Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9fb2e3d2-9c50-384f-a3c3-229a9763b775.roa
File: 9fb2e3d2-9c50-384f-a3c3-229a9763b775.roa (raw, json)
Hash identifier: bsidhWZ/mZdMRws2ZCe7C+M2VAHLAKgexXqKfaQ08jc=
Subject key identifier: CF:27:D8:72:F2:65:7E:DB:A1:6E:7F:E3:92:8D:62:FA:FB:90:A8:E1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA3FA0DAE018FCCA0490B8280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9fb2e3d2-9c50-384f-a3c3-229a9763b775.roa
Signing time: Thu 20 Oct 2022 12:00:00 +0000
ROA not before: Thu 20 Oct 2022 12:00:00 +0000
ROA not after: Fri 25 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.202.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a3:fa:0d:ae:01:8f:cc:a0:49:0b:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 20 12:00:00 2022 GMT
Not After : Nov 25 05:00:00 2022 GMT
Subject: CN=bb586e23-293b-4ae8-8b3d-81f24a6114e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e5:6a:c5:49:e7:f8:67:0c:39:29:9d:2a:1b:
78:a2:25:2e:82:91:08:92:ed:b9:04:1b:83:e9:81:
7b:d9:45:e6:24:bd:d9:16:45:26:14:3f:49:04:fa:
c9:c9:b8:5e:91:e6:93:c9:37:6a:55:94:85:7b:66:
94:65:0c:60:b4:33:ef:c5:b3:88:32:1a:31:25:ee:
d1:cf:cf:a3:c9:bc:66:7b:6d:6b:3e:9c:95:9e:d1:
3a:62:9d:6c:f0:f5:ec:bb:d4:90:ce:92:42:b6:b0:
5a:9c:24:73:4d:f2:a7:fe:a8:f9:84:37:00:3e:5a:
df:71:70:99:79:45:ea:22:20:3d:58:74:3d:71:b5:
51:94:49:b0:ad:ea:fe:ab:0f:f9:11:8a:0f:5b:d3:
bf:1e:19:ad:dd:64:df:85:43:d6:c5:d5:3d:bf:57:
08:ad:cb:7f:9b:62:1b:e5:b6:8b:c6:2a:9e:f4:47:
5c:f2:b2:7d:71:06:5c:56:b2:82:ff:ef:36:5f:64:
da:e4:fd:2e:7a:31:93:73:b5:4f:7a:06:98:eb:6b:
a8:7d:26:f9:9b:e0:3d:10:bb:3d:2e:6d:29:2d:f6:
08:47:8e:ca:70:ba:64:c5:4a:46:1a:f2:67:56:dc:
bb:a6:87:4a:23:47:54:e6:65:6e:0c:0f:a3:5a:6b:
15:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:27:D8:72:F2:65:7E:DB:A1:6E:7F:E3:92:8D:62:FA:FB:90:A8:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9fb2e3d2-9c50-384f-a3c3-229a9763b775.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.202.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:86:49:cb:63:04:ed:73:33:18:e0:72:fe:c7:fd:37:2d:e5:
94:6d:2b:0f:39:0e:b0:af:66:e5:b8:4e:45:64:54:b8:a4:c3:
fd:c2:81:78:7c:2f:ac:93:38:b8:ad:93:0b:80:62:d9:82:c5:
fb:22:aa:17:ca:83:63:65:f8:e6:ee:e7:c9:f6:92:f3:b1:d6:
93:7c:29:34:92:2b:80:7e:54:83:f7:8f:14:78:77:9d:c9:fa:
9b:e4:b6:4e:d6:bb:f6:2b:53:c0:42:d5:33:06:3e:34:0b:f3:
53:d3:e5:6b:a6:26:e5:cc:93:76:89:a0:78:16:82:d9:19:24:
76:4b:60:0e:c0:ab:2a:c8:08:e7:e6:bc:c4:d9:d8:8c:cd:56:
50:8c:a0:49:7f:00:c7:38:67:e7:22:63:b7:4b:f6:99:d1:2e:
17:d1:1a:b0:89:aa:cf:23:07:72:47:c2:ae:65:cc:e8:99:3d:
83:f1:14:ab:58:9e:a1:cf:97:33:69:b9:cc:dd:2e:a8:ff:69:
56:e9:71:d5:7b:23:b3:9f:13:1e:be:17:81:26:12:d5:fb:b8:
ff:ed:d1:fc:c9:eb:be:d1:45:4a:34:ee:4b:f8:0d:b6:ff:7f:
2e:0c:48:c5:77:37:6c:f2:59:2d:7b:e3:3b:86:75:59:b9:f1:
e4:91:28:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:55:18 2025 by rpki-client