Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a249a443-03e0-3c58-afaf-e26185a3ed5d.roa
File: a249a443-03e0-3c58-afaf-e26185a3ed5d.roa (raw, json)
Hash identifier: pghe9Y1IIRdfX2UAN5k1yIQWTEPCU8QoUKxa5fLF+tQ=
Subject key identifier: 18:FF:62:79:51:1F:F1:13:38:6B:95:4E:D3:5A:11:C9:6A:C2:3B:49
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0C25756271811A7F14CD9060
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a249a443-03e0-3c58-afaf-e26185a3ed5d.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.188.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0c:25:75:62:71:81:1a:7f:14:cd:90:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=7d061387-9641-4bd9-b173-68e8bc93913b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bc:99:98:e9:02:ff:14:b1:a9:01:a7:98:81:
10:f3:1e:47:ad:d7:8a:b5:6d:e2:15:0f:70:6b:d5:
0b:b3:1d:8d:c8:89:b6:a4:7f:ff:cf:af:d0:2d:fa:
6b:17:0a:5f:d9:68:2a:7a:03:f1:b3:09:a8:9e:82:
14:6f:66:45:96:3f:b3:e6:7b:bb:80:3a:dc:80:9a:
97:46:2f:68:1c:da:40:85:a7:0f:10:bd:95:b2:f9:
55:f1:c6:7b:c1:ad:54:d6:37:a0:45:30:13:93:af:
53:8c:95:a8:63:88:1f:46:ae:72:24:1e:7f:98:31:
57:9c:7f:f0:36:74:0c:26:97:19:10:53:6b:15:ae:
ac:09:21:db:75:fe:73:33:cb:68:eb:46:03:13:c7:
77:c1:33:ce:f4:b2:c1:72:7e:25:1e:b6:fa:3b:51:
d9:80:51:03:21:3d:2d:a6:e7:1a:4c:bb:b0:52:5b:
f4:92:61:ea:9a:22:17:fb:3b:8a:f8:6e:d2:6d:d6:
0f:f6:b3:0f:ff:72:e9:fa:08:4b:cc:12:c5:3f:c8:
4d:fe:31:32:93:3c:22:70:17:20:fc:74:75:6d:a5:
59:9b:67:a5:d0:c0:60:0c:b0:24:0b:fb:e3:9b:24:
a9:de:15:3f:23:4c:bc:7a:37:79:41:0e:f3:c7:8c:
58:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FF:62:79:51:1F:F1:13:38:6B:95:4E:D3:5A:11:C9:6A:C2:3B:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a249a443-03e0-3c58-afaf-e26185a3ed5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.188.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:4d:d5:1c:80:5d:68:d6:4e:66:2d:56:cf:99:1d:10:b0:ed:
42:ef:e2:f9:01:da:d3:2d:cf:66:a3:28:df:02:53:ea:2c:93:
88:aa:c9:0e:89:fc:b8:a2:c5:5c:68:2e:aa:36:fe:13:7f:aa:
cc:a9:d4:d3:c2:9b:ec:84:9b:cd:dc:ed:b3:0e:dd:13:ef:50:
8f:4c:4a:8d:0f:10:cd:62:dc:b6:16:d4:f2:f3:0f:05:47:45:
6f:29:1e:67:fe:0e:a0:42:6f:23:e4:ab:f9:45:2d:b6:9d:09:
ce:6f:d5:58:dc:0e:95:b8:84:5a:b5:07:4e:be:f1:06:9b:46:
84:78:16:f4:8c:ba:05:45:92:d2:28:ce:2e:f6:d9:f4:fe:92:
7a:34:f3:ee:c3:d7:53:42:13:c7:c4:c7:27:25:11:bf:e8:b3:
4b:8b:05:f8:b8:77:d6:49:17:36:f5:c1:12:4a:41:24:79:6b:
9d:b5:06:40:ef:0c:38:55:cf:33:1a:7e:85:af:6d:82:d7:c6:
72:c5:44:76:b8:98:a8:4b:b3:a6:02:9e:8e:15:42:f4:72:08:
9f:44:d8:84:b8:c8:e9:bf:46:20:6e:f8:fa:eb:ef:ef:ae:15:
7d:bc:b9:4b:c7:1d:42:20:e7:e5:eb:5a:72:99:85:17:55:6f:
f4:c1:4c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:38:26 2025 by rpki-client