Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2869b787-84cf-3ee6-be7b-32c12203cba4.roa
File: 2869b787-84cf-3ee6-be7b-32c12203cba4.roa (raw, json)
Hash identifier: /PYIRiTNhXO4obWTBV//1Hr2Id6YTxlTt4j185eEFU4=
Subject key identifier: D0:D7:67:8C:81:37:54:E3:B1:C0:2F:0B:57:12:66:30:5A:6E:6E:44
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE40DABB13B427E02BBCC7AC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2869b787-84cf-3ee6-be7b-32c12203cba4.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.58.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:0d:ab:b1:3b:42:7e:02:bb:cc:7a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=99bb0366-7493-4c26-ae13-8940dd3f90c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:27:dc:43:2c:32:9f:ee:ed:9e:21:a0:2a:16:
0f:e9:e7:0f:1c:00:95:89:c6:34:5f:58:f1:35:b5:
60:31:63:42:28:b5:58:25:2d:40:95:6e:e3:df:20:
ea:d6:e7:70:35:ae:43:71:09:0a:0e:15:bb:25:d3:
cb:2e:11:43:1f:97:a7:e3:7a:fb:58:42:78:60:20:
43:c8:28:b7:79:a4:35:a0:45:68:5d:66:30:35:62:
9e:96:7e:63:24:be:46:d7:27:89:59:41:2b:c7:0b:
9a:38:b3:27:b7:79:82:e0:15:1d:b2:4b:fa:75:36:
c7:ee:b7:cd:ca:07:bd:1a:e8:a8:0d:11:76:ae:f5:
7b:1b:b5:81:ce:61:13:bd:01:55:f1:da:47:d2:6b:
a2:f8:5c:f0:82:da:02:1a:71:c1:39:39:2a:48:5d:
b0:44:7e:de:b7:2a:56:6d:3c:e0:df:a3:f6:44:a5:
5b:56:92:30:c6:1e:5d:f9:ca:6b:d2:5d:a3:f4:5b:
dd:3b:7a:f0:4b:b5:ca:c6:e4:b5:c6:c8:71:e3:4a:
29:95:a9:67:26:92:7c:10:e2:d9:d9:dc:11:43:9d:
91:70:0a:f4:86:f5:b5:58:1d:f4:e3:9e:bf:e5:04:
7c:0f:31:81:5c:8f:a7:ad:b0:eb:e1:1f:ac:3e:da:
fb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D7:67:8C:81:37:54:E3:B1:C0:2F:0B:57:12:66:30:5A:6E:6E:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2869b787-84cf-3ee6-be7b-32c12203cba4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.58.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:82:a9:53:a7:8f:5f:85:09:6e:8a:b3:46:c3:4e:32:2d:78:
03:62:b3:c1:e6:bb:71:00:3a:92:89:5d:c1:4c:b5:13:72:18:
a7:c6:52:64:2d:06:ab:58:9c:3e:ba:48:10:93:0e:c4:9e:97:
a1:71:91:ba:d8:79:36:51:4d:89:9a:4a:20:ae:cc:fd:15:f7:
24:ab:83:4a:1e:42:f4:fd:08:71:a9:70:96:01:b9:9a:ef:eb:
27:42:b1:f2:ef:5f:74:87:59:62:71:02:5f:bb:1b:a3:90:c0:
6c:90:b2:f6:a9:81:8d:0f:c8:08:c8:a7:6d:c5:4b:5a:a2:49:
f1:e8:41:dd:3d:e6:0e:a6:2d:38:71:37:17:6a:97:77:7d:8b:
96:e3:e4:71:bf:3b:70:a2:f8:a6:53:77:d5:ba:74:c2:96:35:
e0:08:49:d5:f4:5b:cf:f2:52:06:0f:02:c1:d1:59:e1:df:1f:
85:43:26:5f:23:9d:5c:39:a6:f6:66:cf:50:28:b3:69:3b:9f:
85:a1:0f:8d:07:03:54:cf:b3:4a:e3:ae:02:0e:f8:a8:99:0a:
1e:62:c2:f8:87:32:ea:a3:b8:1f:05:a1:59:fb:39:8d:a9:0e:
db:fc:e3:4f:dd:aa:57:4c:51:52:14:c2:da:90:f7:e3:86:4b:
0b:13:9c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:09:11 2025 by rpki-client