Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5fc20f5d-2021-32ce-be14-160f43317418.roa
File: 5fc20f5d-2021-32ce-be14-160f43317418.roa (raw, json)
Hash identifier: rTCH+I9eoKb6ws5dlM6nCAhE1Mio1ysMUiPjPKS1E8M=
Subject key identifier: 4C:46:22:29:9D:40:C6:C2:50:13:0E:3D:54:3B:4C:3B:89:A1:E3:A3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA9A5F69E87EB2A46DD26EE80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5fc20f5d-2021-32ce-be14-160f43317418.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a9:a5:f6:9e:87:eb:2a:46:dd:26:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=07e74c31-7cc6-4302-b830-c6d85048be85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:36:2b:10:cc:c6:96:88:5b:23:b5:a0:6d:
19:0b:e5:af:fa:51:72:93:ba:a1:7f:39:a1:63:b3:
6c:f3:53:d6:57:1a:f0:0b:64:27:c5:e7:21:c3:bd:
95:93:be:dc:04:47:7d:46:a9:74:97:69:61:e4:7e:
96:3b:86:74:58:b8:f9:e0:c0:ac:79:e2:3a:31:6f:
fc:d6:65:19:89:1e:c0:53:64:5d:0f:2c:13:00:11:
06:c7:b6:7c:38:ce:69:c6:9e:d0:c7:d0:a0:e9:9b:
99:7a:07:eb:b5:5a:dd:aa:9c:a7:35:8e:74:31:0a:
88:ff:7c:3a:09:cc:60:97:ed:6a:ea:f4:aa:8f:68:
ef:e1:15:97:cf:79:02:e2:e3:c4:ea:bf:56:ed:23:
f9:33:da:32:54:5b:69:9b:22:8b:38:42:43:00:3e:
48:53:9f:92:9a:30:15:82:d4:01:58:71:7c:31:4d:
1e:3e:a7:e6:92:e6:cb:60:31:d1:60:1e:9b:64:95:
6e:9f:c6:28:d2:8c:19:e2:22:20:06:18:9a:01:33:
67:4b:d8:f4:b3:ca:a8:79:8f:95:f6:91:14:30:55:
9f:95:28:f8:16:04:84:d2:af:a8:de:10:b0:6a:c9:
d9:db:5d:e9:17:d7:3e:9c:e4:c7:d9:77:35:96:5f:
25:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:46:22:29:9D:40:C6:C2:50:13:0E:3D:54:3B:4C:3B:89:A1:E3:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5fc20f5d-2021-32ce-be14-160f43317418.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:02:01:a2:0a:0e:08:d8:5e:0e:d7:c0:bd:3e:6b:ca:1e:ab:
ab:a4:ce:a0:56:e2:ce:7f:1e:a5:20:6a:aa:14:e8:bf:89:ee:
f9:72:08:39:83:8c:67:4a:73:22:cf:a4:80:28:8e:97:7f:50:
39:5d:9c:e1:b7:e7:8f:84:80:4c:88:c4:0f:fc:6f:7f:e9:74:
98:1e:1c:09:6d:3c:2b:02:12:6b:98:81:8e:00:0d:30:f9:dd:
cf:ac:41:7b:fb:e4:4f:4c:5c:c8:f5:25:2d:a0:40:15:a2:01:
f2:ca:6a:08:9b:50:11:70:f4:b5:c6:09:81:a3:0d:91:77:4b:
00:8d:a4:67:70:1d:40:8e:b8:b8:d7:73:89:d6:92:a3:92:60:
8c:23:e7:c7:30:7d:89:27:77:fa:61:fe:08:aa:fa:36:4f:ae:
e1:00:a9:3b:78:b5:8a:fd:26:1d:2c:30:c7:b4:d7:20:da:f4:
2f:ae:5f:ef:5b:72:58:b7:be:5c:00:73:b1:f2:0e:83:37:ef:
3b:e4:02:34:19:67:12:a7:e8:77:b8:84:a9:d0:a6:cf:1e:5e:
02:dd:85:f9:c6:97:18:e9:bf:c2:5d:f5:21:dc:3b:10:e8:11:
9e:6d:f8:87:56:31:c9:32:1e:0a:e5:c7:12:5b:e1:53:c4:b9:
21:4f:54:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:48:17 2025 by rpki-client