Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8f687c65-fe19-3350-a14a-3cc277947095.roa
File: 8f687c65-fe19-3350-a14a-3cc277947095.roa (raw, json)
Hash identifier: tvFMfEQMOvAdzswW4/P+WO3s9OkB/B9kXKgzLsBEYy8=
Subject key identifier: 5A:C8:1A:31:C6:18:B1:6B:2B:1E:35:24:6A:F0:F0:72:36:0F:BF:CC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD362A689AD997A7610CF8800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8f687c65-fe19-3350-a14a-3cc277947095.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.163.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d3:62:a6:89:ad:99:7a:76:10:cf:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=f6f5eb60-709b-464f-892b-b24600b5ee6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:06:33:9b:31:3b:92:1b:7b:61:70:e9:e6:1e:
79:da:28:e8:7a:52:a0:a6:34:14:b9:e9:08:48:b5:
1a:2a:b6:11:4f:12:c7:bc:b0:c0:e5:6c:cf:68:ea:
f6:8e:c7:65:f0:08:56:ba:cc:3c:83:ca:2a:2b:3b:
d7:a9:50:67:2b:c3:5b:71:29:98:f2:e6:da:91:72:
7c:19:52:fd:31:f7:54:b5:ca:9a:5b:13:43:de:cc:
23:ca:44:da:51:a5:e3:77:53:7b:3f:6b:b9:44:b0:
83:3e:99:f5:89:a3:7e:07:59:66:b7:c9:27:f0:58:
ba:82:2d:ab:95:af:db:9f:5b:e4:a2:04:d7:aa:be:
d0:47:a1:c9:09:09:2d:75:f4:be:00:c5:0a:f9:a8:
87:0d:82:d1:8a:f9:7c:d9:c6:b7:44:fd:1e:46:fe:
cb:95:ab:73:c6:b6:c6:48:c1:26:24:d4:29:fb:40:
95:ff:3c:e7:9c:5f:ef:5c:c5:28:95:c7:fb:bb:08:
fd:b4:9b:84:a5:ce:f6:7d:e7:75:72:10:32:d2:ac:
c2:54:1e:67:08:30:42:be:a8:b2:f1:23:27:d3:a6:
c6:b7:f7:af:cf:20:60:3c:f5:41:e5:66:2e:89:0f:
1b:56:02:05:c3:91:3a:0f:1f:21:75:a5:80:d7:0a:
2c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C8:1A:31:C6:18:B1:6B:2B:1E:35:24:6A:F0:F0:72:36:0F:BF:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8f687c65-fe19-3350-a14a-3cc277947095.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.163.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:44:97:64:82:89:b0:30:c8:9b:17:04:e6:65:19:b1:a1:46:
7e:d4:52:0d:a6:dd:18:ec:cd:d7:22:e4:f3:e6:6c:cc:11:d6:
a4:0e:ed:5d:12:3b:e8:b0:ae:33:e4:60:1c:b8:16:ef:47:cb:
68:cc:2c:38:c1:0a:8e:3a:5f:ce:a6:10:b4:17:42:e4:7e:3b:
6c:46:4e:af:5c:72:fb:85:2c:96:f0:d5:0e:eb:c2:6c:1a:c0:
fa:1a:8b:69:50:6c:20:a1:4a:32:98:84:b6:68:77:38:9c:cc:
8f:f9:f8:04:ce:bc:57:1f:96:12:21:8e:79:69:54:e4:ba:34:
4a:ae:90:31:4d:a1:29:35:9f:3d:4a:e4:84:b2:b7:a0:71:46:
6f:35:ae:eb:90:7e:41:b8:92:53:ca:7d:32:94:f8:08:2c:e3:
2b:42:3d:c7:9d:f8:bf:0a:c3:30:b4:db:0b:06:06:e9:99:da:
1f:e3:8d:01:1a:6b:11:f7:f9:8a:57:81:f9:12:cc:a2:41:4c:
64:85:13:c7:8e:67:39:ef:e1:c3:ca:7c:d0:41:f0:63:e4:72:
df:f0:56:be:02:7e:8b:1f:ce:0d:42:29:d3:81:ee:9c:58:54:
d0:02:ac:46:27:13:1c:5a:b2:a3:e9:05:ac:e7:b1:4d:7e:ad:
c2:07:1d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:32:11 2025 by rpki-client