Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b362f41a-7943-3f33-81f3-87b54a5cd0bd.roa
File: b362f41a-7943-3f33-81f3-87b54a5cd0bd.roa (raw, json)
Hash identifier: zqCH4K5Ol+msC4UJJSc4DjJgiPWWV9qg9/HynEqaVm4=
Subject key identifier: 66:43:F3:0A:44:A2:04:6C:CD:57:0E:44:92:AA:5C:1B:0D:58:B1:E8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6F8C5A3B3894DBCC3EDD0B70
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b362f41a-7943-3f33-81f3-87b54a5cd0bd.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.228.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6f:8c:5a:3b:38:94:db:cc:3e:dd:0b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=0de742e1-8ea9-4452-8325-d6167cfad366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1f:dc:1b:9b:23:26:41:c4:84:aa:f8:d0:f0:
3d:55:0e:32:f1:f0:85:35:8e:c7:3f:2d:f8:34:30:
6e:f2:cc:a8:2f:8d:89:9d:00:4a:ab:c9:a2:62:36:
8b:07:ad:09:0d:ad:eb:ca:e9:b7:2d:ac:56:78:19:
ef:02:a8:c6:5b:ad:75:b4:8d:e2:c7:52:3c:b4:4b:
5e:7d:b0:5e:da:74:83:d4:c8:7d:ef:8d:3a:b0:ea:
72:eb:b0:56:05:51:75:a0:87:dc:6b:de:1b:a6:4b:
d3:63:8e:f2:b0:4a:73:32:72:10:86:81:89:c6:a4:
09:53:55:bb:53:c8:25:33:4a:1f:fb:51:df:2a:c2:
7f:fb:ad:60:98:71:53:71:73:39:f0:50:8c:88:3f:
8e:91:28:bd:88:03:1f:57:22:6e:1d:a1:d2:42:3c:
dd:00:b3:b7:fc:bb:78:5d:3d:d1:bc:1d:ca:b4:09:
2c:89:76:ca:82:56:b6:9c:25:d3:20:14:4a:ad:cb:
a6:0b:93:b6:54:2f:51:10:84:fb:13:48:26:b2:1f:
a1:e4:a1:93:d4:cb:20:e2:07:7a:27:76:1e:e4:30:
4d:5d:5c:0b:18:34:4a:0d:00:ba:95:7d:39:95:43:
e5:36:12:21:34:99:0d:12:9c:06:f7:a1:2f:c7:f9:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:43:F3:0A:44:A2:04:6C:CD:57:0E:44:92:AA:5C:1B:0D:58:B1:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b362f41a-7943-3f33-81f3-87b54a5cd0bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.228.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:bd:97:75:12:9d:8a:ae:62:69:06:3e:d2:ea:b7:72:c0:d3:
40:31:bd:6c:25:04:c8:f4:bc:f8:76:a5:f8:8b:13:a6:b1:c4:
df:8e:85:18:39:03:b5:a4:ad:21:96:14:f2:60:a3:35:07:9a:
b3:53:ef:15:16:f3:86:a9:3b:e1:66:f7:83:d9:29:92:da:b4:
c4:88:96:77:14:e5:e2:de:96:c2:d3:3d:81:85:2e:ef:49:eb:
a9:b6:41:40:27:39:54:5f:be:fd:0a:7d:49:83:17:2f:e2:21:
03:14:5a:dc:aa:64:37:a2:c9:7f:be:5f:7d:42:36:8c:0a:12:
f2:4f:71:77:9f:7a:68:00:a6:9a:e8:0a:27:64:0d:18:39:8c:
55:8d:e3:6c:3b:28:55:92:5d:74:bb:77:ef:ca:5c:f5:b8:86:
d7:69:e5:37:38:ef:61:d0:5d:df:30:ac:e2:19:10:2a:0d:20:
05:df:ab:87:bb:4f:ed:9f:4f:7e:5c:e0:43:68:52:e4:ae:0a:
8d:1d:05:34:77:1a:18:9b:d5:03:66:be:6d:90:2a:91:1c:67:
59:4e:0d:8a:71:6c:19:aa:be:fa:50:80:22:59:f6:ae:fb:d0:
93:b4:9c:53:07:b1:de:43:d2:d8:03:a4:bc:95:32:43:4a:41:
16:fd:32:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:15 2025 by rpki-client