Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a50d195d-906d-30df-8c29-7754d70d3748.roa
File: a50d195d-906d-30df-8c29-7754d70d3748.roa (raw, json)
Hash identifier: Ty5/RCOBvgXCCFQ+jQ9nru34ZjDw7QJBoijze+TZ6V0=
Subject key identifier: 1F:9A:62:B0:B5:EA:4E:9A:0C:C0:8A:9C:5D:E6:F4:39:44:33:C8:F0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F55BFDACCA02DC9342FBE9E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a50d195d-906d-30df-8c29-7754d70d3748.roa
Signing time: Thu 22 Sep 2022 12:00:00 +0000
ROA not before: Thu 22 Sep 2022 12:00:00 +0000
ROA not after: Fri 28 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.113.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:55:bf:da:cc:a0:2d:c9:34:2f:be:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 22 12:00:00 2022 GMT
Not After : Oct 28 04:00:00 2022 GMT
Subject: CN=de068f30-dc64-4501-92b5-7dff768b1c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:23:e2:9e:dc:4a:b7:12:86:87:41:e5:29:
21:6c:57:9c:1b:e3:b6:52:04:67:ea:9f:7a:61:67:
0e:86:cd:c7:60:64:fa:c9:ed:19:7f:14:0d:79:b6:
b4:04:bc:65:b1:65:e8:a3:20:21:70:41:6c:56:44:
7f:ae:f9:5d:33:60:20:58:2b:01:70:90:b4:07:63:
0e:cc:ba:b9:46:de:a6:91:45:95:5d:c6:54:1a:e5:
37:3d:29:de:7c:33:78:15:9d:50:0e:86:a8:a4:92:
39:d2:b3:ad:6c:4a:7d:a7:d5:0c:4a:af:4b:eb:77:
9f:e3:ec:55:bf:07:e6:1a:d0:a2:b8:0f:d2:72:76:
37:15:14:fb:67:5b:0a:fa:41:44:2f:40:dc:78:67:
13:40:70:9d:9c:cb:31:d1:1d:89:99:79:77:ba:89:
b0:d0:8a:ab:96:9a:18:bc:36:13:a9:d3:28:5d:57:
38:d7:d0:e2:b0:4b:d6:b0:16:85:b1:9b:87:7a:08:
56:be:2e:e1:c4:c4:ff:6a:bf:e1:71:20:5d:15:99:
ff:a0:ad:5f:9d:61:d3:e7:8b:16:d0:df:87:a5:0c:
f6:97:b9:bb:ea:77:35:aa:e8:5b:69:89:20:91:25:
df:01:a5:3d:fa:ed:ae:4f:ca:ce:82:e6:b0:46:f5:
56:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9A:62:B0:B5:EA:4E:9A:0C:C0:8A:9C:5D:E6:F4:39:44:33:C8:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a50d195d-906d-30df-8c29-7754d70d3748.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.113.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:b6:f6:92:ac:8d:14:97:a2:0f:25:19:ff:53:ba:47:54:73:
1a:85:d8:56:90:7d:36:77:87:da:bd:b0:86:82:47:09:d9:b9:
66:92:9e:fb:18:26:d8:ec:5c:5f:83:ae:70:64:1a:4f:6c:a5:
ba:74:cb:f2:66:07:32:ea:2b:0e:e7:5d:bb:01:2a:5d:82:1c:
4c:c6:40:fe:b2:ae:bc:57:c2:c1:b4:2c:0e:62:82:9b:b4:92:
d4:29:05:ad:73:14:59:98:3e:f0:a2:8a:a5:9c:83:5c:8d:46:
7f:af:76:ae:f7:3e:79:aa:10:2d:a1:ec:c2:d0:da:93:9f:3b:
43:94:7c:0e:9c:fc:31:6b:08:f3:8e:b7:82:ca:ab:2c:6f:53:
74:ad:77:9c:01:74:ac:27:9f:37:15:13:14:72:dd:56:72:f7:
83:4d:0b:39:90:65:da:2b:c0:bd:19:47:de:3d:ad:67:88:7e:
a1:db:84:63:94:fa:79:67:16:57:a7:bf:42:da:94:d5:7c:8b:
37:6f:c3:51:0f:3d:be:29:bd:e4:07:e2:1f:a6:0e:0d:fd:73:
56:df:3c:c3:1e:fe:cf:00:20:10:53:a4:ef:9a:7c:d3:41:cd:
66:d5:f8:ff:35:3b:51:ae:1f:79:08:7c:9e:f1:32:eb:f2:83:
42:88:b7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:20:11 2025 by rpki-client