Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/36ff2d11-2ba3-3f2d-83bd-06a8d1310807.roa
File: 36ff2d11-2ba3-3f2d-83bd-06a8d1310807.roa (raw, json)
Hash identifier: 4ALLerJlSvXGz0m9LNrl46SclcFxovEuA0k+0lmNgCY=
Subject key identifier: EA:26:AC:B1:EE:E3:99:23:15:F5:38:95:0E:68:AB:74:43:A0:B3:AB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCEC87889F9456832EB0B2700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/36ff2d11-2ba3-3f2d-83bd-06a8d1310807.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.248.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ce:c8:78:89:f9:45:68:32:eb:0b:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=6457ad99-9fbf-44eb-8567-8425d64a1cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e8:56:f1:3e:a3:41:4b:a3:e4:2b:13:71:2f:
89:1d:a7:5f:fb:7b:23:76:6f:4e:0d:e3:2d:51:2a:
bf:64:93:3a:5b:d2:47:07:29:7a:99:b0:61:0c:8b:
bc:38:ba:84:cb:fe:a8:aa:a6:89:fc:bc:e9:1b:6d:
e5:d5:8c:b8:b6:9b:db:31:86:cd:fe:c0:ba:b3:36:
59:13:a1:43:32:2e:83:05:c3:b7:79:18:2a:9c:16:
71:ef:9c:7b:fe:f2:e0:9a:7e:44:05:c7:da:60:7b:
fd:37:ed:35:7a:d1:cd:57:b3:cf:cb:62:b0:d2:31:
17:3d:f5:09:71:4c:ff:6a:f5:bf:b4:6b:6b:07:18:
f5:a5:5c:88:5f:0a:4f:09:f3:d5:23:a5:b2:0b:55:
28:9a:b8:c4:05:cf:38:54:2a:aa:42:fb:ba:89:d7:
e2:73:e1:64:40:13:94:33:a4:f4:4b:bc:16:a3:c9:
03:c9:2f:dd:dc:01:a2:1e:71:86:84:d4:44:f9:9d:
10:cf:0d:64:ab:15:79:ae:82:95:55:2e:21:e5:60:
5b:4d:a2:29:c9:a1:8f:06:9c:3b:b5:ed:1f:f8:49:
d9:ed:c2:c7:ab:68:bb:13:f7:29:00:ef:38:ec:75:
57:6e:a2:fb:14:5d:cf:e7:22:46:85:52:dc:de:ea:
ec:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:26:AC:B1:EE:E3:99:23:15:F5:38:95:0E:68:AB:74:43:A0:B3:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/36ff2d11-2ba3-3f2d-83bd-06a8d1310807.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.248.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:86:de:eb:2d:89:c2:7c:29:43:c0:fd:53:60:f5:79:d3:7c:
e7:8c:2c:6e:89:a2:fc:62:ff:6f:b7:28:2b:83:55:d0:e5:b6:
3f:7a:09:1d:00:13:10:8f:c3:cd:83:16:3a:1a:50:f1:16:11:
5d:8f:ad:f0:7f:d0:21:82:9a:8c:ed:0e:47:05:87:57:0d:57:
5c:c0:23:4e:41:f2:7b:93:88:25:87:69:a2:ac:63:38:21:12:
00:39:61:0e:a6:20:0a:64:18:c1:22:e8:78:34:ef:5a:8c:ba:
6f:22:7a:af:c1:9d:b5:41:4d:d2:9c:7a:7c:7f:18:49:cd:1a:
28:aa:57:3b:d4:11:4c:e3:7f:c8:5e:da:9e:1c:55:80:df:85:
c6:7d:31:00:b6:7e:09:f7:dc:8f:73:e3:94:b4:f6:aa:0b:bf:
6b:3d:82:3e:91:a4:e9:e7:9c:f3:5b:6a:03:c7:3f:d6:73:17:
6e:b4:04:2a:2e:87:2d:94:6e:3b:13:52:df:1b:c0:55:37:8f:
10:00:39:ee:93:e9:2b:18:9f:b9:77:0e:e1:df:c7:c7:b4:ea:
77:9a:bb:c5:e1:67:20:19:04:cd:8f:f0:e6:f5:1c:98:03:fe:
cd:71:4d:e7:5d:be:32:10:93:08:cf:69:f6:25:04:92:25:6d:
1f:1f:c9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:15:30 2025 by rpki-client