Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b81f827-6847-35e6-937f-a2ed2fbb0fd4.roa
File: 3b81f827-6847-35e6-937f-a2ed2fbb0fd4.roa (raw, json)
Hash identifier: Q7v2hqbMfAe15iU/CyhTSxfLLIF/9W5LvgM5b8TKeqs=
Subject key identifier: D8:19:D7:CD:B7:0C:98:35:08:20:B5:0E:95:4F:73:30:52:53:E6:6A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EB99DCB0002990B15BA540F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b81f827-6847-35e6-937f-a2ed2fbb0fd4.roa
Signing time: Thu 28 Jul 2022 12:00:00 +0000
ROA not before: Thu 28 Jul 2022 12:00:00 +0000
ROA not after: Fri 02 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.132.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b9:9d:cb:00:02:99:0b:15:ba:54:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 28 12:00:00 2022 GMT
Not After : Sep 2 04:00:00 2022 GMT
Subject: CN=8969edf0-fec1-46a6-bbd2-a66b224687a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e4:a4:50:62:bf:ad:29:1a:2a:00:eb:de:15:
4a:68:82:e7:57:e8:fa:4e:54:20:0d:c2:93:8f:6e:
9d:1a:37:ee:0a:77:d0:78:67:05:6d:8f:fa:b8:eb:
48:79:8e:f6:fe:30:ec:fe:89:ae:c2:72:92:27:34:
13:6e:a6:3f:0d:e5:57:90:f0:71:33:82:84:bd:41:
01:86:89:a3:48:ae:01:ee:de:2a:e2:e4:6a:5f:f0:
79:1b:ae:ab:8a:ef:ae:34:a8:50:49:60:12:11:e9:
68:ea:d9:96:7c:cd:58:04:7e:31:08:9a:45:3c:87:
9e:c3:96:22:99:d8:e4:d9:60:7d:56:f0:2e:21:11:
2b:8c:9a:78:cd:f5:28:c0:49:e6:f1:fa:21:ad:0d:
00:19:65:86:f3:41:69:6d:cb:d6:c8:ff:9f:c8:08:
cd:a8:54:a1:03:51:ec:6d:7f:8a:df:98:91:a6:9b:
61:a2:d9:61:b1:78:8d:f1:48:ce:86:9e:07:09:51:
f0:d6:32:5d:d8:28:31:6e:0b:89:18:b4:0f:3b:3f:
32:0c:e4:50:42:ad:fc:e9:aa:09:b3:7d:af:5b:96:
22:9f:c6:38:3f:19:5b:0d:18:a5:ee:0f:68:e7:34:
ba:18:01:f3:5a:28:df:c4:45:24:e3:8f:59:ae:1e:
fe:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:19:D7:CD:B7:0C:98:35:08:20:B5:0E:95:4F:73:30:52:53:E6:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b81f827-6847-35e6-937f-a2ed2fbb0fd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.132.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:83:0a:82:cb:e7:29:07:dc:2f:1e:ff:6f:73:77:50:9e:2a:
9f:ad:aa:2b:9f:62:8a:f6:f7:df:e4:5e:e3:41:bb:0d:f8:87:
7b:45:4d:b2:e8:73:63:55:69:9f:a2:85:66:89:74:03:69:0d:
09:bb:db:f0:4b:3b:ae:df:e0:b6:20:f3:55:c7:78:0a:3b:46:
b4:0a:aa:ef:30:59:2f:01:1f:47:9e:a5:10:4f:09:13:cc:18:
0e:de:a5:5d:93:a9:a3:ef:0a:83:eb:20:f2:96:7b:84:12:2d:
e0:9f:a2:b8:1e:ff:c3:2b:a9:ba:88:fe:b8:ff:37:be:61:31:
55:8c:ce:cb:a8:09:5f:b2:0e:fb:32:40:36:87:4d:7b:3e:43:
f4:5e:48:d4:d4:0e:31:f9:02:30:0f:4d:14:ef:73:a1:0e:f3:
b9:84:cf:e3:7e:96:a2:5b:cf:31:56:54:44:62:ed:ee:1b:bf:
cc:f3:7d:23:f2:98:e6:b6:ae:31:ea:db:bb:ed:22:82:ad:44:
11:c2:4b:e9:fc:01:a1:89:6b:a1:51:ee:a0:c4:9b:2d:ef:06:
93:06:e4:1d:20:52:78:40:b9:95:ca:c6:1c:09:27:79:0e:3f:
f7:49:b5:54:da:8b:9b:25:f6:e5:fd:ef:2c:04:48:a6:42:9b:
18:b1:84:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:17:46 2025 by rpki-client