Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/89078b6f-99b9-3d37-9c6f-2916b7a4b397.roa
File: 89078b6f-99b9-3d37-9c6f-2916b7a4b397.roa (raw, json)
Hash identifier: 9XBB3cdhc4lHVKolIy1gJLm7a7UTk4IuZUz84UuKN7k=
Subject key identifier: FD:73:15:8A:09:92:5F:A4:04:EC:D6:AF:DE:43:CC:19:1B:D9:B9:97
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7FF2167843A33C9A3A1C3060
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/89078b6f-99b9-3d37-9c6f-2916b7a4b397.roa
Signing time: Fri 07 Oct 2022 12:00:00 +0000
ROA not before: Fri 07 Oct 2022 12:00:00 +0000
ROA not after: Sat 12 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.175.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7f:f2:16:78:43:a3:3c:9a:3a:1c:30:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 7 12:00:00 2022 GMT
Not After : Nov 12 05:00:00 2022 GMT
Subject: CN=90ef33af-9d82-4fc6-8006-9edaf7a1518c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e4:5b:14:c3:a3:82:2e:ca:d6:d4:a1:c6:cb:
33:3b:51:c3:44:6f:0d:99:22:56:53:fe:19:ec:08:
0c:ba:b4:ae:be:b8:f1:8a:f4:87:67:2a:be:26:3f:
ab:fa:40:e7:c3:48:cb:96:9d:74:cf:dc:ca:1d:04:
96:17:67:30:ad:7f:61:57:67:f0:a8:da:2d:2c:bf:
35:35:2e:4b:9d:d4:2c:9b:e8:27:82:16:35:c1:96:
32:ab:2f:a6:fd:fb:7f:ba:d8:12:a3:44:46:2e:d3:
63:79:8e:02:91:cb:24:fd:37:4a:d9:a7:ec:67:e5:
aa:4c:18:44:99:bb:3f:d3:44:4b:08:27:37:f7:6a:
9d:5d:c7:3d:4f:ac:ec:e6:e1:7a:af:7f:a8:e2:b2:
c4:97:1e:cb:84:a1:47:ec:28:42:d2:e9:04:4b:d6:
c2:65:3b:dd:90:ba:01:15:12:63:54:54:fb:37:18:
ce:0b:b6:d2:56:1f:37:14:c0:bc:54:20:76:2d:ec:
1b:e1:1a:32:d5:49:38:d6:96:d0:78:15:33:08:ac:
b7:81:7f:9e:96:8b:4b:77:19:31:57:7b:58:3c:da:
96:a8:e2:96:37:ab:7b:8d:fb:54:e6:98:64:27:b2:
d9:bf:40:a9:ca:5e:21:fd:4f:0e:c7:91:71:9e:7c:
e3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:73:15:8A:09:92:5F:A4:04:EC:D6:AF:DE:43:CC:19:1B:D9:B9:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/89078b6f-99b9-3d37-9c6f-2916b7a4b397.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.175.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:56:f9:8b:2c:77:0a:00:96:f2:99:55:e1:11:14:37:1f:a0:
4a:f0:84:e2:8b:55:17:91:81:c9:8a:30:43:6f:de:3d:de:9a:
54:6a:73:9f:08:b6:44:4a:4d:92:a7:dd:90:3f:63:dd:c7:79:
4d:66:96:94:a3:8b:24:c6:c5:7e:3c:a4:aa:29:01:26:53:e6:
db:b7:61:b4:b1:36:95:e7:4c:ef:84:1c:e3:a1:19:a3:0f:dd:
bf:cd:85:01:71:ac:d0:64:fb:9c:f4:ac:0d:d0:a3:f5:29:10:
79:e8:77:f6:9f:ad:4c:68:3e:dc:7f:cf:9c:29:75:80:15:47:
b6:55:0f:b6:e1:8b:bc:0f:60:95:1a:e3:0d:52:60:7c:63:dc:
f7:2e:1d:13:9b:f4:84:46:40:ac:fc:7c:7a:94:98:bb:a8:65:
a2:c2:f2:57:18:42:bf:88:69:da:69:a8:34:87:c0:07:8d:c9:
4b:8f:a5:92:d9:e2:5d:b7:73:63:e8:22:54:ce:6c:f0:a1:99:
63:dd:a7:7c:78:59:c0:53:62:be:ea:96:70:74:77:02:19:4b:
0f:0f:b5:f1:53:f8:24:4e:13:db:60:10:b5:f6:54:e5:86:43:
3e:93:14:a0:4d:8b:2a:0e:a3:0d:9d:86:c8:b8:50:44:c0:26:
4c:b3:55:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:04:56 2025 by rpki-client