Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7aef4431-f66c-385b-80aa-ff57b8dbab28.roa
File: 7aef4431-f66c-385b-80aa-ff57b8dbab28.roa (raw, json)
Hash identifier: NUcuqdKEzWazdU2j0TQPA1F7Rnb33GY4QGCiQpd6w6o=
Subject key identifier: 4F:A8:C4:FA:ED:CF:02:1C:0E:EA:A1:A4:79:4E:0B:89:2E:24:4B:8F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBDA10D7BFA06E4FD1168F080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7aef4431-f66c-385b-80aa-ff57b8dbab28.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.252.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bd:a1:0d:7b:fa:06:e4:fd:11:68:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=fba2cb89-08bd-4d68-9c9a-3ca5b1ae3ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:eb:d0:61:00:ad:12:eb:b3:df:b2:42:52:
2d:09:57:42:ef:c4:95:35:43:b3:be:f3:6c:dd:f6:
44:b6:04:91:2b:a3:5d:64:bb:cf:f6:60:28:bb:d6:
67:b5:4b:6e:22:c1:e6:8d:4e:78:f1:01:1f:39:0e:
2f:a4:6a:c9:58:ef:70:ab:6e:a0:a4:0f:ce:bd:ee:
4d:34:d1:b5:4d:50:36:26:1a:c6:dc:24:f6:36:31:
0e:5e:2a:ff:62:d9:a9:bc:27:9a:a9:e3:77:2c:3f:
c8:9c:88:75:ce:4a:a4:49:fc:5c:b3:88:43:2a:27:
7b:ab:a8:5a:7b:b0:fe:36:00:8c:ce:29:7b:68:ce:
75:c2:f8:6f:af:0f:3f:a1:da:54:70:72:85:13:15:
52:e0:54:61:32:43:e7:40:79:dc:0e:f9:56:43:25:
ef:1c:f9:53:c4:2c:d2:42:4a:3b:5a:9e:26:cf:88:
cf:26:0e:8c:95:09:56:00:19:48:83:fe:c9:68:7e:
20:95:04:e4:e5:54:fc:c0:e0:fc:13:c1:0e:d2:fa:
99:f6:f0:09:4a:89:df:07:7c:ef:ef:15:a3:a2:64:
b5:97:5b:7d:42:36:21:ef:c2:de:ad:e2:a6:e5:73:
e8:db:79:29:26:41:a9:dc:78:30:66:7e:9d:4a:b1:
91:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A8:C4:FA:ED:CF:02:1C:0E:EA:A1:A4:79:4E:0B:89:2E:24:4B:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7aef4431-f66c-385b-80aa-ff57b8dbab28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.252.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:30:9d:6c:b8:f9:f6:bb:3d:58:b5:0c:9f:9c:f0:70:86:94:
c7:f7:b3:4b:4c:3a:15:7f:bf:1c:4c:74:d7:3c:50:5b:73:5f:
7c:e1:a0:da:e8:41:c5:f7:d0:5d:65:c4:a6:d1:af:b6:7c:89:
3c:83:0e:88:51:11:8a:0f:c3:8b:af:0b:83:2e:00:91:a4:07:
81:f6:24:05:ea:22:bf:aa:97:78:55:eb:e5:29:b0:db:1e:16:
eb:c7:8d:6a:a2:bb:69:1e:1c:63:d8:ea:71:73:a2:33:2b:0a:
13:c5:a4:01:ea:13:42:89:38:43:f6:2f:3e:91:bb:87:c6:1a:
8e:70:64:dd:9c:5e:a1:c6:81:1d:57:56:5d:78:e2:45:09:46:
b0:bf:26:2a:27:1f:1c:28:20:a1:4e:d0:ce:a5:f1:af:1d:b0:
f4:12:84:5e:2f:28:4a:58:62:85:82:04:03:00:9f:be:40:eb:
31:f8:d2:d4:3b:96:d2:00:a4:a8:75:6e:57:d5:5e:1a:55:36:
ac:9b:ba:a1:6c:06:d3:18:94:a9:a3:2f:b6:47:b5:f9:59:b4:
95:99:c2:d2:ef:8d:54:30:94:c0:dc:09:de:07:3c:98:46:e2:
52:ac:a4:ba:b2:2b:9d:17:68:37:68:96:0b:d8:7d:8c:ee:9d:
5a:db:aa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:31:40 2025 by rpki-client