:c7:e5:a4:
39:90:44:dd:7d:01:e8:b1:67:24:49:b6:e0:25:03:
e8:5c:d5:0e:48:8c:e5:ae:25:06:3e:20:33:26:77:
10:be:36:f5:80:e3:15:a5:a0:f2:75:35:a3:62:84:
40:22:02:d6:53:f2:46:a5:a7:08:d1:b6:8c:a2:54:
4f:a6:0e:bb:ce:27:09:fd:83:9a:fb:86:81:55:d3:
78:cd:39:85:41:2e:1a:63:76:13:89:c2:4b:8a:29:
f1:ad:35:00:c4:f7:d7:bc:43:67:c1:01:6c:c9:02:
b4:bf:4d:c8:42:80:67:f4:ec:7a:83:26:7d:4c:96:
a7:e7:ee:26:26:1d:3c:6f:d8:79:60:18:9a:c4:e9:
8b:51:e4:74:fb:4d:b7:37:c9:51:7a:d3:8b:1d:1d:
ff:92:18:ac:85:ab:a9:78:1a:c3:a6:73:af:b7:81:
3c:ca:11:9c:88:e1:2c:4f:cd:f8:92:9d:ca:25:e5:
99:e4:8b:e7:1d:5c:09:fc:ea:0c:0d:e1:81:82:4d:
1f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8A:8F:01:05:E6:05:4B:AC:A3:A5:F3:71:7F:56:CA:3E:8A:6A:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0457f4bc-29ce-3ea7-97d0-e94c9f217a23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.57.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:46:6e:4b:ec:51:b5:dd:19:05:21:a6:09:b1:85:92:f0:e8:
f4:d0:95:e8:14:56:5f:e1:04:b5:b3:6a:51:68:c3:b4:0a:be:
d1:d5:2b:99:16:f6:c1:96:01:42:06:42:56:8a:1e:32:98:97:
4b:c6:40:4b:24:92:0f:02:69:f2:c6:72:ef:0f:fc:ec:14:7e:
3f:a6:28:58:3a:64:44:6a:16:61:97:28:4b:85:6c:6c:7d:a0:
03:94:3e:4a:a8:cc:eb:d8:49:3a:6c:d5:9f:81:2a:f0:9c:ec:
73:7b:61:77:21:41:be:c5:53:17:68:99:95:50:cd:01:69:2d:
9b:cf:ef:a1:b7:a1:d6:32:18:57:bf:9f:7a:5f:2c:bc:b3:83:
0d:15:58:d9:da:33:ba:e2:9d:87:fd:88:47:cf:d1:88:b9:fd:
f1:a0:b7:89:52:f9:c8:68:8f:40:0b:7f:4d:56:fa:f5:a5:be:
65:ea:9c:33:59:f4:5e:51:e3:cf:d7:66:a3:f3:bf:eb:26:12:
83:b0:51:3a:54:fa:a7:94:96:8e:b8:2f:1d:f2:93:68:55:7b:
32:df:c1:39:8b:db:7d:9e:47:c1:70:17:42:0f:63:3e:08:25:
1f:d7:d9:6f:85:42:45:ed:71:86:a7:4d:80:bf:24:7f:14:f3:
51:e0:ed:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:43:58 2025 by rpki-client