Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bbd3a575-91e6-3df0-8723-fe81d87285ef.roa
File: bbd3a575-91e6-3df0-8723-fe81d87285ef.roa (raw, json)
Hash identifier: LdodTRrZcY1mIK6gW2pdHW0mIzN+NKqd+Mo0V30x15E=
Subject key identifier: A3:7F:F4:3E:78:0B:4D:CF:71:E3:CB:63:B7:AF:C6:CF:7B:6F:E4:3E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBE717AB3DEBE6B9AB5185B20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bbd3a575-91e6-3df0-8723-fe81d87285ef.roa
Signing time: Sat 30 Jul 2022 12:00:00 +0000
ROA not before: Sat 30 Jul 2022 12:00:00 +0000
ROA not after: Sun 04 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.120.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:be:71:7a:b3:de:be:6b:9a:b5:18:5b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 30 12:00:00 2022 GMT
Not After : Sep 4 04:00:00 2022 GMT
Subject: CN=f73bfa86-a80c-4fbc-8031-08207d27ded8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d8:9a:72:3c:ae:5a:61:64:ba:53:70:f3:57:
fb:39:9d:c5:9f:a9:2e:58:ac:25:9f:68:46:09:66:
29:43:1e:89:3a:a4:c9:d5:e5:8d:b6:d2:53:d0:d4:
05:f7:20:fc:eb:3c:6e:e6:ed:42:cb:0c:46:9d:ba:
1a:8f:2c:34:79:18:8b:ad:51:66:d4:3d:27:d4:6d:
2f:a9:d6:27:86:c8:b5:8b:70:56:18:c5:3f:7a:39:
42:35:5a:56:d1:c0:9e:44:7a:f4:c7:67:79:c5:c3:
6a:12:aa:c0:c7:87:b2:8a:19:bd:8f:2f:2b:ff:88:
02:a1:46:47:e0:da:0b:8e:d7:d7:cd:45:c3:7a:81:
91:19:f1:f5:17:17:8a:34:8e:5c:fb:16:27:8b:dd:
b5:c4:18:58:4e:a9:03:90:32:3a:47:af:87:7a:25:
ee:6c:6f:aa:f5:06:10:1a:1d:d0:0c:c8:ae:d7:48:
ef:4f:85:64:e8:ef:ed:28:76:f0:cc:dc:f3:e4:f9:
3d:24:d1:c2:35:0f:c5:fa:04:1a:ae:33:04:78:54:
7d:d8:23:44:d9:bc:11:df:49:d4:bc:3c:99:fb:c8:
78:c3:53:2e:23:f2:4d:62:2c:63:f7:cc:3a:6f:2b:
3a:a4:31:c4:bd:20:35:67:60:55:f6:91:09:b4:cf:
36:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7F:F4:3E:78:0B:4D:CF:71:E3:CB:63:B7:AF:C6:CF:7B:6F:E4:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bbd3a575-91e6-3df0-8723-fe81d87285ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.120.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:33:50:0e:62:b3:64:a5:d3:12:a2:3e:1d:08:40:fc:16:92:
11:0e:44:2f:5a:28:ec:1a:50:4b:ad:b0:63:3f:24:ca:c8:ea:
30:91:e5:cb:28:aa:8d:b3:bd:51:23:25:06:f5:fb:f8:0f:aa:
fc:34:5b:10:6d:30:18:b6:68:09:6f:b8:3f:87:32:a7:6e:04:
29:bb:dd:5e:1b:ba:51:c6:37:04:c5:23:bf:fb:eb:89:fe:d7:
bc:ad:4d:40:15:9d:c2:ca:5b:f8:1a:37:79:70:42:06:38:c4:
fd:48:8c:68:a3:d8:7d:86:c3:35:08:93:9f:11:38:b8:3e:ed:
79:04:0e:fd:31:3a:bb:56:f8:34:51:e0:84:ad:6e:69:8e:fb:
b4:30:97:0a:0d:e1:16:b0:39:42:bb:a6:c9:e6:82:a8:0f:38:
8f:33:be:44:6e:83:8f:14:1e:7e:ff:b7:74:b1:49:e9:86:9d:
1b:5e:d7:9f:f2:23:af:ca:24:03:b3:4d:20:ec:41:a0:48:b8:
f4:31:ad:14:44:e6:4d:36:b7:41:43:eb:91:cd:4c:7a:91:7b:
e9:a8:1d:92:cd:c5:89:7e:e0:14:9b:02:57:c1:26:11:0b:93:
45:a5:ce:9c:d3:6e:33:a0:63:59:e7:10:da:c1:07:37:15:b7:
c1:82:14:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:29:47 2025 by rpki-client