Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7e929e0b-75c0-324b-93f5-f364a34f98d1.roa
File: 7e929e0b-75c0-324b-93f5-f364a34f98d1.roa (raw, json)
Hash identifier: risfENxT+TXDKJbDDnmC6TEKPF/ZsC/QdcqFV8EOb8s=
Subject key identifier: DF:29:8E:01:F2:FD:4F:56:2B:20:FF:E5:E6:8A:18:50:D4:EA:BA:CF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F5B9FA7B048E45892FC59EE40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7e929e0b-75c0-324b-93f5-f364a34f98d1.roa
Signing time: Sat 24 Sep 2022 12:00:00 +0000
ROA not before: Sat 24 Sep 2022 12:00:00 +0000
ROA not after: Sun 30 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.64.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:5b:9f:a7:b0:48:e4:58:92:fc:59:ee:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 24 12:00:00 2022 GMT
Not After : Oct 30 04:00:00 2022 GMT
Subject: CN=866b0ab0-af26-4a6b-936d-1cc5c12f152c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ad:80:6e:4a:79:ce:3d:a3:c1:fd:04:21:42:
02:73:74:40:f0:b1:41:ef:fc:af:70:69:62:e1:6f:
50:c4:60:93:07:77:75:88:84:3a:70:9e:9e:3e:d1:
3b:86:48:44:cb:1c:1b:dd:b0:c7:dc:38:72:af:33:
67:0c:69:83:f4:0a:df:68:5b:a8:36:c1:10:d9:bd:
5b:c0:a2:11:ea:a4:11:04:5f:07:fa:99:9f:c9:1f:
1f:c4:63:ea:0a:e7:25:ea:da:bb:04:bd:d9:3d:3e:
3b:b1:ff:97:bb:8d:9a:6c:82:b3:55:d0:b0:de:28:
f6:88:8e:4e:c9:f9:10:a6:d7:cf:30:8c:a9:b6:4f:
d4:ce:51:dc:c9:c6:be:93:e6:4e:08:e8:3a:58:34:
83:66:5d:a3:ff:f2:ee:9a:59:e6:11:8a:25:4e:36:
c5:9e:6a:15:a4:a5:dc:ba:43:bf:1f:2b:ce:78:d2:
3f:d2:26:31:9a:b7:a5:75:96:4b:ed:23:22:ce:70:
b7:cf:cb:d4:94:44:4f:2f:f4:15:47:14:4d:45:e2:
b5:70:ff:c9:5b:f4:d2:04:85:3e:7d:35:fd:d1:a3:
50:5b:8c:2a:06:9a:39:2a:be:68:5b:ce:b9:33:bb:
66:5e:31:6e:a0:4f:08:91:14:da:20:9f:c8:77:7e:
a5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:29:8E:01:F2:FD:4F:56:2B:20:FF:E5:E6:8A:18:50:D4:EA:BA:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7e929e0b-75c0-324b-93f5-f364a34f98d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.64.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:5d:e6:6c:bc:28:5c:e1:25:40:84:d5:7c:7c:a5:90:9a:0a:
c9:e7:72:3e:5a:29:19:e6:85:3a:f0:65:17:c9:05:d2:4e:d7:
bd:02:3f:a9:69:d7:b1:08:d2:98:99:d2:bb:ca:35:d5:87:6b:
98:f1:fa:54:29:17:42:92:25:7e:38:f0:7e:26:dc:5d:15:20:
47:55:8f:24:2f:5e:88:19:fc:33:50:3b:f7:18:df:46:09:ed:
dd:52:bd:5d:39:5c:2f:a3:e5:be:1a:e8:7c:20:2e:5c:1e:79:
db:15:f5:39:69:d4:47:a1:63:ed:80:36:33:92:6b:c6:52:96:
96:82:ae:bf:3c:aa:19:19:cf:d2:c8:a4:01:26:9e:7b:99:67:
a4:20:9a:fc:dd:5f:fa:06:13:a9:8e:99:fe:75:ad:28:4b:02:
0a:ac:b4:59:75:b7:ba:eb:82:a8:f7:44:68:10:c6:9c:d1:a0:
5c:7f:6f:ed:e4:21:a7:25:91:b8:df:c7:31:3e:72:05:75:5a:
42:15:44:e2:f4:40:6b:7d:de:e3:12:f3:5c:42:3a:0a:28:e4:
38:9b:14:f1:d1:b3:e8:85:37:9d:cc:c1:cf:a6:f6:02:82:c8:
03:2c:a8:43:e9:b0:07:43:a2:31:03:5e:05:19:2e:9d:a4:1b:
c6:aa:d3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:42:54 2025 by rpki-client