Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4bed84c6-b255-315d-8c31-ffe80c5e0d00.roa
File: 4bed84c6-b255-315d-8c31-ffe80c5e0d00.roa (raw, json)
Hash identifier: mZ+XUVw814kDAIr/es8epeXjciK2Y2FOvgUFQ1zdv7Q=
Subject key identifier: D2:26:6E:76:95:33:D4:BF:68:75:53:36:6D:00:E7:78:93:CB:CE:EB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840196EBD34905B745E25AA3000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4bed84c6-b255-315d-8c31-ffe80c5e0d00.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.146.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:19:6e:bd:34:90:5b:74:5e:25:aa:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=166d01e8-41ff-4463-9ec2-6e99f506fa83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8c:08:d9:94:2f:d1:de:cd:56:3a:5e:51:ed:
6a:3e:24:55:ec:76:b0:8f:66:a8:53:23:bf:e8:1b:
b4:a1:b4:93:ba:b1:dd:49:ed:51:0b:f0:c4:f6:45:
48:ab:d3:b0:66:5a:64:cd:76:29:d0:d7:ba:5a:bb:
8d:85:a6:ff:ce:9b:61:75:f0:53:a0:42:4d:7f:9d:
2d:cf:56:5f:80:e4:f3:65:97:e3:d3:d1:3e:8a:60:
aa:c6:a0:9b:1b:83:9b:96:fe:7a:b4:82:c5:62:a8:
87:7f:25:dc:1b:5e:88:ec:7f:46:4f:d4:ca:24:72:
66:c9:9c:f8:9c:93:09:c6:7e:31:27:4b:7d:13:bd:
31:cd:cb:4d:8f:dc:4f:a0:db:d1:66:d3:c3:aa:f8:
86:3c:e9:83:04:f9:3e:ea:bb:ff:67:d4:51:6c:a7:
4c:ad:c7:64:78:97:69:61:9d:df:b3:b8:a3:66:41:
ad:6c:c2:bf:cd:dc:aa:c5:d9:d1:3a:a7:30:ab:9d:
23:2b:c0:a3:5c:90:2b:c0:a0:a8:32:a1:93:58:c9:
cf:f7:f2:52:16:7f:a3:46:ad:79:cc:d2:bc:4b:2c:
cb:0a:15:bf:9d:51:ce:9c:1a:3c:88:31:99:65:7a:
49:3f:0d:a3:0d:7e:07:4f:40:9b:76:3a:5b:25:5a:
55:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:26:6E:76:95:33:D4:BF:68:75:53:36:6D:00:E7:78:93:CB:CE:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4bed84c6-b255-315d-8c31-ffe80c5e0d00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.146.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:af:09:84:20:b6:7c:1d:17:6d:b5:a6:94:5b:a0:36:8b:8d:
56:31:15:d4:6f:93:02:35:db:ff:de:e8:9a:4a:f3:0e:d9:3a:
09:74:3e:51:40:a7:b1:73:80:7d:48:b3:08:38:30:a5:67:c9:
a2:7c:43:de:ed:a2:2d:28:be:3b:2c:2d:1a:d5:63:aa:93:70:
79:0e:ae:22:60:40:e3:40:d4:fc:7a:b7:7b:91:68:14:fc:f9:
21:b0:a9:db:85:39:30:61:54:4b:7d:cf:6e:18:ff:07:a7:d2:
e5:f4:b9:7c:d3:e0:c0:f2:93:01:24:47:e1:ee:3b:c2:76:1c:
42:ec:db:b8:98:11:4f:66:15:7b:ac:fc:e9:70:66:21:24:8f:
6a:f7:f2:67:a0:8c:97:f4:4a:44:26:c9:2e:a5:4b:a7:1d:20:
36:7a:64:b7:ed:b8:4a:ae:33:cd:4d:8a:f0:79:2e:63:fb:71:
c3:44:fc:bb:99:20:ff:d1:ff:1e:53:57:e8:b8:2c:74:71:0e:
39:de:66:a9:6e:b7:b2:a1:c4:f9:f1:23:09:8c:21:3e:26:46:
9e:a7:06:5a:3d:d0:5e:af:ba:a7:f3:1a:92:23:48:83:8f:cf:
da:ef:6d:b0:50:c4:11:00:24:5f:a7:bb:b6:47:0a:ea:57:a9:
4f:a3:b0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:12:46 2025 by rpki-client