Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9631bbcd-aa56-351e-9155-8e95612f9f0e.roa
File: 9631bbcd-aa56-351e-9155-8e95612f9f0e.roa (raw, json)
Hash identifier: +X+9EE3Xwh6PBMhrw7cIvRlOwl/L5HTeg3EnNh3ufnc=
Subject key identifier: 65:13:12:CC:30:8D:D7:7B:40:89:F7:80:2A:04:A0:21:87:F5:6B:06
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DAC2F710C2D52645F2F807080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9631bbcd-aa56-351e-9155-8e95612f9f0e.roa
Signing time: Fri 22 Apr 2022 12:00:00 +0000
ROA not before: Fri 22 Apr 2022 12:00:00 +0000
ROA not after: Sat 28 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.182.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ac:2f:71:0c:2d:52:64:5f:2f:80:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 22 12:00:00 2022 GMT
Not After : May 28 04:00:00 2022 GMT
Subject: CN=a49d42f1-7052-47bb-834f-90ff38bf1327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:07:c7:66:6f:e1:12:21:2f:72:21:70:94:90:
48:56:93:51:88:0b:f6:63:43:1f:5b:92:f2:9a:db:
21:29:74:3e:7a:60:dc:4b:ab:57:43:c0:8d:d8:74:
32:f2:c9:4d:d8:8d:74:a2:c1:8e:7c:d1:5d:c5:1b:
09:17:b8:b1:1b:74:a2:c1:6c:72:07:be:88:25:cd:
83:8e:a9:59:94:75:97:d3:65:b2:77:99:c0:6c:25:
7b:8f:19:00:ce:5c:65:a7:a5:45:ad:44:27:bc:68:
df:ab:30:84:9b:92:03:73:c3:53:3b:14:f8:dc:31:
dd:26:fb:5b:eb:80:10:a4:eb:e9:07:df:a1:1e:bc:
68:79:c3:1c:42:49:ca:fa:e0:27:aa:ed:cb:ec:af:
fb:9e:12:c7:9a:9d:24:3c:57:31:44:35:0b:38:50:
73:f6:4c:8b:89:70:f5:53:af:d5:e3:f9:03:fb:86:
38:02:1d:ea:15:8e:60:1d:83:ce:99:85:af:05:c4:
11:95:ff:67:10:29:bc:11:f6:80:c5:84:60:76:06:
06:9a:82:7c:3a:0c:28:29:12:20:78:d6:77:3e:47:
07:1a:66:48:19:81:73:e6:df:16:78:76:69:95:08:
a7:ca:bc:40:b8:6c:35:c2:3a:61:65:00:79:be:f7:
49:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:13:12:CC:30:8D:D7:7B:40:89:F7:80:2A:04:A0:21:87:F5:6B:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9631bbcd-aa56-351e-9155-8e95612f9f0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.182.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:68:f5:1b:20:85:38:66:c3:ae:85:1a:97:93:7f:ea:68:bf:
fb:9d:ef:48:38:62:0f:5e:25:fc:28:4a:da:f2:17:e2:dd:82:
a9:07:97:9c:3c:bd:76:43:ae:0f:e5:ba:e4:71:ec:9d:b8:21:
91:ec:d4:de:ff:7a:d6:c6:22:45:a9:c5:d5:b4:83:a7:66:f4:
97:75:cc:8a:07:ab:90:db:3a:9a:e2:4f:3b:57:cb:1d:e6:e8:
f5:df:03:bd:f8:a8:1e:3d:06:64:fb:3b:98:0e:9a:a0:c9:62:
dd:86:4d:a1:f7:70:1c:b0:2a:34:8b:6b:e0:75:34:fd:32:fd:
a9:28:b1:4e:91:69:dd:2e:da:11:62:af:79:f9:4d:1a:ad:79:
60:5f:12:db:f3:c7:a3:d1:44:c7:ce:38:07:13:c5:5a:ef:58:
95:d6:55:85:db:e3:7f:d4:11:2c:5f:29:27:78:bd:ce:57:d0:
40:64:cb:c4:09:d6:ca:3c:fb:81:65:32:cd:6e:1d:a9:75:67:
24:2c:dc:d6:cd:3d:a7:67:82:4c:79:6b:ce:cd:a8:77:c2:a5:
58:3f:3b:aa:9b:97:01:d9:8a:e2:49:b7:01:26:52:53:39:89:
fd:00:83:20:70:94:42:7b:ea:ff:d1:64:cc:f7:21:ef:e8:f4:
e3:87:3d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:22:52 2025 by rpki-client