Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/983f7205-fd00-332c-a433-42fb85eddc39.roa
File: 983f7205-fd00-332c-a433-42fb85eddc39.roa (raw, json)
Hash identifier: cn7/H0TQ9ZQOv74tFLQApLu6ScBq5I+ZbigeTaGbolM=
Subject key identifier: 29:75:29:7C:D6:CA:EC:55:48:6A:1E:36:D9:7F:53:64:50:BB:61:FB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F2EE606B7DFA3C8E3256DCD80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/983f7205-fd00-332c-a433-42fb85eddc39.roa
Signing time: Thu 08 Sep 2022 12:00:00 +0000
ROA not before: Thu 08 Sep 2022 12:00:00 +0000
ROA not after: Fri 14 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.140.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2e:e6:06:b7:df:a3:c8:e3:25:6d:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 8 12:00:00 2022 GMT
Not After : Oct 14 04:00:00 2022 GMT
Subject: CN=3d53cce3-bf1a-4587-8ae9-ff47065ecf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bf:2c:06:3a:9f:28:08:27:46:da:89:e8:30:
d0:a2:72:d8:6a:9e:ca:7a:31:af:80:1a:38:cc:c8:
a9:a5:f0:e5:78:11:86:0b:22:8b:58:50:69:16:89:
fe:bf:14:c0:a0:37:45:9b:6b:ca:e3:4b:9c:b0:0c:
3d:fb:37:a1:a0:50:6a:03:f1:3a:da:34:13:d8:0e:
e8:be:44:c8:c3:19:c9:44:47:8c:3d:d3:b4:fd:d2:
51:b1:f1:ec:52:3c:08:93:b7:29:de:8d:ee:c8:61:
9b:ef:ed:a8:e4:80:29:e2:78:26:37:0c:b6:60:c3:
9a:ac:48:c6:eb:a5:dd:18:25:df:0e:06:0b:a4:d1:
5f:05:d1:e5:0c:a3:62:2c:93:18:31:f7:80:ff:23:
34:43:10:a8:c1:7e:70:b2:0e:c7:12:aa:17:b4:b3:
6d:67:f0:90:fe:4c:2c:be:0b:f0:7a:10:21:12:10:
49:a8:e0:24:cb:3c:1e:3d:14:03:06:87:29:1c:ed:
2b:60:65:aa:66:2e:59:ea:fe:64:13:39:68:29:dd:
c5:8a:d2:c2:e3:6b:42:2f:8f:29:7a:24:15:a5:b5:
06:f9:66:81:0b:92:08:bf:e2:70:ca:a7:15:09:b8:
08:48:e4:72:bc:3e:38:58:40:9a:bd:44:7a:f8:76:
8e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:75:29:7C:D6:CA:EC:55:48:6A:1E:36:D9:7F:53:64:50:BB:61:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/983f7205-fd00-332c-a433-42fb85eddc39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.140.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:a8:13:f1:0d:4a:83:65:2a:32:31:1f:63:f4:d7:66:98:32:
c4:ae:fc:58:4b:d4:91:6a:66:e3:1f:f8:b4:27:4f:4b:1f:2e:
e8:02:45:d3:f2:7e:aa:9d:1f:0f:4d:15:45:fd:99:72:37:c1:
1c:c4:a0:ad:f1:89:45:65:62:b9:d1:5f:d6:85:76:2a:43:d2:
88:8a:eb:1a:b4:bb:94:bc:0e:95:83:76:46:c2:97:16:50:b1:
d4:8e:78:5e:c7:46:e7:6d:2a:04:dd:ad:c2:ad:a7:71:9c:38:
4c:99:64:af:01:79:14:8b:21:f3:b4:a1:78:66:c7:3c:00:54:
f2:92:ff:81:eb:ae:6f:0a:8a:b6:18:14:91:58:91:8f:e5:e1:
43:4f:d6:78:68:c7:80:f0:7a:58:1f:6f:03:1c:86:23:b4:e9:
19:2c:32:fc:4c:df:4d:36:99:4a:25:c6:7d:b1:6d:e2:c0:a2:
95:35:33:bb:99:62:1f:fc:98:51:7d:bb:c3:50:46:cc:a8:f8:
33:7d:26:91:96:69:b2:cf:42:1c:8e:14:4f:7c:0c:fd:07:0c:
23:71:be:0a:36:f8:40:73:ad:7e:ab:13:43:9c:b5:fd:bc:2e:
b9:4e:11:e3:c6:53:ce:32:0e:1b:d6:e5:34:bd:8c:81:29:ea:
b2:4d:e6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:02:13 2025 by rpki-client