Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b834e37d-994a-3655-8083-56956d49356c.roa
File: b834e37d-994a-3655-8083-56956d49356c.roa (raw, json)
Hash identifier: vGJSI58yVNnayUXPzPM75iKSJI+X4XwDL+JaP+CIPME=
Subject key identifier: 23:16:88:27:E0:7A:51:17:11:2B:05:E7:FA:1F:98:33:B6:2A:54:03
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F340B8F7912A307B78503EF80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b834e37d-994a-3655-8083-56956d49356c.roa
Signing time: Sat 10 Sep 2022 12:00:00 +0000
ROA not before: Sat 10 Sep 2022 12:00:00 +0000
ROA not after: Sun 16 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.85.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:34:0b:8f:79:12:a3:07:b7:85:03:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 10 12:00:00 2022 GMT
Not After : Oct 16 04:00:00 2022 GMT
Subject: CN=aa4ce01f-d0c0-4f89-849f-fd63fdaa8311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:aa:f8:94:26:3b:2d:99:27:41:73:f7:4d:e0:
21:c0:40:35:ab:d4:37:7b:95:b2:8a:80:64:2a:57:
0a:ed:2c:a1:42:ef:26:70:cc:24:fc:e6:78:10:3b:
ec:53:c9:c7:c8:05:28:a0:ea:ed:b2:cd:76:f2:89:
0a:45:9f:13:7d:82:4d:63:b6:8e:ad:37:ec:d4:a8:
f7:e9:f5:9b:ee:71:41:d6:81:d5:fb:9d:a7:93:f1:
e8:c2:6c:69:9d:72:aa:98:0b:af:b4:1d:65:d2:7d:
02:84:21:9e:b2:f7:f2:36:6c:12:e8:bc:73:b2:52:
d5:19:27:a0:98:8e:5e:83:d7:60:46:0d:de:af:d8:
ab:01:61:74:a2:cb:3a:01:d5:1c:b7:fb:23:78:6e:
7d:11:52:61:95:ed:fd:c5:cf:2e:c1:88:79:ab:d4:
ee:a9:c9:16:31:6e:f8:e6:44:ef:29:5f:dd:d0:8e:
65:6d:03:8d:6e:ec:1b:c7:f0:fb:cb:ed:ae:d0:35:
c5:ca:12:20:06:fb:01:2a:cf:ea:a6:78:25:7c:d4:
03:99:5b:64:d7:39:f5:6d:49:37:96:22:f8:e4:12:
d8:2d:54:68:18:47:a3:5b:e5:d4:64:df:34:7f:3f:
13:2d:15:16:68:ff:51:69:2e:5f:71:08:a3:fa:66:
a9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:16:88:27:E0:7A:51:17:11:2B:05:E7:FA:1F:98:33:B6:2A:54:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b834e37d-994a-3655-8083-56956d49356c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.85.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:ec:12:ee:21:a5:d0:6b:41:66:e2:3b:4b:e0:be:a7:6d:04:
73:fe:8a:a1:2e:9a:8a:15:1e:de:e5:52:b5:05:b1:99:67:61:
22:fc:b6:d0:56:17:e7:25:4c:06:35:75:ff:93:7c:b4:c4:05:
bb:86:d7:4d:c0:98:5d:37:ea:cf:00:e9:f6:81:6d:a8:eb:f2:
46:33:9a:a6:83:48:47:72:f8:64:e8:20:59:e8:04:1e:8a:72:
0c:66:37:19:a7:4c:2e:48:98:f8:18:e3:63:ff:8d:03:68:cb:
1f:33:7a:2a:53:fc:0a:fb:af:b5:7a:1d:25:51:de:12:5f:b0:
fb:12:b5:c8:2b:c6:58:8c:a7:e2:fb:e7:e1:ef:8d:0f:b0:f9:
84:86:e6:b8:65:5f:7c:8e:bd:f7:f8:bc:2e:19:b3:e7:be:79:
ee:23:35:71:45:b8:3e:1c:7a:4a:ed:99:72:0d:23:01:1b:c6:
2f:c2:0d:75:2a:e7:4b:ec:79:a6:94:3c:e6:00:5b:00:be:12:
a8:27:46:f8:29:21:66:37:cc:59:48:a5:b8:81:cb:16:3c:63:
64:ed:8e:67:c4:33:e8:48:ab:60:ef:cf:08:80:e8:8b:0b:f3:
ce:fa:e4:cd:bb:d8:09:cb:28:98:07:ef:71:34:56:49:ac:59:
80:92:9b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:16:57 2025 by rpki-client