Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10d9d09c-04f6-38ef-9e5d-aa93b7681d46.roa
File: 10d9d09c-04f6-38ef-9e5d-aa93b7681d46.roa (raw, json)
Hash identifier: ME9479wt86p7Xhl0r8Orj3Fe0AHGQGop+uWM0dKUXQ8=
Subject key identifier: DD:D7:DD:DD:20:59:7B:2F:D4:B6:EA:D6:51:12:C2:53:94:BE:E3:69
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D808979F5CB6568C20F0CC940
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10d9d09c-04f6-38ef-9e5d-aa93b7681d46.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.68.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:89:79:f5:cb:65:68:c2:0f:0c:c9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=e3fcec12-0385-460b-b3c1-9202eaa38f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b5:88:c5:99:c6:4a:56:ec:ca:95:28:88:2f:
b5:05:b2:14:93:c1:f6:66:3e:28:77:ea:34:9e:21:
a3:05:bd:19:0b:06:2a:24:eb:04:0a:f2:d6:40:ef:
fc:7f:dd:8a:01:75:18:ce:96:9a:62:65:b3:40:a4:
ab:14:63:c3:18:1e:42:01:e8:6c:ed:9c:36:52:17:
63:84:11:c2:e8:07:8b:bc:dd:f3:b5:7b:9b:48:30:
8d:10:45:d1:d4:8b:0d:62:be:b1:84:08:77:dd:a4:
00:cc:25:e8:a2:38:84:d0:ff:c3:94:b4:3d:13:49:
7e:b9:cb:8c:c0:df:e2:ad:48:88:2f:99:e2:6a:eb:
79:17:63:c7:a2:01:0a:a5:e4:aa:47:04:cb:bf:d8:
f9:45:29:4b:d5:24:54:0d:c4:88:eb:ca:fd:4f:1d:
5f:47:ee:cb:95:a7:26:b5:85:ab:90:a1:83:89:e2:
82:69:36:da:0d:1d:75:48:cd:cb:44:76:77:5d:f9:
60:21:b7:80:3d:a6:87:b5:67:26:f5:b0:67:bc:ff:
f7:24:df:44:9d:67:6d:3e:84:18:db:e0:d4:24:b5:
87:e0:3a:78:ae:41:fd:b2:03:af:2d:90:9c:6e:06:
34:82:89:9a:9b:c9:0e:bc:01:d1:3e:59:ae:1c:2f:
a2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D7:DD:DD:20:59:7B:2F:D4:B6:EA:D6:51:12:C2:53:94:BE:E3:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10d9d09c-04f6-38ef-9e5d-aa93b7681d46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.68.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:e6:ef:19:55:5c:a6:d7:a4:6b:49:00:af:6a:4b:64:b7:05:
59:cb:11:64:be:07:15:8b:1a:5f:e7:46:ec:e3:9c:6d:9c:8a:
c7:84:e8:7c:29:98:9f:15:2e:11:e1:9c:9a:69:17:d9:78:e9:
22:34:c5:58:0f:63:3a:5c:36:d0:ac:f0:79:26:dc:a7:5c:d3:
80:47:dd:eb:27:05:14:7c:af:6c:8c:d1:d9:ae:f3:32:15:51:
34:ca:3f:53:5e:16:55:38:3c:34:9b:d9:2a:fc:bc:92:58:59:
ec:03:58:84:99:b4:2e:86:5f:18:0c:bd:a7:f8:cc:4b:f1:85:
b0:11:e0:9a:33:bf:d1:24:81:92:96:85:e2:9d:66:46:14:cc:
a3:dd:e4:07:3c:05:3d:a2:c6:e8:28:2f:3b:a9:c3:c9:83:41:
18:da:d0:45:79:b2:8e:41:91:3b:92:e5:74:28:1f:94:e8:28:
5f:5e:02:32:05:e1:b7:b0:fb:e1:07:cb:f0:65:ea:49:a3:75:
ab:6e:ea:bc:2f:f0:a4:2e:da:cd:29:8d:79:d2:20:63:1a:22:
03:97:ab:2b:ca:07:5b:3d:9f:8d:4a:37:bc:07:30:33:ed:d0:
ca:f1:25:67:a2:27:fe:b1:1e:2d:83:34:46:56:b6:96:be:79:
31:57:90:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:10:12 2025 by rpki-client