Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7937186c-7c29-326c-8d80-d34ffadaeef7.roa
File: 7937186c-7c29-326c-8d80-d34ffadaeef7.roa (raw, json)
Hash identifier: zsSGaY7b5exw8sg+nS2rWxn/v0MGfKswocaaJSrDcBo=
Subject key identifier: 63:13:EC:83:08:E0:F1:A5:B4:FF:C6:27:58:A4:BC:F2:23:BE:2D:F7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA478680EB281F7408DA0E180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7937186c-7c29-326c-8d80-d34ffadaeef7.roa
Signing time: Thu 20 Oct 2022 12:00:00 +0000
ROA not before: Thu 20 Oct 2022 12:00:00 +0000
ROA not after: Fri 25 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.127.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a4:78:68:0e:b2:81:f7:40:8d:a0:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 20 12:00:00 2022 GMT
Not After : Nov 25 05:00:00 2022 GMT
Subject: CN=b31fc107-f595-4937-802c-a3381bfa7a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7c:d6:fe:15:10:0a:b8:1b:f6:02:b4:03:ad:
c8:58:4b:2b:30:2d:e2:64:ee:6f:85:50:9f:09:24:
4a:d3:2f:9b:2d:bc:24:34:52:00:9d:97:b9:25:5a:
fc:4e:b5:ef:7b:7d:a6:bc:53:13:63:f0:c9:56:7a:
32:c8:71:87:24:86:af:b8:f9:ca:ff:db:ae:12:03:
7f:38:e5:3c:5d:65:f6:9e:0b:07:44:78:fb:b8:16:
e4:d6:d8:a7:d0:82:5d:78:f8:5f:c6:ea:b8:91:4d:
7b:cd:7d:2d:6f:9a:55:4e:9a:6e:d2:28:4c:cb:55:
c0:d1:71:e7:4e:8c:c3:f3:16:1a:98:a5:00:83:02:
fc:92:f5:b6:e8:9d:ae:e3:92:b1:4e:89:a9:cf:03:
91:7d:87:87:98:ac:f6:73:74:1b:5e:f8:d8:36:dd:
da:75:4d:d9:de:da:af:98:de:ad:f3:a9:3f:2e:63:
d7:4a:04:7c:23:4c:fa:c5:b2:bc:b2:0e:93:96:6f:
cb:bc:db:39:fa:8c:3a:96:7d:e0:df:bc:79:09:0d:
05:f5:87:18:1d:37:0e:5a:05:05:00:a8:0b:7c:9a:
e2:14:69:a1:41:0b:6d:1c:3e:51:53:8e:c3:a9:f3:
6c:7c:16:f9:5c:4e:2c:8b:95:c5:74:49:7f:76:35:
23:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:13:EC:83:08:E0:F1:A5:B4:FF:C6:27:58:A4:BC:F2:23:BE:2D:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7937186c-7c29-326c-8d80-d34ffadaeef7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.127.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:23:51:8a:e8:d8:d2:e1:2a:aa:f8:f3:eb:48:fa:c8:38:fc:
41:81:61:21:23:9a:84:ba:9c:87:33:e7:27:96:96:0c:6a:d8:
2c:64:15:81:c5:68:87:5c:7c:e1:0e:db:3c:57:f8:ed:20:4f:
71:94:5d:12:c2:49:3f:cf:87:df:43:88:cc:59:e7:b1:50:32:
b9:36:1e:ab:df:59:1f:1d:b8:4d:e0:14:4e:da:80:e5:64:24:
eb:04:99:20:43:73:45:48:e1:f3:ff:59:84:d9:5d:3a:93:3a:
63:ae:16:b2:a9:e6:54:90:e6:3c:12:5e:3e:39:2f:d9:81:93:
da:14:c7:7c:8b:ae:32:2a:26:90:2f:f1:d4:aa:dc:ff:12:62:
cd:b7:53:84:eb:f1:55:33:ae:39:f5:b5:db:fd:e6:1f:1e:0c:
04:2b:fc:9f:9f:3c:8d:40:0e:c0:c6:6c:68:2a:34:9b:a8:e8:
0b:5c:46:0a:d8:9b:40:5b:6e:67:c7:5c:c8:e3:80:4d:0c:81:
09:b9:dc:69:76:0c:9c:4d:61:5a:13:27:2d:05:35:7e:d7:e2:
a9:a5:d3:90:a4:51:34:18:bd:18:68:4e:d2:e9:85:5a:ba:b2:
c4:3b:81:c5:26:e7:00:4b:06:11:ca:6f:05:4a:30:31:8d:28:
eb:af:c9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:17:54 2025 by rpki-client