Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5c7b8783-b580-30a3-b1d5-4a0f9a2ff1cd.roa
File: 5c7b8783-b580-30a3-b1d5-4a0f9a2ff1cd.roa (raw, json)
Hash identifier: 6NzaVcU27t/hOCCjRl5D9vS9o+N8PsMsWxQokszByoY=
Subject key identifier: CA:42:65:59:42:13:DB:9B:A7:FB:A8:2F:29:96:AC:99:CB:07:D3:A8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E2125A01206234F04559D7540
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5c7b8783-b580-30a3-b1d5-4a0f9a2ff1cd.roa
Signing time: Fri 03 Jun 2022 12:00:00 +0000
ROA not before: Fri 03 Jun 2022 12:00:00 +0000
ROA not after: Sat 09 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.248.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:21:25:a0:12:06:23:4f:04:55:9d:75:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 3 12:00:00 2022 GMT
Not After : Jul 9 04:00:00 2022 GMT
Subject: CN=dbda9c9e-cd89-4cbc-bc6f-f5a0a4105bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d3:c1:01:da:ea:a8:eb:bc:47:b3:c2:b1:b1:
97:de:c0:6d:bb:69:12:79:a6:97:2f:95:e5:f4:ba:
a6:5f:c2:ff:09:f8:d7:87:c6:bf:47:aa:1f:78:f9:
17:76:00:24:e4:95:b3:f6:f1:64:6b:b9:02:6b:55:
f9:b7:8d:0b:33:96:ae:fa:47:ca:5e:2d:d5:be:c1:
ce:ea:b9:ef:33:d2:f4:e3:ea:ac:80:ae:65:f1:ce:
96:da:37:a4:05:70:b3:f8:83:1d:c4:51:1c:75:24:
25:34:d0:c0:8d:63:d8:ef:8e:9d:93:23:c2:3d:b9:
4a:bb:60:e0:ec:46:f8:f4:c6:84:15:d5:ee:53:30:
a0:3a:9f:58:2d:b0:53:88:9c:5c:28:c1:01:fa:78:
b2:de:f3:12:3b:12:b4:fe:c7:51:d0:80:2a:c8:b8:
eb:e2:c7:61:38:28:da:03:dc:4d:e4:13:33:34:96:
08:6a:1a:29:9a:2d:4a:51:e2:5f:f4:fd:85:b4:3d:
53:17:3f:52:73:70:ed:0a:09:38:48:06:e8:df:cb:
1a:ce:6c:f6:33:2e:8b:1f:bd:78:34:42:6e:3c:95:
78:0d:d8:ef:59:fd:a7:02:c3:19:f9:5e:93:8f:15:
04:08:f5:33:3a:b4:73:ed:1e:76:7b:1c:18:71:d4:
20:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:42:65:59:42:13:DB:9B:A7:FB:A8:2F:29:96:AC:99:CB:07:D3:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5c7b8783-b580-30a3-b1d5-4a0f9a2ff1cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.248.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:f3:4a:3a:ed:aa:36:a2:48:2a:38:c7:15:8c:e5:b7:cf:ad:
2e:de:8b:3e:9a:f9:4a:4e:94:59:61:fd:9d:54:f6:21:a6:01:
3c:c9:4e:bb:69:29:c2:2e:0f:a9:a0:06:2a:10:40:f6:41:6e:
ec:f6:25:7b:2d:b6:28:3c:56:54:9d:c0:fe:2c:f2:3b:54:41:
23:73:ac:a8:7b:f6:9d:2b:36:59:13:e2:9f:b6:bd:97:31:45:
be:bd:ba:d5:41:e5:bb:88:eb:aa:67:d3:b1:b5:4f:4e:65:c6:
ab:49:0e:f8:5f:bc:70:2a:bb:d6:cd:4c:f9:77:0d:0e:e1:6c:
32:e8:50:fe:ea:e9:eb:2c:9c:17:38:76:c1:5a:77:1d:b4:9e:
a7:3d:d6:06:21:e3:21:2e:a3:b3:08:77:6e:83:ad:56:e3:1d:
d0:dd:02:55:75:42:d7:e3:1b:57:ce:29:b2:69:82:59:09:26:
5b:89:87:a4:00:de:f8:48:46:66:43:e3:4e:1e:27:40:f5:c1:
93:2e:14:09:a9:2d:26:49:7f:c5:da:a3:8c:64:40:e3:0b:39:
c9:06:02:2b:6e:9c:2c:f6:dc:c7:4b:13:60:2a:eb:61:aa:b1:
34:44:ee:ff:f8:ed:8d:7d:69:b7:2e:50:e1:1b:c9:58:9d:e5:
be:f0:01:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:24:24 2025 by rpki-client