Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3c3367ca-1e09-3a76-b8fb-b9fc34c83a6a.roa
File: 3c3367ca-1e09-3a76-b8fb-b9fc34c83a6a.roa (raw, json)
Hash identifier: YrHdJnGX/0RlJ5XP84HwH9mPHvDjGyZUUs/TK+E2Hko=
Subject key identifier: FF:35:37:F8:BC:A1:B5:A5:A3:46:2C:E2:1C:60:E0:68:A2:E3:85:DD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F339C0278889F45CCBE889700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3c3367ca-1e09-3a76-b8fb-b9fc34c83a6a.roa
Signing time: Sat 10 Sep 2022 12:00:00 +0000
ROA not before: Sat 10 Sep 2022 12:00:00 +0000
ROA not after: Sun 16 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.108.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:33:9c:02:78:88:9f:45:cc:be:88:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 10 12:00:00 2022 GMT
Not After : Oct 16 04:00:00 2022 GMT
Subject: CN=8fc0b48a-4c9b-46d8-bcf6-3b430ca71928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:39:3d:5e:12:cc:8d:0b:3e:ff:4a:ae:c6:21:
fb:1e:ca:46:4d:fa:a9:59:c9:c1:fb:86:83:d3:23:
fc:8a:f3:da:9c:bd:38:24:4e:50:c7:42:3a:a7:11:
17:62:34:79:f3:4f:74:69:7a:2c:06:9c:52:7a:b7:
37:f4:7d:3d:62:87:9d:c8:da:89:4f:71:d9:c2:96:
2b:00:0c:5d:33:4f:de:33:c3:ea:a5:bc:bf:1a:12:
fb:fb:3f:28:e8:3e:56:dc:0b:33:ec:52:43:7e:6b:
c9:9c:37:4f:9d:77:15:92:73:29:00:e0:47:a0:32:
b8:24:54:44:d2:2c:f8:22:2f:92:3b:9e:7a:2e:5b:
9e:c7:91:f7:fb:1a:d1:a1:b1:b2:ab:b2:0c:24:32:
37:9f:91:17:f4:40:e9:91:30:b7:1c:82:00:85:18:
2c:cb:c0:c7:60:97:e3:b6:25:2d:e8:56:2c:47:4a:
0c:f2:5f:4a:bb:a9:0b:dc:81:d3:65:bf:00:3e:84:
99:a3:69:31:60:84:67:6d:ee:fa:bb:0b:8b:4f:b5:
51:f5:73:29:52:fd:10:c4:f1:27:ab:6e:63:7c:b2:
cc:58:0f:eb:8b:14:67:15:e4:9a:3a:cf:ae:88:14:
ed:e5:c3:17:67:b6:8b:09:44:96:af:16:e7:6b:c4:
62:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:35:37:F8:BC:A1:B5:A5:A3:46:2C:E2:1C:60:E0:68:A2:E3:85:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3c3367ca-1e09-3a76-b8fb-b9fc34c83a6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.108.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:0e:82:48:84:09:96:21:9d:a2:4c:b8:b4:98:ef:15:b0:1b:
f2:d0:be:1d:f3:13:cd:cc:6d:f4:f2:47:e8:50:58:48:a6:e8:
f9:f5:51:8c:3c:42:ff:b0:cd:0e:42:30:c4:86:6c:09:1d:5d:
0f:21:a2:1a:c4:c7:91:66:3c:5b:1b:48:21:33:a7:fb:68:fb:
0f:d4:d8:c2:ef:63:4f:5d:66:9a:f7:ee:27:21:49:e8:6d:1b:
fa:0b:74:52:65:59:14:ad:fe:49:35:8b:78:db:a1:f3:75:c9:
19:3a:4d:cd:35:b8:1f:75:9c:b8:d2:07:27:67:bb:24:b8:ba:
4c:85:ca:98:af:9e:be:51:ab:ae:82:a6:65:32:97:98:0f:ea:
1a:b8:09:fc:49:1b:41:e9:39:fa:12:54:3d:af:71:2d:eb:97:
e5:0f:12:25:c3:b4:b0:78:2c:8b:bd:de:8f:c5:62:15:36:1e:
a7:e2:5b:ad:3f:fe:74:b5:f7:0f:48:78:1d:6c:a0:00:ff:4c:
f1:c4:71:f3:e7:f6:c0:32:a5:8e:82:a9:10:09:fe:6f:6b:f2:
56:94:1d:d8:b0:54:cd:f9:ca:80:3f:07:ab:df:e6:6d:e8:e2:
88:fd:d2:32:c7:45:a4:79:81:9f:7c:e9:aa:d2:53:31:cd:0a:
64:d7:df:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:35:37 2025 by rpki-client