Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c40a5db-a22e-3134-8594-f8d10e2b754b.roa
File: 2c40a5db-a22e-3134-8594-f8d10e2b754b.roa (raw, json)
Hash identifier: zzFGzC4nD5zGofogT7mCLumhhqU+QkeO2AVDabjPA8c=
Subject key identifier: 57:F8:AC:EE:C8:70:70:81:83:29:A3:E8:13:13:4D:19:4E:5B:CC:43
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA73431E98AEFC7B0D6131600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c40a5db-a22e-3134-8594-f8d10e2b754b.roa
Signing time: Fri 21 Oct 2022 12:00:00 +0000
ROA not before: Fri 21 Oct 2022 12:00:00 +0000
ROA not after: Sat 26 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.228.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a7:34:31:e9:8a:ef:c7:b0:d6:13:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 12:00:00 2022 GMT
Not After : Nov 26 05:00:00 2022 GMT
Subject: CN=126f8998-c196-4e2f-845e-1c93738fe7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:fd:dd:9b:38:3e:b7:32:83:06:05:d5:a6:
93:7d:ac:dd:44:13:29:9e:37:ec:3e:7a:3b:05:78:
1f:93:0c:3a:96:b5:a3:98:04:65:f5:d9:55:8b:50:
37:40:75:f2:47:03:a9:da:25:b4:0b:44:b3:fb:d7:
b4:41:9e:94:fa:34:e7:b6:17:a1:75:87:84:70:7c:
78:9f:29:4f:da:30:02:84:4c:54:6e:77:19:3e:31:
28:d2:74:76:3c:b2:55:bd:c3:7e:a5:a0:4b:31:7b:
4e:5e:84:88:e7:14:f3:d9:e8:bc:09:fe:3d:ed:da:
0c:e4:c9:78:fd:ee:b4:b5:97:13:de:41:e8:d4:8a:
1a:ae:87:bd:a1:df:10:fa:06:47:60:30:2b:12:95:
ba:c5:96:70:04:2a:7d:f3:b6:b5:96:67:8c:5d:4b:
49:7f:39:c0:b7:bd:3f:08:18:b7:54:81:5d:49:2f:
b8:44:8f:3a:4f:95:e5:5e:a3:c0:06:90:fe:18:f2:
e7:07:3b:92:38:2a:21:79:5e:2c:06:d6:82:20:08:
0d:ee:5e:50:a1:9e:26:21:3d:09:b9:68:a6:65:08:
f9:ab:eb:40:b4:1a:6b:e2:63:ec:27:bf:38:24:17:
80:bd:32:e2:39:da:1f:5d:35:3c:0f:85:41:51:28:
5d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F8:AC:EE:C8:70:70:81:83:29:A3:E8:13:13:4D:19:4E:5B:CC:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c40a5db-a22e-3134-8594-f8d10e2b754b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.228.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:ab:12:b6:28:7a:db:95:9b:d3:ca:d8:9a:d6:16:99:31:14:
15:55:df:4f:db:c7:9b:dc:0c:68:f5:de:a9:73:a8:a8:66:f5:
17:48:6b:67:6b:ef:45:a4:f0:c4:9f:36:7c:b9:ec:b6:91:75:
d7:69:3b:eb:b1:79:62:08:52:0a:6a:ea:74:bf:58:27:8a:8a:
55:1d:41:ae:84:9b:77:0e:1e:db:92:11:87:44:4d:78:5d:cf:
01:bf:77:a3:3e:d8:8d:9a:11:b6:81:2d:a0:47:63:1a:38:91:
a5:14:3e:7d:fc:43:d0:30:97:60:27:bd:08:0a:8d:d7:14:0b:
7a:cc:24:0b:4d:f0:02:df:6d:61:87:93:8d:f6:fe:d3:34:f5:
8c:92:47:1f:f0:af:aa:56:16:13:84:68:c7:ed:a9:8d:98:ef:
32:9f:24:c7:7f:f0:2a:d7:4d:b4:17:a2:8e:ca:c2:73:e1:06:
98:d3:14:26:b4:d0:3b:e1:fa:59:0e:36:23:d0:c8:2b:f0:02:
50:84:6a:5c:8e:52:23:f8:33:c6:4a:10:63:72:3e:54:00:92:
d4:42:44:cf:1c:e4:b0:ef:b9:dd:53:a9:54:7a:46:a9:41:89:
37:20:cb:b6:9e:8e:c0:68:22:b2:f1:13:18:98:10:52:e7:73:
72:d3:4a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:28:17 2025 by rpki-client