Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aca28655-45ae-35bb-a1c8-35c887df4f83.roa
File: aca28655-45ae-35bb-a1c8-35c887df4f83.roa (raw, json)
Hash identifier: nNX+QWv2TWLo0pcRQ+YjW7/+5dBsaiCMZ2Gy/SczkUQ=
Subject key identifier: 57:B3:08:BB:7D:E6:33:A7:EB:60:11:40:78:82:CC:38:AC:04:87:BD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0C007D869838C5D83E463980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aca28655-45ae-35bb-a1c8-35c887df4f83.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.246.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0c:00:7d:86:98:38:c5:d8:3e:46:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=189cf598-9290-4f97-881a-cc195398a31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:2f:24:d0:c7:2b:41:a4:03:57:ee:a3:2b:
83:a2:30:66:9b:04:8d:e7:68:79:14:12:ca:fa:78:
99:76:b7:0b:b4:74:fc:54:3a:9d:de:fb:ce:f3:02:
84:90:99:a5:66:64:81:b7:09:34:78:07:5e:28:fa:
91:8e:75:13:ae:0d:d5:86:27:0d:1f:57:6f:d5:58:
7a:60:70:90:94:4d:4b:e0:29:2b:8e:3f:d2:85:a5:
77:56:3b:5c:fa:8d:4c:fa:50:81:55:b0:6b:ca:7e:
b4:13:7d:21:65:48:c9:02:54:0b:db:59:88:98:d9:
b4:79:f3:19:39:33:67:4a:32:43:a4:a6:d1:7f:82:
87:2c:be:e1:7f:5a:cc:33:60:ac:f2:bf:ec:b3:d5:
1a:ba:08:5e:db:2e:77:c4:70:5e:9c:f8:9a:2a:dd:
10:7a:0f:5f:69:81:0e:7c:6a:07:6d:9b:2a:c8:26:
9e:dd:05:30:5a:6e:64:67:7f:9f:85:70:a1:26:9e:
d3:bb:c4:92:40:1d:64:a4:12:47:e7:89:e8:b5:36:
09:22:be:57:c3:1c:1e:3e:9c:f4:73:90:6d:77:24:
ea:4f:b5:9a:d9:cd:0a:c0:65:8c:c1:f8:25:f1:ef:
70:d1:6a:3d:0a:83:12:3a:1b:7d:8c:47:5c:ce:72:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B3:08:BB:7D:E6:33:A7:EB:60:11:40:78:82:CC:38:AC:04:87:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aca28655-45ae-35bb-a1c8-35c887df4f83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.246.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:89:2b:06:15:46:9e:de:45:3b:7a:d9:11:93:cc:61:db:a0:
a5:f4:17:7d:ae:2b:65:14:96:8d:56:9c:09:2e:99:ed:e5:1c:
f7:ae:3e:0b:1a:e0:90:7f:73:68:13:9a:07:73:1a:3e:13:2e:
38:aa:3f:c5:ce:ac:27:83:13:8a:50:2f:64:eb:d8:ab:b8:d9:
7d:8a:83:f3:aa:84:17:cf:d6:b9:3a:8e:ba:ed:ae:4d:0b:16:
13:91:7f:05:61:eb:47:fa:85:d2:81:eb:c1:e7:80:4d:54:ee:
8c:dc:39:32:c7:0f:c5:2e:2c:e2:c1:2f:80:e8:cf:16:e0:70:
a0:62:6e:fd:f6:22:2f:5c:12:8b:58:c1:32:bc:f8:58:51:fb:
b0:0d:de:3f:36:4a:f3:30:55:02:d5:25:55:4f:b5:a0:7b:3d:
ef:9d:be:92:54:8e:ff:3d:bc:28:32:1c:67:89:b5:b5:3a:02:
59:2a:1a:32:e2:01:92:c5:a0:6a:8e:22:c7:c0:46:af:d5:ac:
3c:bb:12:24:6d:7c:e2:f8:61:5b:88:27:0a:a6:1e:37:05:d9:
95:23:35:44:a0:36:3b:38:af:00:d5:2a:e9:22:50:72:10:5d:
2b:fc:73:eb:12:ac:25:15:4e:a0:38:a9:75:52:e3:fa:42:0e:
fa:34:7b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:07:27 2025 by rpki-client