Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c0468c50-1236-3fe9-a91f-7be6b0c5ba29.roa
File: c0468c50-1236-3fe9-a91f-7be6b0c5ba29.roa (raw, json)
Hash identifier: RD1gx9K15AvoapWqQhPS+Pl7c5cLwzlER2cBD0qWK3E=
Subject key identifier: 07:F3:78:E6:D9:97:EF:4E:EC:9A:33:33:A9:CD:4D:34:94:0C:FB:DC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E4858ECA7B26AE661F28E7200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c0468c50-1236-3fe9-a91f-7be6b0c5ba29.roa
Signing time: Fri 17 Jun 2022 12:00:00 +0000
ROA not before: Fri 17 Jun 2022 12:00:00 +0000
ROA not after: Sat 23 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.220.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:48:58:ec:a7:b2:6a:e6:61:f2:8e:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 17 12:00:00 2022 GMT
Not After : Jul 23 04:00:00 2022 GMT
Subject: CN=9105edd9-5dab-449f-a104-30299228154e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:70:4e:be:79:e4:24:88:7f:35:1c:9c:e2:6a:
aa:a8:0c:d6:7a:fb:37:87:02:da:bc:32:11:42:82:
6c:0a:c3:e4:52:65:8c:51:a1:1d:8d:5b:0d:e0:37:
88:19:91:c9:05:90:d5:41:5e:0b:65:ea:7c:2a:e1:
46:c3:7e:9c:a2:05:6b:37:65:a4:7d:b8:1c:96:71:
47:2a:45:75:e7:ae:9d:d5:c4:06:f6:6c:56:97:72:
76:3e:c8:10:40:28:28:7f:0a:51:37:13:8d:bd:13:
8f:ac:7a:66:f5:a3:6a:15:73:ab:65:14:15:ab:6c:
2a:06:7a:cd:24:06:64:33:48:5c:85:3a:c9:58:0f:
96:e6:47:db:79:0d:ad:8d:24:9f:11:c0:de:fa:b6:
a0:15:13:b7:06:0f:5e:ed:e0:a2:d0:c9:22:ae:da:
82:41:c0:b1:07:5f:cd:3b:34:9d:4f:7a:29:3a:9d:
95:c3:1f:98:ea:b5:2e:96:f8:3b:26:40:6c:3b:75:
8d:a4:e4:63:24:2f:f2:cc:ac:24:9b:69:2a:4b:0b:
60:8f:93:4f:e0:2b:e2:e1:8e:bb:d6:3e:48:af:86:
88:87:91:df:1d:41:a6:d5:f1:83:56:be:da:a0:46:
8b:6b:b0:10:a3:91:4a:3e:a5:97:32:e2:a5:13:eb:
e1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F3:78:E6:D9:97:EF:4E:EC:9A:33:33:A9:CD:4D:34:94:0C:FB:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c0468c50-1236-3fe9-a91f-7be6b0c5ba29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.220.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:5f:c5:ae:65:77:69:9f:be:e9:eb:5a:7c:a1:95:89:44:04:
55:12:24:f1:23:f0:82:2b:56:c3:ef:89:e2:71:b3:e0:19:18:
c2:d4:5f:be:2f:e8:47:c4:34:2f:75:0e:a0:7a:a2:3c:7c:98:
a1:4c:cd:58:87:9f:c6:b4:5b:55:10:87:8b:77:cd:69:6a:6c:
60:53:87:5d:29:85:8a:2d:1f:ee:f6:68:fa:d3:f8:a1:c3:5e:
de:a3:1f:83:56:30:87:30:59:38:76:4b:bd:90:d5:8e:65:51:
ae:0b:89:1d:ac:1f:bd:c6:f6:00:9e:d0:e7:f6:94:29:36:b4:
b5:32:93:0c:2a:a1:de:5b:b7:e5:8b:25:19:9f:d9:a0:25:7d:
36:82:33:6c:69:24:e6:db:b7:b6:07:9e:9b:9c:60:0b:34:b9:
0f:df:20:48:54:d1:e8:33:21:4c:4e:e0:0f:f3:77:66:5b:26:
08:6d:81:ae:40:3a:20:ed:aa:d1:ec:85:ec:18:58:ff:a0:d7:
7f:f2:f8:b0:a1:40:18:2d:b0:df:af:dc:6f:f2:7c:54:1c:e8:
c0:86:d4:c2:b9:fe:7c:ec:be:2e:bf:9c:98:99:39:91:08:b6:
87:67:5f:56:c8:1d:c1:d8:6d:86:2f:eb:f5:52:57:77:1e:95:
bb:4e:e0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:46:01 2025 by rpki-client