Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a122f51f-703f-388c-bafa-d0049ac7220e.roa
File: a122f51f-703f-388c-bafa-d0049ac7220e.roa (raw, json)
Hash identifier: VMJZg+53p36HUPGWil7bXoWyRg2P1fecIDAInrWsmOE=
Subject key identifier: 20:3A:A0:F7:F4:5B:8B:E0:41:90:0D:8B:53:2D:62:F5:E6:7C:0F:08
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBE8810C85218AB93F334D900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a122f51f-703f-388c-bafa-d0049ac7220e.roa
Signing time: Sat 30 Jul 2022 12:00:00 +0000
ROA not before: Sat 30 Jul 2022 12:00:00 +0000
ROA not after: Sun 04 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.91.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:be:88:10:c8:52:18:ab:93:f3:34:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 30 12:00:00 2022 GMT
Not After : Sep 4 04:00:00 2022 GMT
Subject: CN=73fc4226-6db9-4bb9-9731-4f07c129a734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:77:b7:a2:fc:8b:ee:29:9e:b3:20:26:33:
ee:62:32:8d:b3:9e:b4:7a:49:03:b9:90:49:3f:7e:
57:93:37:44:c7:39:bd:fd:79:66:c3:61:c5:80:49:
f2:4a:dd:39:a2:c3:92:1e:e0:f9:56:7f:d8:cf:83:
66:dc:1c:53:2d:14:71:5b:6f:09:17:69:ce:0c:d6:
da:1e:70:50:61:1a:e1:a9:c3:6e:ed:ae:5b:3a:06:
b8:59:ad:a5:91:08:3d:d7:38:1d:44:14:ff:f3:66:
aa:91:50:37:be:65:34:8e:3f:84:08:da:a5:ba:53:
71:c4:16:10:f2:2d:af:a1:96:e1:02:00:6a:6c:ea:
b1:d6:7f:12:0e:ad:62:5c:a3:3e:2a:a7:2e:f7:b8:
fc:c9:8b:f3:5b:2b:62:63:f3:08:4d:3d:88:2a:b3:
1c:4f:7c:4e:18:06:7d:22:36:aa:9e:e6:c3:aa:e4:
bb:19:37:14:f4:86:df:ec:86:a1:25:a7:f9:da:05:
16:9e:bb:80:eb:b9:15:59:b4:82:4a:0e:eb:33:fd:
13:35:4b:d7:3f:2f:1e:43:9d:b7:96:36:e8:91:b1:
64:b6:9d:3c:72:49:c4:3b:59:7b:cc:ce:20:aa:c6:
28:ba:86:d9:4a:e6:6a:88:c3:fb:a2:9d:6b:ca:c3:
71:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3A:A0:F7:F4:5B:8B:E0:41:90:0D:8B:53:2D:62:F5:E6:7C:0F:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a122f51f-703f-388c-bafa-d0049ac7220e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.91.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:6f:f7:20:0a:c2:3c:36:2d:1c:ff:5d:f5:25:f5:c0:e6:70:
e0:f0:83:06:cd:11:74:21:b8:ed:7c:b6:70:f0:bd:f8:4b:f8:
2c:bb:09:c1:cc:25:a2:9c:0b:9b:13:a5:dc:bd:11:ec:84:e5:
e1:e5:7c:37:75:a8:36:4c:f7:79:b0:3c:f2:ae:22:f3:33:53:
0d:09:c0:be:48:1c:d6:02:16:d5:bf:02:c0:f2:d1:f5:01:de:
08:2f:21:c8:fa:db:89:c0:48:48:8d:86:f7:aa:4f:5c:b4:2d:
a5:64:cd:86:8b:ed:58:15:45:2d:20:35:f4:d9:c9:1d:5a:ee:
bc:15:f4:e8:fb:bd:9d:7d:35:12:61:2d:52:a3:52:fc:c7:38:
4e:35:e3:08:43:97:0b:39:96:23:de:44:fa:75:90:60:65:19:
b1:e1:e1:42:30:f2:24:b9:48:b3:55:fc:fd:62:e6:dc:25:61:
7c:7e:67:17:dc:d0:98:f4:d6:30:41:09:9e:d2:0c:d3:b3:96:
11:ac:94:87:21:3b:b8:f5:aa:5f:ff:89:b2:e6:76:ed:88:af:
00:c2:3d:1c:65:21:c4:94:fa:19:4a:a7:15:f9:f4:f8:56:a0:
ea:5e:e3:72:98:2a:47:37:36:d0:ea:e5:44:35:7a:10:04:c9:
55:2a:1a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:04:51 2025 by rpki-client