Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87e8d4da-b575-3d9d-bf44-0bf9b8617533.roa
File: 87e8d4da-b575-3d9d-bf44-0bf9b8617533.roa (raw, json)
Hash identifier: 0ZOk9mxrb325djkkVh+Z+AwP1kob59uk1MIpJoSr/b0=
Subject key identifier: 4C:8B:D5:1E:B1:48:C7:05:A8:1E:0B:03:24:63:F7:7D:DF:1F:C4:DA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E48FC9EFA11DC32C0CDF8E180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87e8d4da-b575-3d9d-bf44-0bf9b8617533.roa
Signing time: Fri 17 Jun 2022 12:00:00 +0000
ROA not before: Fri 17 Jun 2022 12:00:00 +0000
ROA not after: Sat 23 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.137.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:48:fc:9e:fa:11:dc:32:c0:cd:f8:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 17 12:00:00 2022 GMT
Not After : Jul 23 04:00:00 2022 GMT
Subject: CN=9f528519-c628-4b14-bf89-c57c0485b983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:cf:f0:19:6a:55:30:93:41:49:08:59:31:
49:ab:9f:56:d7:7e:34:ac:19:b9:fa:67:1c:be:3f:
5d:85:87:a2:1c:70:f6:ed:57:d2:a0:ba:86:3d:6e:
cc:c9:3b:3b:af:b9:e5:fd:97:a9:64:9f:a6:bc:59:
00:ec:4f:3f:09:82:80:23:b7:81:ff:d7:d1:08:68:
aa:b2:dd:9b:a2:07:24:4a:53:ea:df:b8:bb:ee:d2:
ae:e6:1c:d3:3b:ec:94:82:63:a9:39:c8:ad:df:74:
ea:d9:05:6a:61:88:ac:9f:f2:bd:29:4e:e8:38:70:
16:76:3b:bd:5b:c3:a5:5d:24:e8:12:4a:15:41:70:
0a:62:b5:8a:24:63:55:a7:a2:96:d0:63:c5:a5:c6:
24:76:20:a6:54:b6:ba:28:3a:d9:da:c6:27:73:35:
67:05:ad:ab:8f:87:75:f7:34:45:cd:b9:b7:28:64:
ff:4e:50:57:7b:52:92:ed:c6:95:fd:81:b3:fc:61:
2b:21:0a:9a:2c:10:6e:16:9a:57:5f:14:f6:4a:05:
32:6f:32:20:93:75:66:16:fc:c4:58:de:ba:a1:3d:
9f:21:e2:ef:ce:54:49:61:e3:d8:50:0f:e9:d4:25:
37:fd:a4:20:8d:d7:4a:20:70:d6:eb:e1:9a:7c:e2:
3f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8B:D5:1E:B1:48:C7:05:A8:1E:0B:03:24:63:F7:7D:DF:1F:C4:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87e8d4da-b575-3d9d-bf44-0bf9b8617533.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:4e:52:91:a2:b2:f0:d8:ac:be:ef:28:4a:fd:51:4d:45:9a:
34:01:5c:e0:16:b0:fa:12:a4:2a:2a:de:79:5f:65:1f:57:64:
55:e5:ec:6a:d0:14:de:73:9c:53:5d:d0:e4:d6:ef:01:bf:ed:
3d:d0:3a:de:ec:8d:1b:7c:b2:f4:af:0d:e4:ed:e3:6d:07:49:
47:4d:56:ed:16:64:8c:21:d1:05:ca:17:6f:9b:fc:88:4e:2e:
e0:d5:ed:47:01:52:cd:8f:29:c9:ac:3b:26:cf:67:a2:de:95:
d9:88:83:c9:6c:30:99:6f:23:5c:78:2f:df:7a:c8:30:e0:56:
d8:f8:45:cd:60:6a:a7:cd:6f:5f:39:9b:70:eb:94:fb:c6:be:
3c:10:34:46:0c:8d:5c:ce:82:f3:8c:9a:ca:eb:03:f8:05:61:
6d:6d:e0:eb:1b:95:ed:84:12:6d:b8:61:e7:bf:01:80:44:3c:
40:01:4e:06:68:10:c9:c5:fe:6e:aa:98:5d:7b:62:06:5f:ac:
42:8d:50:df:6b:0a:ef:07:75:4d:32:60:aa:8c:85:bb:79:53:
98:cb:74:81:87:9d:ff:c6:b7:86:a8:41:5b:be:31:84:da:15:
7d:51:6a:83:d5:c8:1e:e9:f4:11:26:60:0f:5f:0b:9e:49:8b:
a4:b8:94:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:54:29 2025 by rpki-client