Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/645da8ce-c854-329f-99f4-a9c2a1ded2c7.roa
File: 645da8ce-c854-329f-99f4-a9c2a1ded2c7.roa (raw, json)
Hash identifier: ggASR03OlU50TdfcV83DAQNK7i4kC/2100jOy3IFatA=
Subject key identifier: 3E:62:77:76:12:3D:B4:DA:92:96:C1:5B:31:A3:06:2B:AB:B0:B2:94
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DFA1EFECD1F55153871CF9D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/645da8ce-c854-329f-99f4-a9c2a1ded2c7.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.220.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:fa:1e:fe:cd:1f:55:15:38:71:cf:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=44340410-a063-4722-842e-c3763c67ebcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:19:cb:81:da:7f:c8:64:ab:0b:e8:e4:b7:bf:
97:6e:14:40:15:f0:67:fc:34:ce:82:5d:b7:8a:cf:
c4:05:7b:ef:1b:d2:ed:1c:fc:5d:70:c1:78:c4:c6:
d6:bb:ae:7c:c1:0e:ab:f0:8d:49:3a:fd:3e:6f:9c:
82:4c:09:40:33:08:b9:a6:ae:af:81:05:99:d7:aa:
bf:0b:ac:15:f8:ab:13:6e:ec:f5:23:c8:4f:a3:37:
59:a3:17:02:08:9d:cd:27:a6:e4:12:30:69:bd:71:
cd:ff:d9:f0:7f:60:d0:d4:72:3f:d7:9c:1f:22:34:
42:f3:38:3d:cb:75:42:dc:b8:94:9c:b7:90:2c:53:
76:3f:32:cb:72:ab:8e:15:32:c1:59:78:fa:c3:13:
54:50:1b:4f:4d:47:8d:bd:00:79:9f:80:fe:f5:5c:
b9:d4:05:65:c3:88:7e:45:ff:0d:d2:53:9e:7d:45:
9b:a4:65:02:07:07:ae:0f:48:04:da:d4:be:7c:e3:
60:6d:0f:a3:67:97:64:9a:cc:3e:b4:cc:2c:37:65:
2d:33:8a:cf:e3:af:44:93:89:c3:06:b2:bf:6d:6e:
14:e6:bf:7b:0b:37:10:7e:c8:0c:64:fd:f5:c8:8d:
b9:39:8a:15:1d:65:d1:a3:70:97:68:b5:23:62:ba:
26:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:62:77:76:12:3D:B4:DA:92:96:C1:5B:31:A3:06:2B:AB:B0:B2:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/645da8ce-c854-329f-99f4-a9c2a1ded2c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.220.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:72:f5:d9:29:d4:1b:26:05:1c:ca:ae:29:77:4f:48:a5:b1:
0a:7f:81:04:6a:3f:4b:64:2a:e1:5b:50:a4:c0:c1:f0:1b:6d:
92:96:80:a3:d7:1e:2f:62:c9:1e:b7:96:da:5c:ca:c9:aa:53:
e8:a9:ee:44:4a:36:c8:e7:19:a9:dc:95:31:58:68:03:70:0b:
45:61:b4:e4:59:10:81:34:46:6e:e4:9c:a6:50:bc:f8:bb:a8:
d7:e4:af:8a:e8:af:42:62:3e:05:e9:54:04:00:82:51:6d:51:
6d:04:d5:81:ec:8a:1c:10:53:46:ba:a3:0b:83:e6:09:fb:8d:
da:19:d1:49:d3:80:4c:66:f4:00:cc:b6:db:b0:b0:3c:4e:2a:
6e:93:de:67:a8:8d:07:66:9e:86:83:50:fa:6b:d4:37:ac:57:
b1:33:6e:9d:f3:33:2b:50:6e:da:b6:fe:ec:0d:b1:08:8d:a1:
5c:e7:47:67:57:92:22:90:8a:b8:6a:a4:0f:ec:3e:27:18:d7:
54:39:36:fc:b5:6a:04:5c:04:35:41:33:c7:ec:18:6b:c3:12:
2b:39:23:4c:1e:c5:3b:71:e8:6b:cb:95:12:c2:0c:dd:b7:11:
ec:42:93:07:83:ab:91:2e:e8:13:35:18:32:c0:3a:13:dd:19:
1d:98:19:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:07:51 2025 by rpki-client