Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/693db697-82db-31fc-90b4-a18f3ae8adac.roa
File: 693db697-82db-31fc-90b4-a18f3ae8adac.roa (raw, json)
Hash identifier: nAbcOX8kyyCJpFDwma0OA+dGAWjRqjVZOqjIdCFlCNY=
Subject key identifier: 77:F1:FA:3B:EB:27:C9:10:94:09:FB:EC:BF:B1:9C:C6:67:69:D8:35
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0CC1F2B4AF08F53DA309B580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/693db697-82db-31fc-90b4-a18f3ae8adac.roa
Signing time: Sat 27 Aug 2022 12:00:00 +0000
ROA not before: Sat 27 Aug 2022 12:00:00 +0000
ROA not after: Sun 02 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.91.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0c:c1:f2:b4:af:08:f5:3d:a3:09:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 27 12:00:00 2022 GMT
Not After : Oct 2 04:00:00 2022 GMT
Subject: CN=8b90e696-8b71-4fe5-8380-ae6f51bf440a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ed:05:f8:55:03:eb:0d:b4:6b:18:ff:06:9d:
49:b8:77:38:86:2a:0a:f4:73:98:8e:11:08:6e:b2:
ca:a1:33:f6:e1:21:bb:bf:bc:f1:93:a4:16:10:a3:
ed:2a:f1:ac:d0:c0:f3:d9:96:7b:d1:e0:9c:9a:ab:
68:3d:68:5a:cb:4b:f1:fa:26:fa:50:a8:e0:8d:5c:
97:19:14:e4:48:46:a5:2f:4c:15:80:84:7b:a8:e5:
53:32:41:01:7f:c8:16:82:d4:d5:b3:62:2d:94:4a:
e8:13:90:2b:71:34:47:7f:e4:fb:06:72:51:14:fd:
36:7a:c0:86:f1:49:f9:a2:32:93:bb:3a:dc:b6:48:
8f:3a:b2:f8:de:21:0e:8b:66:69:fd:4c:72:01:0d:
f0:46:1a:6b:9d:ba:7d:25:20:f6:30:8d:09:04:eb:
38:f4:e8:40:91:38:4e:c6:1e:15:59:12:33:53:13:
e1:91:09:d7:23:1b:eb:64:bf:ac:fe:d8:09:db:22:
c7:8d:a3:12:80:0e:5d:1b:82:bb:69:0b:5b:17:33:
34:19:8a:ed:1e:01:fe:41:a0:03:63:25:d3:48:d8:
0d:59:d1:f9:30:7d:bc:3a:9d:14:a6:3e:15:40:74:
f4:a7:ea:2e:8e:89:e1:b0:94:47:4e:0c:0c:d8:be:
68:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F1:FA:3B:EB:27:C9:10:94:09:FB:EC:BF:B1:9C:C6:67:69:D8:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/693db697-82db-31fc-90b4-a18f3ae8adac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.91.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:9b:12:df:3f:e5:5c:f5:89:22:d1:3b:11:f9:8c:50:a1:6a:
bf:04:81:ff:bc:61:88:77:3d:55:2d:28:ca:ea:c5:87:c3:7f:
48:c1:9e:42:f1:ff:6e:7d:05:79:3f:e3:e0:f9:a7:bf:75:63:
86:41:01:f8:03:22:80:9b:66:96:26:1b:49:3d:4d:d9:24:8d:
2e:0c:7e:9e:04:53:5e:0f:57:3d:8e:c3:b1:f0:55:ac:40:0f:
0a:8c:6f:43:20:07:53:58:30:85:b9:75:6e:a1:38:b9:49:f2:
20:2c:0e:dc:7e:91:e0:42:04:ad:6f:29:a8:2f:bb:2d:07:c6:
87:19:94:0a:b9:8d:d0:10:54:df:48:05:09:aa:50:eb:45:0b:
6c:81:8c:72:cb:46:3c:3a:fd:a4:20:8f:ca:02:8a:49:a8:c8:
89:12:a6:31:8b:fc:27:9e:84:c0:68:55:32:2c:ac:30:75:b3:
35:2c:09:3f:ed:0c:2b:dd:26:6f:16:52:12:26:5f:32:60:73:
bd:92:ce:a1:92:d9:67:a6:9d:b4:f6:e2:35:d8:dc:5b:13:a6:
2a:1e:af:3c:d3:15:f6:80:65:f6:08:03:85:55:08:99:f6:98:
c4:ec:9a:54:f9:5f:03:fb:6a:38:00:34:40:12:bf:01:f2:85:
66:18:1c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:41:35 2025 by rpki-client