Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4e9f1bb7-d35f-3f75-94e3-dff8a0d3e165.roa
File: 4e9f1bb7-d35f-3f75-94e3-dff8a0d3e165.roa (raw, json)
Hash identifier: OPMn7zqQWyp7iR9JoGS9b+XKgVzA8IkjjZxP2jwsVKk=
Subject key identifier: B8:E7:B8:56:EA:BD:EC:74:22:E2:03:AE:31:8A:65:74:FB:AC:10:17
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D80E98DF57CB2E8F6DDB12580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4e9f1bb7-d35f-3f75-94e3-dff8a0d3e165.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.247.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:e9:8d:f5:7c:b2:e8:f6:dd:b1:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=50a4e3b5-70a7-41b7-a205-becf14edb6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:bf:5f:3b:03:7c:b8:bf:06:61:e6:84:8b:
19:96:3f:ed:26:37:e8:6c:88:60:86:04:ed:b3:8f:
cd:3f:f2:1b:d8:21:34:52:e8:37:e7:b8:27:b7:6b:
2b:60:4a:d8:e6:d1:d3:97:3c:d7:10:a4:13:5d:10:
7b:f5:9c:aa:54:05:4a:41:3d:0f:62:81:ad:8f:11:
b6:9e:bc:8b:b1:b2:38:ca:33:c8:60:36:17:46:04:
09:77:f5:6b:a9:2f:7b:d6:c8:99:27:98:9a:45:af:
a3:61:1f:c3:4c:d4:9b:8a:37:8f:44:0b:e3:87:3e:
4d:e4:a9:d8:95:bd:53:78:55:c1:b8:58:85:c3:51:
08:a5:61:67:07:a0:bf:36:45:36:fa:15:6a:dd:fc:
ae:5c:f3:56:b9:f5:ea:00:87:7c:9f:09:a9:a4:52:
ee:35:ca:c2:b8:d6:5f:89:a2:7f:de:bc:66:cd:12:
2f:12:46:95:73:b9:b5:44:36:7f:b1:8f:c3:7a:72:
b2:66:9c:06:b7:53:4f:ab:24:9d:19:71:4e:ed:30:
51:d5:68:2a:fd:4a:10:8c:2d:f6:96:14:1e:cb:35:
6d:2a:38:c6:ae:20:38:89:5b:e7:c1:b6:18:9f:48:
fc:e5:52:ad:07:1c:e9:e5:49:12:46:ff:d6:1a:00:
db:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E7:B8:56:EA:BD:EC:74:22:E2:03:AE:31:8A:65:74:FB:AC:10:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4e9f1bb7-d35f-3f75-94e3-dff8a0d3e165.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.247.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:c5:ed:48:f7:8b:f7:d7:68:da:a8:3d:eb:0a:7f:1b:b5:fe:
61:0d:cc:4a:1a:16:e1:52:06:76:bc:be:23:42:06:ac:42:4f:
f1:24:32:ab:c5:ba:9e:18:fd:9b:f4:4d:73:39:1a:bd:f4:ad:
f9:84:3e:0e:02:a9:44:14:9f:1c:90:b8:d6:fb:e1:78:ee:bf:
84:00:ae:6f:84:cd:18:d4:41:ff:4b:22:d6:b5:89:90:c4:db:
b7:29:b4:20:f2:ea:0a:93:7f:08:7c:a1:9c:cc:e3:9a:be:0e:
32:cc:5e:ed:3d:68:d4:9b:c6:fe:c5:0f:27:9f:7a:29:73:ba:
0a:bf:06:b1:eb:cd:5d:6a:96:1e:79:aa:97:32:c1:50:e8:f2:
e7:97:bd:0b:47:62:95:79:6a:d9:30:1d:c5:01:d3:c9:e8:06:
99:69:06:94:91:1d:97:de:38:46:df:bb:8f:29:fb:5b:9a:fc:
95:35:e5:44:a5:23:6e:08:ad:fd:4a:11:64:b8:dc:1e:ee:86:
2b:da:74:9c:71:51:0b:2f:a4:75:bc:35:b1:43:47:d2:80:3d:
9b:8c:db:56:22:2a:88:63:2e:5c:b7:93:15:cc:94:73:af:18:
40:8f:c9:d8:94:51:d6:4d:05:80:ae:55:52:27:7b:d5:6d:2f:
71:e0:d5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:24:08 2025 by rpki-client