Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2fa66dd8-8123-3a2a-9256-4b8e877ffe51.roa
File: 2fa66dd8-8123-3a2a-9256-4b8e877ffe51.roa (raw, json)
Hash identifier: JU+snsK+VJ/9RGhmtNT1d1RYEJrhptP8mZmLNS0L6s4=
Subject key identifier: CB:F8:A8:84:A9:8C:39:5C:EC:36:03:8D:C3:93:ED:56:39:77:BF:D1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E48516312DE81E539EF8DBD80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2fa66dd8-8123-3a2a-9256-4b8e877ffe51.roa
Signing time: Fri 17 Jun 2022 12:00:00 +0000
ROA not before: Fri 17 Jun 2022 12:00:00 +0000
ROA not after: Sat 23 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.224.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:48:51:63:12:de:81:e5:39:ef:8d:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 17 12:00:00 2022 GMT
Not After : Jul 23 04:00:00 2022 GMT
Subject: CN=29410b81-17f6-4e3d-8161-4be2c447d65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:43:7c:72:c9:85:a3:5b:b1:68:68:21:ea:9f:
3b:8b:01:e8:fc:3f:1c:78:e1:18:07:79:69:b9:ca:
a9:d0:7a:63:cb:4c:48:fa:8d:7d:ce:96:eb:2a:b0:
ad:d3:be:18:d4:d5:d2:b7:85:c3:b7:f7:ea:96:4f:
ef:4a:54:aa:f9:da:db:a0:57:8a:e2:73:ea:d3:92:
0b:2f:cd:63:ac:f7:c2:91:77:ad:34:77:ba:7b:49:
cb:a2:39:23:26:bf:15:b1:e3:fa:19:5e:ed:0c:f1:
ce:1b:c1:ee:01:22:9a:0c:97:1e:65:d0:22:41:3b:
1a:f4:12:65:c3:7a:37:ed:9d:51:af:21:05:50:ec:
55:ca:0c:52:6c:b1:bb:c2:8a:49:14:f2:31:a0:b8:
34:65:57:d8:9f:26:7b:cc:fe:eb:20:14:4c:d2:02:
93:7f:17:3a:6d:46:7f:27:2d:60:c7:21:bd:d7:e9:
87:ae:cb:33:25:f3:bd:af:91:39:3e:16:75:9c:f5:
8f:df:87:38:68:dc:2a:88:08:32:2b:d6:7d:c0:cf:
78:9f:06:c2:5e:3d:9f:e5:5a:81:9b:62:7f:68:19:
ad:82:0e:6f:9e:b3:64:25:99:64:82:0b:21:0e:b2:
e2:a8:08:c2:d7:79:1e:98:30:b9:83:33:aa:96:e8:
37:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F8:A8:84:A9:8C:39:5C:EC:36:03:8D:C3:93:ED:56:39:77:BF:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2fa66dd8-8123-3a2a-9256-4b8e877ffe51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.224.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:e3:c5:e9:ba:e4:aa:27:ae:2b:97:55:8a:3f:cc:a5:43:5d:
0b:7c:ba:c0:b0:f2:bf:95:3c:5e:35:61:9e:29:3a:08:73:7f:
c5:38:24:9b:d5:e6:ba:60:33:35:40:68:76:67:3d:8f:15:99:
71:f3:00:35:5c:cd:ab:3a:eb:9a:7f:c1:59:e9:4b:32:e1:7c:
a1:44:17:5e:64:ca:cc:99:8b:29:97:09:2e:66:d5:0c:49:f8:
93:66:25:f1:4d:36:10:b8:fe:a5:15:8d:b0:45:af:fe:a2:5a:
81:87:8e:9b:0e:f9:7e:d6:a7:f9:0d:5b:e3:09:f7:c3:ae:57:
e6:b1:e0:33:57:33:86:52:dd:96:60:c8:f1:f5:5c:bf:4f:a4:
f0:f7:a2:38:cd:be:7e:78:a7:60:ce:88:d2:03:27:5b:16:28:
8e:7f:6d:a3:28:2a:91:18:bb:a6:27:9a:62:59:c7:4a:11:fe:
8d:7f:11:d1:08:9c:12:ca:b7:93:7d:56:75:7b:61:5b:53:45:
db:a7:ed:db:4a:17:58:bd:96:25:7c:f7:a6:09:1e:fa:3b:4f:
61:d7:49:9e:a6:f8:9c:44:fb:d4:e2:9f:f1:ad:79:03:82:b2:
a2:b3:79:cb:19:0f:b3:fd:d6:69:69:55:23:13:f8:0f:bd:24:
e2:8d:65:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:39:32 2025 by rpki-client