Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/228b0197-e800-3bcc-8c18-c7bcc0d67371.roa
File: 228b0197-e800-3bcc-8c18-c7bcc0d67371.roa (raw, json)
Hash identifier: l1qPNVb/pVaXzxVgqhBTn/ElheZDcBiLbo5wM6Tc18k=
Subject key identifier: 4A:63:EC:9B:49:4C:C8:75:19:21:C7:8E:E6:2E:46:D2:46:0B:6E:53
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0C0077360BDEC4BD325AAEC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/228b0197-e800-3bcc-8c18-c7bcc0d67371.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.228.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0c:00:77:36:0b:de:c4:bd:32:5a:ae:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=224506bb-fe6f-4f50-86c6-3aec96e7ca28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:74:60:4d:fe:6c:92:93:c3:fc:60:d7:4c:
0a:9d:b6:29:1c:e7:c3:05:29:03:5b:4e:03:5f:e5:
7d:bf:4b:3c:ff:bf:37:11:07:5d:27:f2:ef:eb:ec:
e7:fa:10:19:f9:d5:bc:02:12:ec:cf:78:74:ed:c1:
3b:92:86:5e:bb:63:70:69:c2:40:fc:7d:77:a7:e8:
ba:45:73:13:4f:1d:9c:9c:35:e8:67:ed:bb:1d:9f:
79:b5:b1:11:7b:ae:ca:11:ad:b6:4f:79:58:8a:00:
a4:be:4e:42:03:63:7a:81:ae:19:83:1c:d3:68:67:
e1:0b:92:f1:34:6e:a1:a5:cb:f3:5d:51:54:1f:8f:
7c:df:fa:e0:40:0d:32:61:66:c0:03:3a:6a:17:14:
ab:ef:9f:47:e2:e1:9f:90:78:c8:13:33:56:9d:aa:
9a:0e:01:32:eb:b7:ff:23:4b:c2:56:fa:cf:b1:86:
40:c8:98:97:d5:b1:27:d0:cd:71:4d:28:f1:02:14:
e1:03:1f:d6:1d:98:36:b3:51:05:e1:00:11:f9:88:
b7:04:13:2b:7b:7d:e7:3f:07:ed:fb:ac:c7:09:1c:
6c:58:dd:ee:d4:32:68:ba:60:83:27:db:98:ff:c2:
cc:3c:f9:cb:cb:2d:36:b4:c4:c5:a0:be:04:4d:44:
f8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:63:EC:9B:49:4C:C8:75:19:21:C7:8E:E6:2E:46:D2:46:0B:6E:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/228b0197-e800-3bcc-8c18-c7bcc0d67371.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.228.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:0a:2c:60:93:c4:d8:fe:35:e5:31:98:b3:68:5b:78:2e:25:
5a:5e:84:ce:6d:f7:f1:77:99:d9:d5:71:9f:27:bf:6a:ea:da:
3d:e4:f4:aa:ae:50:cc:e8:1d:ba:b9:3a:7a:60:18:3c:a7:c4:
5f:d7:b4:0d:e6:b4:27:29:4f:7d:da:b1:6b:57:87:29:08:36:
6a:6d:0b:f5:72:e0:cd:4a:5c:83:2c:03:e6:52:3a:59:88:38:
ac:54:47:cf:84:54:0a:53:c8:2d:13:be:7b:b9:fc:93:43:e6:
7f:1e:70:a1:03:c9:79:7a:e2:ae:02:6e:d5:54:dd:bd:83:9a:
23:79:ac:48:5b:21:15:38:5d:26:b4:5b:db:e5:ba:e9:cb:ae:
06:9a:f0:02:c8:2d:f3:8e:91:db:33:e8:02:1d:2c:ee:eb:5f:
0c:02:0e:9c:e4:04:c6:2d:7f:a5:89:ac:12:69:9c:21:de:6c:
5b:40:34:08:7a:cf:78:10:a2:58:4f:36:32:d7:df:be:22:79:
2c:58:85:47:38:0c:ea:5c:30:cb:f4:a7:16:96:ce:0b:99:d1:
5c:3a:e5:8e:22:88:d9:d0:87:0b:8f:9e:e8:ea:34:4f:0f:31:
b6:ea:d8:d8:fd:2d:40:97:22:9e:1b:16:5a:66:2a:96:c0:e1:
2c:01:46:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:02:54 2025 by rpki-client