Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4dfbbb4e-6801-3fe1-bae2-561e0eb51935.roa
File: 4dfbbb4e-6801-3fe1-bae2-561e0eb51935.roa (raw, json)
Hash identifier: x7gYTVoaiOVsRzfp/8JZAzOYKDl4na8uyIj0TsqFGvM=
Subject key identifier: D4:8C:5A:65:69:76:74:14:26:AC:73:1F:7D:25:F5:53:11:43:2D:FE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E928F98DA3559133BCCAF0180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4dfbbb4e-6801-3fe1-bae2-561e0eb51935.roa
Signing time: Thu 14 Jul 2022 12:00:00 +0000
ROA not before: Thu 14 Jul 2022 12:00:00 +0000
ROA not after: Fri 19 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.176.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:92:8f:98:da:35:59:13:3b:cc:af:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 14 12:00:00 2022 GMT
Not After : Aug 19 04:00:00 2022 GMT
Subject: CN=cba34cc9-b009-47a4-9635-52b1726a2fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f1:b6:cf:3b:3a:c5:76:d5:b1:c4:30:b1:9b:
50:7a:77:4e:07:23:ca:b4:db:ab:03:3e:37:77:7c:
3e:fb:2e:6a:55:fe:1e:21:b7:91:3b:65:0b:24:58:
fa:60:58:1a:c1:9b:2a:7b:29:47:ad:29:e3:bc:e7:
03:5a:63:42:3a:dd:bc:e6:60:89:bf:11:45:5e:39:
57:c9:fa:27:f8:9e:16:cf:8c:cf:c7:2b:52:cf:ee:
34:55:3e:bc:25:79:d8:b1:ea:dd:e9:98:0d:24:8e:
5f:9c:1d:e7:8a:be:6a:18:71:e8:5f:1c:65:25:90:
d0:2e:9b:cc:02:c7:48:4a:1b:97:b0:41:3c:9e:26:
34:f2:a0:20:df:73:de:57:02:e0:bd:7d:fc:72:5c:
38:14:82:e9:22:ef:e7:47:2f:d5:72:58:6d:5f:2b:
a4:2f:ce:af:25:6a:ff:36:48:5d:c8:f9:4a:35:00:
4c:a2:30:e5:00:c5:f6:fa:24:32:33:48:85:ba:42:
6c:54:68:84:d9:c7:53:0d:59:6a:93:f2:1f:d9:2b:
43:6d:88:db:49:12:f9:59:43:04:04:58:5b:f4:1c:
27:8a:76:19:4f:02:c3:ea:c7:ff:fc:7f:1b:e2:b1:
23:25:10:f3:00:14:0a:35:e7:e9:85:38:8d:53:30:
cd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8C:5A:65:69:76:74:14:26:AC:73:1F:7D:25:F5:53:11:43:2D:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4dfbbb4e-6801-3fe1-bae2-561e0eb51935.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.176.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:6b:51:a6:87:c8:e7:94:e1:e3:49:45:78:8f:18:51:d8:af:
11:e9:3e:ee:96:8e:ad:5c:e6:d6:f7:b7:63:97:7c:9a:08:68:
02:95:e6:c4:b3:bc:2c:53:76:d0:c5:c6:03:e0:28:b7:1f:c5:
d8:7b:35:b5:b3:4c:63:73:b2:5d:dd:1a:a6:a5:a6:f3:e7:f1:
e1:82:d6:67:5d:3c:6f:ab:15:dc:7f:bd:ef:df:0e:26:5c:1a:
88:fb:25:60:b1:34:a5:95:e3:01:25:15:da:59:7f:36:4a:41:
e4:6b:d9:d3:f3:da:19:3f:10:b6:db:e7:8e:6c:45:21:b8:43:
c8:fa:ac:eb:81:bf:c2:9a:c1:29:91:3c:86:6d:fa:a0:48:11:
c8:c1:9a:fd:06:96:cb:ae:3b:03:fa:1a:12:2a:7c:64:e8:20:
97:90:3e:7e:6e:81:c5:6e:82:2f:e0:ed:19:cd:5f:bb:bb:53:
56:55:9a:4d:54:fc:33:4e:91:c4:89:da:73:fe:09:6e:da:ea:
33:ef:01:ab:ae:6b:0b:d9:bc:59:8e:70:71:46:0f:99:bb:06:
e0:7c:99:3b:d6:31:55:23:d8:f3:67:cb:dd:cb:6b:97:26:25:
fb:82:9c:8d:3e:77:c1:b0:19:85:2d:9b:4f:de:57:d6:00:bc:
38:6e:be:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:39:32 2025 by rpki-client