Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/423caef5-ed7f-3599-823f-618873cae602.roa
File: 423caef5-ed7f-3599-823f-618873cae602.roa (raw, json)
Hash identifier: hjKY6WQpchOXE5Uv91dFqsmAjMMxEab33wlEHbRiRZU=
Subject key identifier: 81:C7:38:3A:47:A4:1D:0C:AE:E4:5A:F8:A0:3F:5D:FF:BC:2A:F2:DC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D32A899BAB9FBD84FF230AF00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/423caef5-ed7f-3599-823f-618873cae602.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.224.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:a8:99:ba:b9:fb:d8:4f:f2:30:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=b6e1453a-70fe-4fb4-856e-fb4621e1ea6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:31:dc:4e:26:42:b6:e6:0c:70:59:3e:73:
af:c5:bf:2c:05:b6:f9:d8:f4:ae:d0:17:b7:9d:3d:
02:61:ee:43:46:a2:f9:7c:e6:2b:b5:a6:d6:e1:8a:
eb:53:0b:a7:11:ab:2c:00:7c:f4:6f:71:82:03:ba:
9e:fb:e9:c3:70:c6:ba:e4:d7:d2:5c:06:34:b4:6e:
32:d1:6a:44:9c:30:06:b9:18:43:ea:6a:6a:27:5c:
bc:2d:2e:08:a7:91:09:25:44:9c:1c:79:27:8f:ee:
aa:65:74:99:9f:29:aa:17:88:cf:e7:ed:ed:f7:c8:
65:1e:5f:8f:4b:40:65:13:87:99:8c:b4:32:d2:cc:
22:1e:64:98:a8:f7:bb:1c:3a:89:45:af:5e:e2:c1:
8d:54:53:f8:38:16:35:48:0a:8e:81:53:3c:50:0f:
ba:a6:49:f6:07:03:c6:37:78:61:bc:13:49:8a:67:
06:a5:a4:ed:14:df:0a:9c:12:4e:f0:55:e2:fa:4f:
2e:22:6c:a5:ec:fd:22:ed:f0:34:43:7a:03:3f:46:
20:35:98:ed:8b:80:20:93:50:f2:5a:cc:d9:ab:59:
96:70:21:58:3a:fa:da:57:a3:11:42:2a:cc:0f:88:
16:c4:b0:90:a1:d9:97:fc:51:84:72:3d:96:e0:01:
22:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C7:38:3A:47:A4:1D:0C:AE:E4:5A:F8:A0:3F:5D:FF:BC:2A:F2:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/423caef5-ed7f-3599-823f-618873cae602.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.224.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:d7:cd:79:67:64:cb:f0:30:ed:08:51:14:3a:39:3f:a3:08:
2e:82:b0:ca:91:a1:ec:ff:96:8e:38:ec:31:8a:fd:fa:6d:76:
78:c8:af:cb:65:5a:9a:a0:af:37:99:a9:26:b9:f7:73:72:6d:
94:aa:e5:f3:a0:22:35:36:78:5f:cb:ee:b6:c2:4a:90:7d:aa:
4b:38:ee:ad:aa:15:b2:c9:42:02:ab:a8:b8:d0:25:3b:82:d5:
a3:c8:01:35:52:1f:c9:fe:7f:0a:45:d9:bf:8b:47:d8:ce:9b:
54:24:25:88:4b:4e:0f:81:ec:f9:d5:d1:8d:2b:62:01:8b:52:
db:d9:52:48:4f:b7:2e:6d:6c:7e:4b:a2:2f:b7:e1:dd:a1:80:
e8:22:af:b0:95:e3:55:37:2b:f2:e0:41:67:09:35:59:f0:10:
ed:9c:b4:33:22:b2:7c:24:b2:2b:cc:e5:04:ec:81:70:3f:9b:
e2:ca:6a:8e:01:0a:25:f1:d1:8c:6b:a0:d0:5e:f1:e0:a5:81:
15:a3:73:e1:5d:95:d8:9d:3e:8f:34:fb:4c:c4:e0:86:ee:97:
3c:ec:87:27:6a:6b:0e:89:81:5d:15:8c:3f:b7:47:5f:85:11:
c6:d6:c0:1a:43:e5:92:a1:7d:f5:13:62:2b:24:d7:d4:ca:9a:
41:68:08:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:03:01 2025 by rpki-client