Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/66797b50-7e7c-37ee-be23-4d285c7bb6b8.roa
File: 66797b50-7e7c-37ee-be23-4d285c7bb6b8.roa (raw, json)
Hash identifier: da1fWOu+V16fkngUbIatVLNH0DMhmHD+aOiKzg2N8z0=
Subject key identifier: E6:9C:83:8A:6D:3B:7F:44:7F:B1:F6:9E:B1:82:EA:60:02:28:2D:2E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840BBA5250DF730B073EAF36BC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/66797b50-7e7c-37ee-be23-4d285c7bb6b8.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.108.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bb:a5:25:0d:f7:30:b0:73:ea:f3:6b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=412b5ed5-7f39-472f-b580-77f9ccab30ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:63:13:b3:ff:2f:46:a1:04:5d:ef:cb:9d:
0b:75:8c:98:11:cf:1f:3d:76:3a:50:73:b1:6d:54:
6b:a9:01:a1:3d:0e:27:63:d7:3f:29:26:71:6e:23:
b0:30:f1:23:71:c3:22:05:ef:9d:c8:2c:5e:cf:28:
f9:15:1b:78:d0:5a:a4:6c:53:fe:e7:db:76:fb:b6:
3f:16:27:71:e4:ed:ca:98:0d:4d:34:dd:da:f4:0d:
7f:14:dd:75:f8:43:e3:8b:70:2e:8c:b0:6f:98:15:
0e:1a:a6:09:f7:3a:ec:95:61:a8:ae:47:99:6d:65:
9e:33:17:cf:4b:0f:fe:37:2c:78:d7:50:b0:85:6d:
9e:f6:a1:5b:10:69:52:94:3d:4b:cc:29:5e:a0:5b:
ef:89:b6:a6:53:60:d0:34:82:14:06:cf:38:94:51:
f1:6b:63:8e:6b:79:4f:d2:88:e8:3d:e4:27:d1:90:
dc:e3:01:3d:41:75:05:92:0d:6d:99:77:e5:d4:f6:
e7:a1:31:b5:1d:47:bb:0d:c7:03:01:31:e9:20:35:
fc:43:50:5b:38:45:f8:a8:7f:83:47:05:42:57:9b:
f0:cb:c4:5c:5c:5e:1e:4a:17:19:69:7f:c0:93:b7:
06:0f:67:a7:90:55:70:67:24:e2:a2:0d:59:04:03:
ed:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9C:83:8A:6D:3B:7F:44:7F:B1:F6:9E:B1:82:EA:60:02:28:2D:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/66797b50-7e7c-37ee-be23-4d285c7bb6b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.108.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:4e:80:c6:d5:d6:5e:b9:da:60:ef:d1:fa:aa:14:fe:d1:4b:
7f:80:b3:5a:9a:36:5e:b0:b0:f2:ab:f6:1c:5f:c4:e5:84:7a:
19:43:3c:6b:13:0b:a5:3f:c4:55:a9:02:63:37:18:40:a0:f0:
e1:9b:78:e4:26:bd:3a:ac:23:60:ab:a1:b7:87:31:6b:43:30:
f7:5e:54:6f:3d:b4:64:d5:a9:93:43:36:59:74:5d:ab:3e:e9:
2c:68:b2:fa:97:ee:32:ab:cc:5e:bb:1f:54:08:84:e4:a2:a1:
36:b4:dc:24:a1:ec:88:73:39:23:54:9f:ef:f9:a4:7d:94:13:
43:af:95:5c:a5:cb:1a:f9:5d:bd:a8:8a:71:c1:7c:86:93:f4:
9f:45:06:6c:84:92:a4:9b:33:7d:6f:ba:1c:4f:6a:2b:c7:20:
d4:58:a3:b6:7e:0b:90:f0:4a:c8:4c:53:15:09:05:f6:45:03:
7c:4e:81:84:ef:fe:43:f2:fa:5e:2d:6a:40:7d:c7:a9:cf:2a:
ec:6b:85:d8:18:57:62:75:81:17:49:8e:c7:b2:42:9a:16:e0:
31:a6:79:79:0b:40:97:c5:eb:8c:9f:c3:21:cc:07:d5:91:8c:
a0:cd:5f:13:6e:2f:d8:1f:30:d9:e1:15:3a:67:fe:57:e2:10:
f4:3e:00:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:12:36 2025 by rpki-client