Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2247bfab-4186-3b5c-b1b6-6b29b2c1e054.roa
File: 2247bfab-4186-3b5c-b1b6-6b29b2c1e054.roa (raw, json)
Hash identifier: r2Ea4Jd6STqP1oSMmGdlR1hD6dwx31WXoRDTfiVsHd8=
Subject key identifier: DF:98:8A:A5:E7:B6:5C:38:AA:07:EA:81:CE:22:8F:79:2E:E6:50:4A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584019CFB9B660102B693BEB8940
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2247bfab-4186-3b5c-b1b6-6b29b2c1e054.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.127.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:19:cf:b9:b6:60:10:2b:69:3b:eb:89:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=b093dd0d-3955-4784-8454-41b263196f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:46:af:3d:6b:d7:41:04:4d:01:ed:6c:dc:10:
80:f9:68:96:5f:5c:a0:f9:8d:fe:12:6a:4d:55:02:
a3:4a:50:09:9f:fb:fa:68:a3:22:63:21:da:80:e7:
15:6b:35:4d:dc:a7:6e:4a:11:20:22:fd:3f:7d:a7:
d1:01:57:6e:f9:7c:3a:7a:df:60:02:38:0b:8c:38:
46:6e:33:e5:e8:7f:e0:c8:76:7a:da:16:fa:dd:77:
ca:64:43:b1:74:17:25:a8:c4:e1:86:b1:0b:10:74:
27:40:8e:98:5e:ef:5a:e2:d2:ab:f8:67:6a:92:2c:
03:ad:38:a4:83:a9:a3:86:e6:f0:3d:2b:a8:e5:4b:
de:91:9c:c4:40:8a:1a:7e:6d:cb:19:da:e0:18:26:
d5:82:50:72:ca:0f:b9:24:f6:34:21:4a:af:fe:30:
cd:eb:0f:dd:8a:72:9b:0a:91:94:48:f5:6f:74:fc:
07:ac:c1:93:b1:05:f8:d1:1a:8d:e0:18:c2:de:b4:
d5:85:22:ce:66:e8:e7:b3:26:73:fd:b0:9b:8e:3b:
ba:03:1e:cb:19:8e:89:9b:37:75:29:71:f2:da:25:
db:ce:05:67:3b:9c:73:3b:55:21:9f:07:c1:0d:c2:
77:4f:49:2c:c2:78:a6:96:fb:a1:49:d3:e1:d1:79:
71:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:98:8A:A5:E7:B6:5C:38:AA:07:EA:81:CE:22:8F:79:2E:E6:50:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2247bfab-4186-3b5c-b1b6-6b29b2c1e054.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.127.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:f9:5f:08:ab:7f:b9:dd:0c:e4:67:33:8c:7c:b0:63:59:29:
66:47:09:ad:e5:bb:3f:78:b0:38:af:ea:b3:27:c3:e3:41:ee:
a5:16:02:3c:c5:32:44:fd:c1:18:84:78:32:41:0d:bf:4c:6a:
b0:19:00:bd:61:9b:ac:2b:5c:12:bd:e0:1c:06:42:0b:0a:2f:
11:65:01:de:8a:50:58:ad:17:f6:25:a4:13:b8:d3:3e:43:66:
99:f9:0e:f8:7d:a0:5c:7a:09:27:0f:96:d6:f8:da:17:53:a8:
d3:b1:e1:48:a8:ca:64:d2:f7:b7:b9:45:d9:62:73:7a:d8:7f:
81:f8:77:7f:90:ba:14:f2:ae:ec:c5:d4:a1:7d:5c:8f:03:6d:
92:48:cf:01:96:cd:69:61:72:5d:75:8c:c3:2a:a2:04:f0:75:
c9:70:34:d7:df:9a:d7:8a:90:2a:26:ad:ca:9e:32:c3:de:81:
62:fa:5b:0b:5f:e1:52:bf:05:32:b1:ae:ac:4e:a6:e1:4d:40:
49:7e:da:d7:ed:67:25:e5:a1:e4:96:6a:df:06:4e:e6:a5:66:
59:fc:40:ea:80:32:ba:1d:fb:78:43:1f:b6:bb:f1:40:96:01:
ff:37:62:c5:ae:01:72:c1:8b:e5:c3:bf:d9:61:56:d0:e0:fe:
ac:d5:21:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:45:49 2025 by rpki-client