Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5c69d9bf-55db-3874-a9a2-b4113bf3d6af.roa
File: 5c69d9bf-55db-3874-a9a2-b4113bf3d6af.roa (raw, json)
Hash identifier: pl3FRSQHESV2hAc6ipXDlMEaYiNGMDNfzJ61QKr+7Ds=
Subject key identifier: AC:B0:46:3D:47:5C:39:32:60:EA:80:01:03:1E:C2:E2:8F:56:5A:24
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE4C5C658B30E1849188DD1C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5c69d9bf-55db-3874-a9a2-b4113bf3d6af.roa
Signing time: Fri 12 Aug 2022 12:00:00 +0000
ROA not before: Fri 12 Aug 2022 12:00:00 +0000
ROA not after: Sat 17 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.253.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e4:c5:c6:58:b3:0e:18:49:18:8d:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 12 12:00:00 2022 GMT
Not After : Sep 17 04:00:00 2022 GMT
Subject: CN=c03965d0-9a44-439b-9d95-5b8e812805fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:23:51:65:9f:7f:93:a0:28:ab:bd:da:64:
0c:f1:d5:56:85:fb:fe:c8:6c:12:d8:db:41:12:19:
5d:a5:b3:7e:f1:4b:3f:82:dd:d9:c4:c7:e7:4b:7d:
20:d7:66:a6:01:dc:5b:c2:33:5a:50:20:f4:7c:02:
c4:e2:78:0d:ad:93:07:c4:b7:25:87:e7:8f:e0:0f:
de:85:3e:82:ae:91:57:db:7b:44:b2:3b:d4:d0:55:
fb:9c:fc:fa:da:9e:52:85:27:b4:2b:e5:70:55:a7:
9f:c1:99:ed:91:f5:f8:70:4d:1f:51:97:b7:85:03:
30:12:62:bd:7c:ac:71:40:40:e8:bb:f3:39:7b:88:
59:10:a3:3d:74:fd:5d:66:39:5c:ab:d3:e0:01:e3:
58:28:d0:d0:12:27:e5:be:0c:84:74:ee:68:11:60:
12:9c:77:23:d8:77:bb:2f:81:ad:87:0c:bf:a5:5f:
38:58:d8:cf:22:e8:16:8c:db:89:42:44:dd:50:c6:
1f:0f:4e:ad:16:06:b7:d2:1f:b2:9d:00:ff:d3:4e:
b9:30:47:ff:86:cc:b2:25:fa:2d:cb:e3:47:3e:e8:
46:0a:86:3f:21:02:d4:c4:3c:f6:bc:17:b3:b3:4e:
5e:f6:ab:75:a7:fd:fe:0d:32:2d:f4:23:39:52:27:
a0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B0:46:3D:47:5C:39:32:60:EA:80:01:03:1E:C2:E2:8F:56:5A:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5c69d9bf-55db-3874-a9a2-b4113bf3d6af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.253.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:f1:3a:45:54:04:42:86:99:c3:3d:b3:84:aa:b0:14:2d:ea:
38:7a:ae:7f:b7:a7:9b:5c:5e:ba:99:6d:8f:63:58:f7:49:32:
ea:34:a9:ec:4a:fc:17:14:5a:30:1d:6a:74:bb:70:c9:86:3c:
2d:39:e4:c5:29:ab:f3:fd:02:3c:c3:e7:e1:50:8c:12:ec:ff:
58:7f:30:e7:68:6c:e8:63:eb:9d:70:94:93:0a:bf:c1:85:aa:
1d:2a:6b:1a:a1:f3:66:c3:14:d8:8c:79:d4:da:c6:76:82:dd:
68:fb:6b:ff:a4:7b:dd:41:63:01:9a:c6:49:bd:b1:03:94:f3:
e3:86:37:e3:43:0b:01:48:c5:66:75:bd:d9:da:bd:68:29:fd:
f7:6f:bb:16:0a:90:31:e9:be:01:d0:ee:8a:8d:00:f2:3e:b3:
a2:86:6c:5b:76:b9:7e:f6:97:a5:89:29:d5:67:26:d9:eb:7b:
be:89:b8:73:55:1c:11:2d:11:37:76:8e:17:24:ce:6a:03:8e:
f0:43:0a:5a:f6:04:e5:94:29:b8:67:66:64:93:72:65:5f:df:
b6:7d:94:58:3c:4b:35:ae:3f:e9:c2:75:37:6e:e3:9f:46:ec:
c2:10:de:69:6d:34:89:a6:74:d9:c0:60:d9:67:f9:60:fe:c6:
94:8f:6f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:27:31 2025 by rpki-client