Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f9b0f44-981e-373a-867c-829d8ec8794a.roa
File: 1f9b0f44-981e-373a-867c-829d8ec8794a.roa (raw, json)
Hash identifier: p8+THgfmfUk+Un681rPkhV8rqpBsXYhe7dTjg2V23hk=
Subject key identifier: 0B:1B:20:D8:31:9C:8E:C7:5D:01:B3:74:0C:CC:2E:68:71:09:3B:7D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D59CD0EC47851AC1FE98B12A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f9b0f44-981e-373a-867c-829d8ec8794a.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.248.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:cd:0e:c4:78:51:ac:1f:e9:8b:12:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=e20bb363-548c-41c1-8592-f68cee6966d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:67:51:fc:98:b8:82:fa:2f:10:51:ac:19:
e7:3e:41:11:8e:d9:aa:b9:5c:58:12:f0:d2:11:f5:
21:ef:48:79:63:a2:90:1b:78:22:89:c7:20:5a:e1:
63:57:df:a2:a7:91:57:b0:6e:09:13:6a:bb:8c:1c:
7f:27:a9:ca:36:85:70:cf:cf:7e:7e:6a:44:87:49:
a2:d9:38:cc:48:7f:d0:53:5a:a6:6a:61:7b:03:b9:
da:c1:a9:f3:e6:1a:52:95:d7:a0:0f:e2:91:21:5e:
f5:dd:33:c4:60:f4:22:a0:a4:4f:fb:63:17:b5:c9:
37:0c:29:c9:dd:03:da:6e:c2:14:25:d9:35:0a:8d:
9e:4c:da:e2:85:6f:be:f9:cd:6f:5b:62:ad:4a:98:
ca:64:8c:7d:32:f4:81:fd:a0:72:9c:e4:b6:a7:cc:
71:3b:f9:e9:a0:d9:b8:fc:3f:c0:2d:75:53:cd:76:
1c:08:ab:a2:94:0f:7f:fd:23:da:5a:57:80:f5:53:
ab:c5:0f:21:30:c1:f0:d9:7c:3a:9a:f1:e4:f4:77:
7f:a9:8a:12:59:70:99:a0:8b:e4:d7:b6:4e:2d:4d:
09:4e:f4:73:9c:9f:0a:d8:62:71:09:7a:bf:da:ee:
9f:47:c9:40:bc:99:40:b4:d6:ff:17:45:7a:71:45:
86:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1B:20:D8:31:9C:8E:C7:5D:01:B3:74:0C:CC:2E:68:71:09:3B:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f9b0f44-981e-373a-867c-829d8ec8794a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.248.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:13:ca:cc:99:20:9d:25:80:02:d1:20:3b:a4:4d:0a:cc:9b:
e0:19:ba:50:19:5f:ce:57:86:9f:f6:fa:52:d6:b1:48:3d:fb:
22:52:1d:61:06:7b:2d:48:9e:5d:d6:92:0d:79:e9:3d:c4:ad:
25:7d:ef:2c:4d:d2:c1:be:69:8c:2a:dc:b2:c9:fb:c7:90:f5:
c6:13:92:be:f7:34:32:cb:88:28:23:47:18:e4:b7:e4:ed:12:
f4:d8:6f:a7:05:bf:ac:13:ee:46:e2:b0:00:6b:3a:22:d1:d3:
e2:bb:55:7f:f7:9e:77:7e:f5:bd:69:45:64:80:93:67:91:82:
31:5a:68:05:03:8a:43:78:5d:c4:25:50:ba:49:f2:55:f7:85:
9d:14:45:4a:83:be:2c:10:31:07:b2:df:91:55:e0:86:d7:dc:
27:f5:cc:46:23:ed:49:d0:20:aa:bb:92:18:4a:0c:ff:dd:1f:
a8:18:cc:23:9b:50:6f:23:f0:09:e7:e6:4d:77:da:b8:0c:e8:
65:e6:9e:01:dd:ec:c3:64:fc:33:a2:d5:ff:0c:73:dc:71:f2:
1d:1e:61:56:0b:72:aa:59:69:86:83:8d:51:40:03:38:ee:93:
62:e5:55:c5:9f:46:73:c3:df:37:2b:89:2e:fc:2f:bd:71:e3:
ba:a8:2c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:39:39 2025 by rpki-client