Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6cb38fb3-c89e-3088-b351-a93e822c1d82.roa
File: 6cb38fb3-c89e-3088-b351-a93e822c1d82.roa (raw, json)
Hash identifier: LCFQTnrUNnrsl0LOb1jvWOqCuOvHTD9QOkjRlKa4PhI=
Subject key identifier: 99:A0:BF:BD:4B:90:39:D6:2B:DA:6E:E1:2A:5F:67:EB:E1:7F:D0:E5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF84F530CB7DFB8B28237BD00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6cb38fb3-c89e-3088-b351-a93e822c1d82.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.120.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f8:4f:53:0c:b7:df:b8:b2:82:37:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=592e1e06-7027-4bfa-bed9-3827813f6309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e4:f1:92:5b:b6:b0:a2:91:bb:ef:99:8b:66:
99:cf:ca:d3:09:f1:7a:af:4d:f7:71:ec:73:68:0f:
c4:ec:b8:e3:6c:36:61:0a:33:c9:db:0e:9f:ec:5b:
92:11:34:3d:ea:e0:64:95:b3:08:1b:68:47:1e:0c:
04:f0:56:00:ce:1a:83:f1:5e:82:fc:70:21:d8:e9:
d8:00:50:2a:54:5a:ec:2f:a1:d3:90:ef:74:9f:06:
ed:30:e5:aa:75:cb:88:6a:f5:f0:d2:cc:b1:91:d0:
51:7d:76:44:e4:2a:46:d1:55:09:14:ec:10:3b:24:
60:25:fe:60:e8:96:98:da:7a:5b:16:12:5a:e1:64:
90:a3:d3:e0:87:8b:c1:8f:8b:50:2d:88:e9:00:1c:
e1:57:f8:8e:fd:80:bf:3a:6d:80:83:06:cf:18:68:
bc:11:73:53:c5:e5:c5:27:cf:b3:3a:ec:1e:1d:ff:
89:a6:94:08:94:f0:eb:63:65:01:73:b6:86:df:ac:
4a:44:2e:0b:53:ff:71:e0:62:12:c6:0e:07:2c:00:
49:d7:a7:14:c5:79:b4:61:76:ce:c4:8f:06:30:7f:
96:8b:a1:28:b9:15:18:03:5d:d1:90:a7:1e:99:9e:
c5:02:a9:64:0f:96:a2:23:69:4d:7a:56:54:f7:8e:
9c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A0:BF:BD:4B:90:39:D6:2B:DA:6E:E1:2A:5F:67:EB:E1:7F:D0:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6cb38fb3-c89e-3088-b351-a93e822c1d82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.120.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:8a:8e:05:e8:e8:0e:08:17:c1:30:9f:bb:3c:65:35:e0:22:
57:2c:94:2b:ce:c9:a7:a5:0b:8f:8e:39:de:4f:2a:00:1c:38:
30:ba:54:27:41:ef:97:d9:59:38:1d:97:01:f8:fa:52:3a:69:
54:b3:7a:59:e9:34:3e:ed:cb:4b:74:78:bc:26:1d:cf:61:db:
b3:16:76:b9:4a:32:73:49:50:9f:1e:f8:ad:90:38:87:da:c7:
41:9d:19:59:a2:57:9e:39:35:8c:60:00:95:34:ec:9c:a1:17:
65:84:ed:db:d2:d5:45:5c:69:6e:b2:ee:a8:b5:07:56:b2:f7:
a7:32:50:f0:93:10:28:1c:4c:4a:ac:98:37:66:72:e9:2d:d9:
11:9a:52:49:fa:29:76:f3:22:98:71:ec:1b:73:94:2e:0d:cb:
73:eb:2a:cf:b7:14:4c:88:93:69:7d:80:fa:7c:3e:27:6f:d6:
d9:91:0d:be:be:35:10:41:67:99:3b:1e:0c:87:cc:cb:8e:2c:
f5:fe:53:57:be:3e:e7:1d:a6:bc:99:95:2b:48:73:da:38:50:
b0:22:e9:81:0d:ae:1b:b2:23:bd:54:56:7a:05:80:72:28:a7:
97:3d:59:08:3c:30:97:01:97:a2:5c:e3:31:21:bd:ed:93:63:
72:0d:b7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:29:47 2025 by rpki-client