Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ccbeda8-5817-38f4-830c-b4b71b70505c.roa
File: 4ccbeda8-5817-38f4-830c-b4b71b70505c.roa (raw, json)
Hash identifier: jIfClCSfnUFQDJt22LLk/hOUm8n4ytXSqq4/1dO+KFo=
Subject key identifier: 44:7D:A2:D8:3D:E0:D9:BB:A0:D5:33:F7:FC:29:53:8F:4D:B9:60:35
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF899B28DF519CF8C4FB09808
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ccbeda8-5817-38f4-830c-b4b71b70505c.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.60.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f8:99:b2:8d:f5:19:cf:8c:4f:b0:98:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=72416066-1a75-4b3d-8c41-818c2f0345ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:68:3d:ce:5b:35:75:d3:54:05:00:46:27:60:
9e:cf:c1:57:c4:d6:0b:b7:c0:4e:d2:31:18:6a:8f:
47:4a:66:a8:4d:7c:e0:0a:da:d7:5f:83:a7:64:ca:
6a:16:28:ea:df:d8:f1:b3:3b:c0:72:ab:77:d7:c8:
0d:b4:1b:4a:bb:79:22:c0:17:8f:07:c6:db:92:94:
b2:9f:10:6f:1c:a2:db:6e:ea:f4:42:d4:de:32:ce:
e2:3a:37:6e:fc:36:31:90:79:b4:5d:6b:cb:68:47:
a6:60:5b:8c:cf:d0:74:08:eb:69:a5:e7:88:c4:80:
96:e8:41:f7:39:59:b6:39:af:9f:a7:8a:b9:32:96:
ba:c2:ae:0e:b2:13:b0:63:75:9d:8a:e8:77:6e:b6:
8e:df:92:11:3a:f2:83:2d:67:66:2f:eb:b8:b3:8c:
34:45:1b:e3:2e:6f:8c:ac:08:80:9c:f9:12:2e:6f:
2d:75:0e:1b:bc:c8:2e:68:53:29:3e:8d:7c:a0:cc:
fc:6f:e3:74:24:6b:47:84:62:b5:3a:9e:db:42:4a:
eb:f4:c1:a0:ec:3b:5c:05:48:7e:a8:a2:81:06:4d:
87:c9:97:07:af:3e:5d:78:c3:50:02:b1:f2:90:6a:
7c:dc:26:ac:20:77:83:c4:09:61:ce:9e:8e:ec:d4:
fc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7D:A2:D8:3D:E0:D9:BB:A0:D5:33:F7:FC:29:53:8F:4D:B9:60:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ccbeda8-5817-38f4-830c-b4b71b70505c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.60.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:df:54:fb:36:61:f6:aa:b1:0b:60:05:dc:15:3a:30:11:27:
80:6a:5a:00:65:f7:b7:d2:c9:f6:6a:e0:b8:0c:f3:fc:b4:b2:
b1:dd:ed:52:f1:e2:21:e7:ea:22:42:74:11:0a:6d:e2:54:b6:
82:4c:ca:2a:60:16:38:fd:28:cc:70:ce:9f:74:98:d9:90:dd:
9a:b7:71:ce:0e:e4:eb:0e:d6:09:7b:ac:4c:ee:15:7c:84:54:
16:4c:dd:48:d3:16:a6:b9:20:ff:10:7d:75:c8:6d:89:c1:c6:
de:fd:a1:9c:b5:a8:0c:b9:c5:b2:c6:6b:20:05:1d:7f:34:d9:
f5:55:fd:dd:3c:e5:5a:93:49:e8:b2:d6:cc:6d:b3:f0:b5:79:
e9:9b:c5:7e:c3:9c:3e:be:e5:c9:6b:4b:0c:c1:e3:4c:5d:6c:
66:be:91:ce:2e:92:06:21:29:50:d9:71:e6:81:a5:d8:2c:e3:
32:82:a2:3a:27:2d:4a:88:86:a8:85:16:78:f0:d1:34:73:26:
62:3f:ae:dd:d4:f3:69:ec:c4:76:9e:76:fd:a1:cb:09:35:f8:
04:a2:f3:3e:7f:98:86:13:9b:88:9e:8b:11:19:c7:af:af:e9:
c0:cc:b4:de:5d:ad:20:b4:15:d1:82:5b:dd:0e:c3:01:95:1f:
ae:8b:35:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:37:35 2025 by rpki-client