Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/71b5d4cc-7df3-3316-b1cc-d11fcb7e68d1.roa
File: 71b5d4cc-7df3-3316-b1cc-d11fcb7e68d1.roa (raw, json)
Hash identifier: qSDtxvBJ5lnhWYL+kYVWQm4D7hy58GJ+QeRh6+ENB88=
Subject key identifier: 95:C8:A0:21:EF:B0:AA:47:49:37:83:18:3F:CD:01:83:E5:E4:87:AD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F59F753BC0CF09BEA34DE3980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/71b5d4cc-7df3-3316-b1cc-d11fcb7e68d1.roa
Signing time: Fri 23 Sep 2022 12:00:00 +0000
ROA not before: Fri 23 Sep 2022 12:00:00 +0000
ROA not after: Sat 29 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.164.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:59:f7:53:bc:0c:f0:9b:ea:34:de:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 23 12:00:00 2022 GMT
Not After : Oct 29 04:00:00 2022 GMT
Subject: CN=9d8b8fe2-f701-4771-9195-86f0463f0276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:d8:a6:92:ee:1b:9c:3f:d5:c9:d1:b1:97:
1d:2c:cd:b0:96:70:55:e5:0b:39:a5:83:a2:ef:16:
e8:e9:f4:ff:f5:aa:2c:46:57:5c:99:8f:94:ab:88:
1e:2f:a0:cb:16:a3:75:23:e3:0f:dc:9f:23:2b:cf:
ff:6b:47:87:27:1f:3f:11:f2:6d:50:4c:5d:26:eb:
77:0a:90:5c:7d:99:b0:3e:49:24:d7:d3:70:dc:57:
c0:6e:05:af:c1:81:e0:93:b4:00:71:0e:c4:f2:a1:
be:3e:62:3b:d2:8b:2b:85:ab:c9:27:2c:50:3d:0a:
d5:b2:2c:4f:26:9b:c0:80:66:b4:00:06:90:90:5e:
8a:7f:20:b8:7d:36:cf:38:60:14:8e:1b:89:5e:d1:
dd:f9:fa:99:62:b7:5c:81:d3:f8:96:a1:63:19:ce:
d4:af:b0:cf:1c:4c:cb:d9:39:5e:df:ef:a6:fc:76:
ab:57:a8:88:ae:f3:0c:35:bb:55:61:fe:05:14:0e:
d2:35:2d:f6:18:87:35:e7:d0:37:11:df:39:57:b7:
00:11:78:48:e9:8b:4e:0c:ad:e1:79:c5:76:c1:da:
d3:f6:1e:e8:31:e9:6f:a5:d6:6f:47:50:74:be:01:
5b:a8:63:6d:ff:91:eb:4b:57:cd:ad:14:e6:9e:13:
43:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C8:A0:21:EF:B0:AA:47:49:37:83:18:3F:CD:01:83:E5:E4:87:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/71b5d4cc-7df3-3316-b1cc-d11fcb7e68d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.164.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:7e:ed:af:ed:de:c2:cb:69:f1:85:8d:b2:1a:c6:24:46:eb:
32:3c:61:26:f5:e3:30:eb:19:cf:c0:00:b2:e5:99:a4:bf:a2:
de:9f:33:21:1e:05:dc:1a:3f:35:c0:88:dd:39:0e:d4:99:e5:
98:d9:7b:9b:d3:6d:77:7d:4f:54:3d:23:41:56:bd:05:48:4b:
3d:f1:41:8c:51:e5:90:10:71:c4:c3:82:63:02:f5:6f:b5:8c:
f5:ff:4f:5d:b3:b6:af:9b:44:83:d6:73:6b:e7:b4:77:82:af:
36:ea:0d:da:e5:2b:e8:f3:91:3d:49:13:99:fe:e2:d3:28:77:
63:08:22:6d:1e:01:2b:ab:8f:1c:d4:53:45:ef:f7:42:41:9a:
ed:b0:15:09:48:ed:c5:b1:54:00:9f:f0:99:ea:2b:a0:cb:67:
3d:45:16:20:1e:7e:a9:e8:cb:ed:83:6a:37:65:ad:e8:5d:77:
26:10:75:1d:c3:b3:d4:28:d7:1e:1a:47:a0:0d:ae:98:2c:d3:
98:6a:7f:6d:a6:99:00:89:4a:ed:e5:03:ff:b3:54:ed:1c:58:
4a:5d:4a:c0:89:4a:4d:34:1b:2e:66:82:75:ce:21:be:35:4d:
87:35:84:41:0f:21:12:fd:5f:1d:d9:47:d6:9f:eb:44:36:40:
f7:f9:dc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:01:47 2025 by rpki-client