Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29a78945-f82a-36f7-99de-ffb33232c263.roa
File: 29a78945-f82a-36f7-99de-ffb33232c263.roa (raw, json)
Hash identifier: Mm9zzn0LFh9NLUJYD2HfAlpNLC4Rn8SxmXEZsNLSjQ8=
Subject key identifier: 7D:7A:31:BF:BB:00:1B:37:CC:43:8A:8A:55:67:AE:42:EC:B9:0A:1F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F59C37B157C06081DAD7E4780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29a78945-f82a-36f7-99de-ffb33232c263.roa
Signing time: Fri 23 Sep 2022 12:00:00 +0000
ROA not before: Fri 23 Sep 2022 12:00:00 +0000
ROA not after: Sat 29 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.196.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:59:c3:7b:15:7c:06:08:1d:ad:7e:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 23 12:00:00 2022 GMT
Not After : Oct 29 04:00:00 2022 GMT
Subject: CN=2dc2cfa9-ab56-47d7-9f6d-fa04e8a3cc83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a1:b8:2c:9c:96:31:8f:6d:6c:f6:42:9f:7a:
23:80:26:d1:38:76:56:9a:ac:9a:f8:d9:fc:78:6f:
16:98:82:1a:83:62:ca:15:13:a4:63:21:ff:a7:02:
af:70:f0:af:33:f1:0f:97:2b:40:a2:a4:b8:66:b2:
bf:c0:9f:a1:52:b2:b8:7c:54:02:fb:86:9e:ec:21:
2f:4c:10:1f:85:bd:ad:16:65:af:e7:46:60:23:9a:
d5:7d:15:9a:49:34:40:3c:97:5b:5c:b5:ef:de:04:
15:37:56:07:b9:84:b6:1e:fb:ef:d7:bd:47:bc:af:
1b:f7:fb:fd:f5:e9:bb:08:f6:3d:58:9f:a3:1e:ff:
1d:aa:4c:09:6e:f4:06:aa:86:8e:69:eb:0d:1d:6d:
84:92:0c:89:6f:1b:93:45:20:72:aa:95:94:ef:b1:
7d:94:20:40:12:82:32:3c:27:9f:ab:cf:6d:d4:3a:
79:dc:6d:ec:ba:8d:b0:e5:3a:56:cd:69:96:d7:61:
53:9d:e2:48:5d:47:bd:46:ce:3b:5a:86:e3:9e:3c:
58:91:de:0f:44:c3:cf:73:fc:ac:8e:71:2b:dd:96:
de:d8:7c:10:5a:88:ff:15:88:25:f0:31:4a:73:1f:
7d:05:50:a4:ab:06:4b:62:24:c5:f4:71:6d:36:34:
b2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7A:31:BF:BB:00:1B:37:CC:43:8A:8A:55:67:AE:42:EC:B9:0A:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29a78945-f82a-36f7-99de-ffb33232c263.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.196.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:b7:57:e2:d6:5a:19:25:ab:07:af:89:ec:8f:4a:1f:e9:ce:
0b:72:a8:db:d2:ac:ac:fb:4d:cf:94:63:aa:52:fe:ce:1a:5c:
29:17:32:83:c1:c9:7b:27:0c:f5:13:97:41:3e:7e:3a:a9:a3:
43:0c:49:ed:6d:ff:aa:cb:7d:4c:92:4d:49:f1:a1:89:ef:c2:
a7:49:79:1c:1e:13:c0:3a:8c:2b:b4:50:aa:bb:41:49:c0:5f:
26:17:6a:a4:c2:d4:77:2b:d4:4a:8f:3f:38:88:06:be:95:93:
4e:1b:6c:53:1a:7d:41:c3:43:c8:7e:41:f3:7d:21:8e:a8:b7:
1a:e4:0e:59:de:d6:08:62:40:ab:6c:3f:a7:c8:62:c0:ec:12:
c3:2b:89:3f:6a:e2:45:1d:61:4b:18:f6:c0:1e:03:ff:f4:36:
a0:2e:a5:73:6c:db:f0:30:a4:d7:8f:50:55:f5:bb:63:2d:ae:
24:4d:d0:89:cd:2a:b1:74:28:03:dc:c8:ed:ae:91:aa:8c:ea:
c1:e9:04:fd:ef:a5:7c:1a:ae:b6:c4:bf:78:dd:89:18:08:4e:
e0:93:b4:3b:d1:33:19:f6:31:08:bf:e1:5e:f0:cd:65:b0:1d:
f8:b1:44:86:04:3b:26:ac:a4:22:68:19:b3:5a:c2:8d:d7:c4:
87:59:b2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:15:37 2025 by rpki-client