Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1125deef-bb33-3d1b-ae80-f3440bf610fa.roa
File: 1125deef-bb33-3d1b-ae80-f3440bf610fa.roa (raw, json)
Hash identifier: 2eNs/JFyJ8u0o2svdYbUuaFnIyMFIm3X7EGSwvpZASQ=
Subject key identifier: 0D:E1:87:EC:D7:E3:CE:EE:CB:F3:E7:C2:0E:64:70:98:D1:6F:59:D5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F3421DF5C80955B09ACE90600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1125deef-bb33-3d1b-ae80-f3440bf610fa.roa
Signing time: Sat 10 Sep 2022 12:00:00 +0000
ROA not before: Sat 10 Sep 2022 12:00:00 +0000
ROA not after: Sun 16 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.58.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:34:21:df:5c:80:95:5b:09:ac:e9:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 10 12:00:00 2022 GMT
Not After : Oct 16 04:00:00 2022 GMT
Subject: CN=0bc0e4ce-d269-4b29-b399-a13ef6345a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:fc:59:3d:e3:14:76:c1:60:51:07:53:f3:
67:3d:65:81:0b:d5:d3:75:6c:34:e4:9a:2d:42:b9:
12:22:16:c2:28:c4:64:df:1e:4c:87:48:89:bd:da:
3b:e8:92:02:dd:a9:a0:bd:39:0e:d8:7e:d6:e6:aa:
64:59:41:60:c8:34:60:70:c7:71:00:0a:0a:1d:9c:
c4:e6:52:a8:2a:82:64:87:97:bb:1f:56:40:ce:c6:
34:1e:f4:dc:4f:48:fb:71:87:8e:0d:cd:6d:fb:6a:
62:60:d6:4a:aa:24:fa:14:44:44:5b:1e:97:89:b2:
07:ba:f9:bd:f4:32:55:65:ab:2a:38:43:de:95:e9:
a6:9b:64:23:9b:02:4a:b4:c3:8b:71:df:6f:00:4f:
cd:f3:31:42:25:b4:ec:6a:a7:19:3b:6e:80:e9:fa:
32:5c:43:c9:b1:e2:52:d4:24:f2:54:e9:9d:38:bd:
3e:d2:03:42:5c:ab:28:ce:3a:de:53:7b:60:37:d3:
a0:a7:63:98:64:44:a4:cd:63:43:11:81:67:f9:3a:
d6:79:e2:fd:cc:e6:3f:f7:4a:cd:c6:a6:b5:20:50:
a5:1b:ed:c8:2c:ca:f5:2e:fc:69:20:cb:7b:fd:7c:
ea:e3:17:2c:95:b5:4f:ea:37:5c:d3:d9:a1:ea:69:
0f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E1:87:EC:D7:E3:CE:EE:CB:F3:E7:C2:0E:64:70:98:D1:6F:59:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1125deef-bb33-3d1b-ae80-f3440bf610fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.58.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:a9:53:1f:ad:e8:64:f1:94:f2:51:d3:7e:b8:9c:12:18:08:
c4:6f:bb:51:41:8d:5a:77:d8:fb:65:d0:5a:ca:03:cd:c9:68:
07:53:d6:e9:63:9a:08:57:33:a7:cd:24:6d:ed:9a:ce:b4:f5:
9d:9f:36:fd:a4:4d:b4:b2:22:a9:6b:3b:99:b3:a1:da:ec:91:
be:5b:b4:0e:dc:de:d4:98:b0:31:f6:3a:43:3e:53:9b:5a:cc:
f5:8e:96:91:e0:d2:4e:dc:e1:51:6c:26:02:78:20:73:6f:a2:
9a:fe:12:46:f8:cd:2e:8b:91:8d:21:3b:b1:0e:13:6d:95:3f:
6b:fe:69:22:ce:c7:0c:9b:41:99:5d:1f:46:7d:a2:31:14:fa:
c5:5e:77:5e:49:bc:4d:ae:58:2d:ee:21:8c:53:20:4f:2a:26:
35:c1:6e:11:99:df:cb:c9:6c:d0:63:42:fa:bf:88:6e:84:71:
e8:79:03:d5:aa:28:de:36:fe:9b:f4:17:44:55:1d:63:2f:54:
cd:c4:93:82:5e:a2:a1:6a:f2:0d:d0:c7:62:e8:0a:12:28:7c:
d0:cb:72:a2:20:23:66:ef:67:dc:38:fe:33:dc:1b:a6:9d:60:
c8:dd:7f:55:9c:f2:dc:a0:84:a0:15:47:25:9f:e1:d6:be:68:
57:ba:5f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:22:03 2025 by rpki-client