Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/26d2c7e4-7377-344e-81ec-33a671a5294a.roa
File: 26d2c7e4-7377-344e-81ec-33a671a5294a.roa (raw, json)
Hash identifier: DUhsOLt9qvdpRGWtMtwRQ1fgr5M1XIzvSOx4nI5t7RU=
Subject key identifier: EA:2B:2A:E5:04:C0:D8:73:4D:EC:AD:A4:04:52:25:2B:24:A9:1A:FA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FD0E05B9D72A2741361C94F20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/26d2c7e4-7377-344e-81ec-33a671a5294a.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.64.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d0:e0:5b:9d:72:a2:74:13:61:c9:4f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=06061bbc-0860-4446-94a5-c566f1d1fc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:be:de:c5:03:a2:62:76:9f:4d:4f:37:95:3c:
1d:3e:e3:93:6a:bf:63:1d:49:40:07:39:6f:f1:3a:
6d:5f:07:40:a1:57:67:a0:8b:b8:54:85:4b:07:81:
04:90:9b:9a:8c:80:98:b2:17:86:cf:25:b1:36:81:
e7:b9:62:22:c2:ba:b6:37:b0:b0:f3:1b:22:94:05:
35:b6:c2:cd:88:3b:cd:1b:eb:e4:98:07:b3:8e:32:
b4:a5:b0:94:35:3a:d3:2c:00:87:c8:cb:23:bf:8f:
30:e7:a1:08:5d:3d:13:e5:28:78:cd:59:af:47:65:
fa:79:6e:5e:48:e1:bf:d7:c9:fb:b3:b2:cc:e6:ce:
50:5f:e4:40:b8:1d:a0:95:ce:20:81:dd:4f:22:05:
89:72:78:b2:89:67:68:59:a6:b3:13:fa:1e:dd:45:
d7:df:18:db:4d:03:11:97:72:d7:13:d4:0c:7f:59:
c8:8c:a0:18:fa:cb:f4:25:14:f2:3b:54:c7:dd:73:
2c:9a:f7:6e:52:24:15:70:7a:66:84:bc:7a:8f:b3:
30:b6:81:1b:5c:d2:ab:6d:62:1e:de:03:5b:02:11:
25:9f:fe:f2:19:20:b3:43:5c:dd:55:f7:12:85:3d:
1c:c8:98:c4:3b:0c:50:49:61:bf:82:bf:4c:4e:a4:
87:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2B:2A:E5:04:C0:D8:73:4D:EC:AD:A4:04:52:25:2B:24:A9:1A:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/26d2c7e4-7377-344e-81ec-33a671a5294a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.64.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:dc:3f:98:fb:f9:bc:1a:d5:e5:91:29:58:1e:0c:bd:5a:a2:
88:7e:36:d3:82:c9:fb:57:a0:8c:f3:5f:d2:4f:cf:1c:9f:9d:
f2:33:1e:d9:d6:7c:9b:a3:fe:70:cc:dd:e9:9c:0a:5d:87:4f:
f8:d7:4c:4c:46:06:e1:b0:77:bb:13:d7:b2:d2:28:96:35:3f:
08:de:34:3b:ec:fa:9d:bc:da:54:5e:36:17:dd:fc:4c:cd:12:
23:17:5b:ed:d3:b2:9a:29:7a:9a:d8:b5:c5:d5:c8:06:2e:70:
e6:a8:0c:eb:5a:b1:42:d1:5e:e3:fe:13:f3:e3:7e:c8:f7:0e:
9f:d4:57:8f:0e:26:67:55:ba:48:f2:0f:3a:d9:cd:54:43:4d:
72:2e:a0:c7:2a:4e:4b:19:5f:72:39:0b:0d:71:73:c9:2b:ae:
58:18:2b:7a:c9:68:d6:4b:8f:86:e2:07:4b:f5:b0:cb:d2:b9:
78:3c:4d:cd:1d:37:15:37:84:30:ad:9b:bf:17:4a:9f:b6:31:
78:e0:ff:d1:4e:11:d9:ef:35:a6:2e:2c:38:1a:d5:6d:39:a3:
30:93:ac:24:21:34:b8:10:0b:4d:1e:98:08:35:9d:18:62:f9:
51:8a:06:b2:49:59:79:cd:2a:11:29:e4:74:be:5a:30:f2:bd:
80:61:1d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:22:34 2025 by rpki-client