Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b426b215-f94a-38ab-9b25-3a8f163fb20b.roa
File: b426b215-f94a-38ab-9b25-3a8f163fb20b.roa (raw, json)
Hash identifier: lzNpUY+1dltrBgnNVlSZJanPqA0U8CWoT9r1HUNjDGw=
Subject key identifier: 6E:6E:E6:D0:4A:15:E0:EE:44:07:26:C1:4A:E8:72:29:85:DB:C6:2F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0CBA70D6BD06CE5988112800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b426b215-f94a-38ab-9b25-3a8f163fb20b.roa
Signing time: Sat 27 Aug 2022 12:00:00 +0000
ROA not before: Sat 27 Aug 2022 12:00:00 +0000
ROA not after: Sun 02 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.95.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0c:ba:70:d6:bd:06:ce:59:88:11:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 27 12:00:00 2022 GMT
Not After : Oct 2 04:00:00 2022 GMT
Subject: CN=385097cc-6f55-4971-b1b7-58c39cbc3b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:be:6e:2e:ad:2a:35:02:be:ce:88:06:ad:87:
54:91:44:20:60:d0:4e:9d:e9:0a:d2:e8:64:ad:bf:
9c:a9:47:f4:24:80:ae:2d:0b:c0:3f:fa:8b:5b:2a:
96:b1:48:df:e7:a0:28:62:67:e6:2f:9e:ed:1f:86:
69:b0:16:41:24:37:82:b0:b2:9d:63:b3:a5:4b:68:
ac:08:25:61:d0:f7:c3:b5:ec:3e:bb:1b:7c:b2:b5:
3a:97:20:c0:d5:32:9c:24:54:45:bf:27:d4:b0:c0:
59:f8:c4:bf:ec:e8:e4:5f:8f:63:e2:a7:1a:ec:e1:
cf:67:de:4f:ca:65:27:06:0e:5b:b1:e6:8f:d8:f2:
4b:c2:0b:e7:86:49:45:01:36:b1:3d:84:16:a2:3c:
0e:89:71:9a:99:51:58:ad:7a:48:f4:08:74:c0:84:
9d:0c:9c:d6:15:bb:e3:29:3f:29:39:1a:77:1f:d6:
d7:73:2d:2d:5e:a6:80:d7:5f:10:29:2f:4f:9f:ec:
3a:76:e7:dc:d7:8e:a2:92:25:87:30:73:7f:7f:80:
33:37:ab:c6:d6:86:66:8c:f3:a7:ea:e9:94:5b:8d:
de:11:bf:82:ce:b0:6a:49:6a:6e:27:71:19:f3:e9:
61:81:b2:4b:06:d9:fd:a4:57:bf:12:f3:13:19:7a:
4b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6E:E6:D0:4A:15:E0:EE:44:07:26:C1:4A:E8:72:29:85:DB:C6:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b426b215-f94a-38ab-9b25-3a8f163fb20b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.95.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:01:ed:3e:1a:36:a9:95:f7:3a:a3:f5:37:b3:4f:e9:4d:bb:
2c:8c:b2:9e:26:33:2c:19:3c:76:16:07:1d:eb:92:a5:39:ac:
05:70:11:b6:1b:87:e3:d7:af:55:01:5c:9c:0a:9c:5e:6b:87:
35:77:a8:af:71:f7:f0:dc:6f:e9:ef:09:1c:86:8d:7d:5e:bc:
a8:30:0f:b0:33:1c:a2:68:e4:93:28:97:29:d7:fb:67:6c:cb:
75:b8:9e:e0:9e:52:ed:b3:7b:68:ea:46:8f:8a:09:8a:a4:64:
89:da:e0:ac:0f:0c:01:ff:f7:7d:48:a0:4c:8e:23:33:ff:bf:
30:70:96:d8:eb:41:9e:8f:4e:d6:db:cb:b2:17:52:d9:04:0a:
ff:48:45:65:a1:2e:3f:8c:12:e8:88:18:4d:79:50:41:97:a7:
dd:33:b6:ec:57:55:63:4c:0b:79:58:fe:00:1e:ab:d8:04:16:
45:e6:f8:7a:83:e4:27:a4:8a:96:fa:2b:5e:8e:46:99:2a:d2:
fd:9b:c5:07:dc:bd:25:d3:cf:45:5a:1c:c0:67:80:69:5c:44:
15:bc:f2:a0:d2:36:6f:21:d7:3d:bd:e3:b1:90:af:6f:4a:7c:
14:b8:aa:47:f3:c5:80:3c:b4:29:a6:94:9b:f1:9e:6a:a4:7a:
83:20:27:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:39:09 2025 by rpki-client