Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/99f78bc9-6bce-32c4-adde-8b0ff0214f71.roa
File: 99f78bc9-6bce-32c4-adde-8b0ff0214f71.roa (raw, json)
Hash identifier: K3BQaxZqMYoVYHIPiXffGAw7enkRgCOiT0c6Rmg+1Rc=
Subject key identifier: 7E:6C:FF:95:33:F5:BF:BF:60:ED:53:FF:30:50:36:48:DD:1B:46:2C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBE87F75CF2E8F377A5F71D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/99f78bc9-6bce-32c4-adde-8b0ff0214f71.roa
Signing time: Sat 30 Jul 2022 12:00:00 +0000
ROA not before: Sat 30 Jul 2022 12:00:00 +0000
ROA not after: Sun 04 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.92.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:be:87:f7:5c:f2:e8:f3:77:a5:f7:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 30 12:00:00 2022 GMT
Not After : Sep 4 04:00:00 2022 GMT
Subject: CN=9f8fa66f-9ab0-4fc5-aec9-d5c9b1b53233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d9:71:27:bc:77:58:06:67:38:b7:e5:cf:f5:
6e:cb:12:4a:47:8f:7a:71:fa:db:39:a8:da:96:db:
65:ef:96:b7:8c:b4:0b:c5:d2:72:c8:6a:a7:29:44:
27:11:04:1a:8b:05:86:49:82:ff:e9:b9:8e:6f:a9:
74:e4:ee:cc:f2:e1:b6:47:5d:64:09:a1:81:19:4b:
6c:72:a4:0a:89:80:1b:a6:af:04:fa:db:ce:1f:f7:
d5:39:68:e0:e9:dd:0b:f3:b8:40:82:98:52:88:41:
d4:f6:52:21:51:72:33:1c:53:cd:51:b3:2f:00:20:
aa:4e:a9:67:df:6d:4d:ea:cd:60:4b:f2:74:6f:e2:
a7:e1:3c:13:09:32:28:68:30:5d:84:90:1e:84:17:
08:32:53:b6:ed:73:8d:27:f3:c7:49:e5:93:93:25:
58:9f:7e:ec:d4:86:02:0c:5a:9c:18:50:d8:33:ee:
6d:fe:80:9f:4f:eb:1a:3c:96:90:83:e6:01:4d:83:
c7:b5:13:e4:d1:42:4e:1c:76:d4:45:a2:64:9f:a4:
83:5b:6e:66:37:75:e2:e6:2b:eb:ec:06:ae:78:f6:
9e:b7:f4:70:13:68:ec:23:fa:a3:4a:a4:25:fd:45:
fe:51:d1:9a:8d:f6:1f:01:50:bd:16:f3:af:07:a1:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6C:FF:95:33:F5:BF:BF:60:ED:53:FF:30:50:36:48:DD:1B:46:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/99f78bc9-6bce-32c4-adde-8b0ff0214f71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.92.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:33:67:4a:1c:87:ed:5f:ee:5e:42:40:af:27:fa:42:57:8e:
19:e0:06:60:a8:7a:5d:37:54:f0:1d:2c:d8:27:27:48:40:a0:
30:f6:e7:39:08:8c:93:c4:3c:d3:3d:e6:da:95:8a:ef:c5:63:
80:83:47:69:01:53:79:74:3e:58:23:75:77:e6:59:5c:26:d7:
cf:ed:f0:30:9b:7d:74:8e:02:e6:ea:af:bd:60:61:14:40:cb:
d6:ba:da:70:a5:9f:cd:8b:cf:c4:bb:99:20:db:ab:3b:a7:23:
18:3f:a8:d6:59:73:a4:e1:56:5f:b4:18:5f:60:5d:20:82:cb:
12:14:5d:d8:39:ce:9b:48:e2:6c:0f:97:81:6b:48:ed:27:4d:
96:6b:d9:d6:d8:10:4c:2e:e1:94:b4:a5:c3:99:7e:6c:24:81:
5f:58:65:72:44:2b:48:5e:96:9d:f8:eb:3b:c2:ff:e3:cd:d8:
8e:d3:5d:5b:f7:ba:fb:24:ac:8f:45:13:be:0b:49:a8:05:3a:
c0:ef:8f:12:21:86:15:7f:76:2c:f5:a2:f3:b2:1e:38:53:eb:
67:e0:57:ab:f4:10:a3:74:aa:ea:f6:60:d9:d4:41:a4:b2:db:
b6:ff:bb:c5:e2:e9:07:62:ad:c9:72:97:d5:25:06:d5:fe:b8:
62:ba:96:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:43:12 2025 by rpki-client