Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3bc5fddb-89bd-38e7-b9ac-f6c8cf805c85.roa
File: 3bc5fddb-89bd-38e7-b9ac-f6c8cf805c85.roa (raw, json)
Hash identifier: bm0guzgPXQZOhS1Adsq70jNdg9L+SgZ2UI1alFQwGUI=
Subject key identifier: B0:B9:F2:D6:0A:45:C4:42:C5:3F:D2:4A:81:F5:5B:77:54:44:6A:4A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401EC8C9C421FBD14D1C7FFC40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3bc5fddb-89bd-38e7-b9ac-f6c8cf805c85.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.56.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1e:c8:c9:c4:21:fb:d1:4d:1c:7f:fc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=07b2e325-0623-4516-8e15-1374d1b35c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bd:3a:3e:3d:ee:37:11:51:00:59:50:6d:50:
b1:ac:42:66:f0:d6:62:80:ed:91:c8:fe:c2:f2:7f:
19:31:1b:c3:a4:03:84:97:2a:f0:97:00:0f:fe:b9:
df:83:6b:13:07:3b:5e:b6:25:c1:98:e7:dd:bd:72:
2e:df:86:f7:d9:3c:69:6a:c9:c4:a3:56:38:cb:ac:
1a:61:75:b5:e9:3e:2a:c2:bb:f8:3a:2c:6e:57:4b:
4d:0d:60:75:b7:2a:18:4b:71:e3:8d:3d:f6:49:70:
6d:28:ec:29:88:11:ac:77:cf:e2:a2:29:87:d7:5a:
51:d3:06:ba:ec:13:95:13:03:4b:0e:b7:c9:9f:8a:
dd:3a:4a:e1:98:8c:30:d0:40:0e:30:87:3f:ee:da:
05:7d:89:a6:19:5a:92:a5:f8:99:64:08:24:4c:e0:
00:d4:d6:a4:83:e1:30:1d:17:e7:da:b0:d9:82:8b:
22:ca:e2:ee:0c:2a:f2:73:c6:e1:d7:3e:1d:f9:44:
ce:a5:55:18:60:9e:ac:f3:f8:4b:45:61:44:90:df:
08:ed:36:7c:a4:0a:58:8b:ed:db:98:cf:eb:8d:64:
2b:2c:0e:bb:b5:ee:71:46:44:66:77:47:89:71:25:
d7:38:31:42:3e:51:c5:f6:89:ee:99:83:ca:34:c6:
27:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B9:F2:D6:0A:45:C4:42:C5:3F:D2:4A:81:F5:5B:77:54:44:6A:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3bc5fddb-89bd-38e7-b9ac-f6c8cf805c85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.56.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:bf:be:b1:d0:29:68:9b:a0:eb:fa:62:62:2a:2d:15:09:46:
61:62:03:55:c1:e1:f2:9f:52:eb:f2:19:60:5c:20:82:2d:70:
60:62:2a:e3:b7:08:40:53:ec:b9:8b:22:cc:e5:41:dd:4d:ac:
24:d0:b9:ea:8c:c8:15:3f:54:ff:94:ac:29:92:ff:52:03:e3:
5e:cb:d8:0f:e3:a3:23:31:4b:dc:52:49:27:3c:46:b0:ab:07:
d4:8f:03:2c:c3:65:69:7e:86:ee:79:69:63:90:28:23:b0:cd:
86:3f:6d:26:70:53:9f:0b:2d:56:9d:29:ea:b2:02:3c:61:f4:
39:b4:ae:2b:2f:1f:73:65:4f:d6:45:a5:97:1c:26:26:79:f9:
1f:92:fe:41:45:96:b4:18:9a:4a:e6:9a:a5:ef:9d:28:f4:7b:
06:f7:b9:c8:58:87:c3:f3:c7:a3:0f:14:1a:2d:14:1b:d1:d3:
4a:23:c0:53:98:63:d2:09:87:14:79:70:5a:f1:98:88:6c:4b:
7d:03:77:57:58:de:72:ca:cd:93:6a:4f:83:92:e9:c1:96:e5:
d5:7c:d5:f9:d2:af:c1:97:78:28:f3:81:d6:50:8d:53:5a:70:
d6:8c:d4:53:2f:fa:71:46:25:15:ce:3e:cf:2c:92:ca:12:f2:
88:cb:4c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:27:33 2025 by rpki-client