Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/79fb97a1-caee-3bca-9b85-52fd9fc5e1ec.roa
File: 79fb97a1-caee-3bca-9b85-52fd9fc5e1ec.roa (raw, json)
Hash identifier: pSl5efGGshq9kuFY1AocVCam7JfrwxSHeewDBhRgzCI=
Subject key identifier: 68:B3:22:C6:17:AF:6C:7D:C9:D8:00:AA:48:8C:F4:45:26:EF:E0:28
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DCECA913DFB24896956BF6400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/79fb97a1-caee-3bca-9b85-52fd9fc5e1ec.roa
Signing time: Thu 05 May 2022 12:00:00 +0000
ROA not before: Thu 05 May 2022 12:00:00 +0000
ROA not after: Fri 10 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.49.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ce:ca:91:3d:fb:24:89:69:56:bf:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 5 12:00:00 2022 GMT
Not After : Jun 10 04:00:00 2022 GMT
Subject: CN=60a2bf76-03e2-45ed-97d8-754d1b348d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c9:4b:b4:82:b3:05:3d:45:8b:68:59:eb:6b:
e1:40:6c:a8:ba:5b:31:de:16:05:65:78:1e:f2:d6:
98:1d:c2:6d:b8:5d:22:83:5e:c0:10:79:5d:df:58:
63:8d:cd:a8:6b:15:28:28:86:91:c2:f9:d8:3d:82:
ba:32:4a:a2:9b:08:f8:50:25:ae:d9:c6:f0:1c:96:
8b:a9:f6:df:6a:b3:e7:74:e6:7b:26:92:8a:a9:14:
fd:ee:2c:55:5f:aa:66:ab:1d:80:2a:e5:8a:32:3a:
dd:b7:e3:68:24:58:47:ff:d0:c7:77:e4:de:73:e8:
32:7c:84:36:97:71:b8:3b:a3:1c:5f:02:da:d6:39:
b2:11:51:fe:16:b4:43:30:ac:18:16:95:46:00:d2:
f6:63:1b:f9:9c:ee:27:d4:54:d5:e9:a0:be:f8:58:
fc:10:08:fd:60:3e:a8:fd:50:3f:fd:96:8f:c0:fb:
8d:13:8d:f8:04:9d:4f:80:5d:a6:54:78:81:fb:dc:
ec:4d:19:93:69:8e:e8:3b:24:4f:f9:23:86:f0:5d:
57:6b:a2:9b:92:26:ac:d8:e1:38:fc:ed:b6:ad:3b:
c0:0d:ab:aa:f2:84:6b:9a:f7:a7:cc:6c:f3:af:18:
ce:72:16:74:58:4f:2a:10:0b:7c:73:3c:66:05:fc:
03:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B3:22:C6:17:AF:6C:7D:C9:D8:00:AA:48:8C:F4:45:26:EF:E0:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/79fb97a1-caee-3bca-9b85-52fd9fc5e1ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:e1:0d:c7:06:68:6c:2a:9e:89:f8:88:55:81:fe:38:14:3a:
e3:e5:78:5e:91:35:a4:bf:1f:65:89:90:6f:74:d3:9c:7c:57:
11:5f:c2:6b:a8:7a:e3:73:00:1c:47:52:4e:e9:3f:18:87:ca:
5b:11:df:54:72:16:a6:44:f7:bb:05:57:42:60:31:45:16:75:
47:cf:f5:5f:2e:18:8b:01:74:d6:05:9e:14:84:38:27:70:54:
aa:07:9c:f1:8e:9c:69:07:35:33:1c:7d:9d:b8:66:bf:9e:0d:
6f:18:c6:d7:2b:7e:d2:3c:d9:9b:30:c0:56:cd:1c:fe:5f:73:
0f:40:26:f2:10:3e:9c:2e:ba:57:06:da:d9:68:e3:2d:ec:42:
5d:50:be:2d:39:6c:7e:51:98:48:17:63:29:f5:ca:7f:95:e4:
54:8b:a0:25:40:3b:2b:d5:54:38:fb:7f:08:b3:71:df:1d:3e:
cf:14:06:1c:80:be:31:a5:e5:4d:ad:44:c2:bd:a0:4d:49:1d:
9f:03:79:0b:f1:7d:27:99:47:0f:a0:8e:4d:f5:c5:19:31:9b:
e2:c0:e7:fb:a4:8e:57:61:74:dc:7d:33:d4:b9:8f:58:69:48:
11:eb:72:6b:4a:88:c6:f6:df:8e:39:47:07:7b:96:54:7c:2e:
ef:19:73:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:08:16 2025 by rpki-client