Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/927538a3-e43e-31b9-a9cf-1ced0177ff67.roa
File: 927538a3-e43e-31b9-a9cf-1ced0177ff67.roa (raw, json)
Hash identifier: +xBL0oTP+Gs4h8pVS1VEFDE+dUPcZU6dOWD25MO97vU=
Subject key identifier: BA:3F:07:71:AD:C8:1E:6E:BD:76:AB:10:E1:71:E3:DB:93:53:B3:25
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBCF8CB266DA533F8F3CF94C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/927538a3-e43e-31b9-a9cf-1ced0177ff67.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.85.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bc:f8:cb:26:6d:a5:33:f8:f3:cf:94:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=601f5437-ffce-438a-a970-99db63971b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a6:e3:f9:0a:e9:52:2d:2c:e3:25:42:61:48:
d9:73:cf:0e:b3:ca:43:15:e9:75:ca:28:bf:80:78:
f9:6e:92:8f:9f:61:ca:f6:33:80:d0:d1:39:52:ab:
07:ff:dc:4c:18:85:3d:2a:7f:12:6d:6f:d0:e9:23:
69:88:bd:01:87:e1:d5:f5:d5:ed:25:5a:bf:58:50:
e8:23:06:a0:d0:3c:48:88:31:0f:9a:f8:ea:7c:3e:
58:ad:01:3d:2a:8d:41:28:66:b9:b5:a4:30:20:07:
a8:50:8c:bd:98:f5:bf:6a:aa:9a:72:43:05:e9:39:
bd:cc:67:f4:e2:93:86:ec:69:b8:71:44:51:6f:79:
cf:aa:60:ff:a3:67:b9:51:bd:12:ad:0b:cf:25:c5:
6b:d8:5f:d5:b0:ba:3d:60:ad:05:6f:f4:91:cc:48:
84:1b:fa:a7:41:23:b4:01:05:bb:01:a0:2e:a9:da:
6e:41:70:7c:97:6c:ba:99:ca:98:7e:27:c7:d7:0d:
ef:13:f9:60:90:bd:ad:11:4c:4c:a2:80:eb:40:df:
05:22:21:78:03:3f:ce:3b:49:ca:ba:49:69:1a:6b:
12:12:45:5a:f5:d5:5e:2f:e7:a8:e3:f2:d9:d4:a1:
49:42:dd:c1:38:59:23:8f:a0:6c:ae:34:37:0b:ec:
aa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3F:07:71:AD:C8:1E:6E:BD:76:AB:10:E1:71:E3:DB:93:53:B3:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/927538a3-e43e-31b9-a9cf-1ced0177ff67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.85.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:8d:10:89:d0:d1:7b:af:5e:2f:b6:85:45:fd:e0:37:50:5f:
57:d8:c7:86:8a:67:b2:b4:e3:ae:64:9a:c8:ea:80:95:b3:98:
c1:6d:9f:d0:b2:59:b5:d5:fc:92:6a:56:da:80:7b:48:62:c4:
ce:77:2f:f6:89:98:a2:00:43:8b:8b:0f:d3:6b:dc:d4:52:71:
c5:0f:84:05:6c:e1:e2:e8:59:b7:6f:a6:c0:af:fc:b7:a5:54:
7a:48:89:34:d0:f4:21:08:1d:af:92:65:75:85:92:e5:40:e2:
2d:d6:3a:2c:8d:16:43:c0:7c:6a:af:ac:44:2d:4e:37:71:3d:
69:33:b9:30:95:a5:0d:0b:d2:16:bc:3c:fd:65:cf:6e:cb:cf:
2b:0e:b2:86:fa:a2:45:15:72:78:ab:ae:76:62:bd:9c:89:e7:
c5:0a:a9:9f:49:fa:38:d8:17:85:be:60:62:2e:e5:83:be:8b:
45:03:fd:e0:bd:f0:e7:ff:24:e9:0f:fa:c8:e1:bb:49:ed:e1:
f0:4a:ab:bd:37:cc:ec:7b:f8:fb:9c:33:a1:a0:b9:f5:69:79:
43:cf:e2:84:65:2d:4c:3b:a7:94:ec:a7:64:5c:82:73:00:1a:
f5:db:b7:a6:02:10:e1:ce:2c:58:67:2a:2e:46:a3:30:4c:00:
87:8a:02:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:13:21 2025 by rpki-client