Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c2d43927-f657-3cb0-b685-f39dd8768f32.roa
File: c2d43927-f657-3cb0-b685-f39dd8768f32.roa (raw, json)
Hash identifier: UZ8pD9s2vZ2CaYFVtRK0EGAGtQFJm3url0njb4HKc0E=
Subject key identifier: 82:50:A1:2D:F6:3E:3F:00:A4:30:DB:B5:E2:FA:FB:BB:4C:D3:BA:66
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584043A105EF5B99354FA08F23C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c2d43927-f657-3cb0-b685-f39dd8768f32.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.228.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:43:a1:05:ef:5b:99:35:4f:a0:8f:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=c3e21c7d-b5aa-4f29-8f7a-7bc237e7bc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:d3:50:29:d4:ec:30:c2:f7:2b:b0:69:50:
15:81:39:46:71:31:0a:e6:de:8e:92:87:13:b2:b6:
d7:06:2b:51:04:50:64:9c:a8:7c:09:26:8b:91:e8:
eb:64:47:aa:46:c5:77:18:46:45:c7:07:c1:be:f1:
76:e5:84:cd:d3:d7:be:79:da:ad:0e:cc:ce:8d:1c:
70:2a:47:c9:ca:76:d7:2c:e4:8a:70:47:12:cf:76:
86:40:2b:91:ab:8a:55:40:40:70:80:ba:ea:e3:ce:
1f:44:74:01:47:d6:4e:03:55:d7:77:b9:72:d7:93:
2e:ff:39:4a:4b:9f:dd:bf:50:85:32:99:e2:f0:56:
7d:84:70:f5:d9:10:3f:98:21:ea:7a:c0:c1:de:74:
b0:b5:31:6b:5a:6d:c9:0e:64:8b:23:b5:98:1a:f6:
48:d0:8f:18:d8:0e:1d:54:49:0f:dd:d3:73:ad:54:
2e:a1:40:59:6c:f9:f9:32:40:29:0e:9a:c6:8d:b9:
c1:e4:aa:ec:8b:63:54:3f:bd:39:70:dd:8d:6c:41:
9f:62:7f:17:ba:80:59:a8:c5:7b:2e:f6:dc:d7:f9:
76:11:df:b1:dc:47:3a:1b:46:2f:54:2b:51:cf:ec:
59:bd:d5:27:a8:ff:8e:19:25:c2:55:a7:3d:61:5d:
96:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:50:A1:2D:F6:3E:3F:00:A4:30:DB:B5:E2:FA:FB:BB:4C:D3:BA:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c2d43927-f657-3cb0-b685-f39dd8768f32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.228.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:00:b8:2a:c0:12:61:3a:ea:06:bd:f1:88:26:29:57:47:a1:
38:fa:32:49:9f:37:44:75:72:85:32:ed:17:27:d9:e9:41:21:
c6:e5:6f:01:bd:4c:7b:de:01:4a:da:1a:b3:7e:6a:a8:5e:33:
98:dd:7f:fe:c6:d5:8e:9e:04:88:d2:84:36:ec:c2:77:2a:be:
b3:af:71:e2:c5:42:95:82:7d:db:56:70:82:99:d1:ad:52:f3:
4b:14:0d:7f:4b:4b:03:05:6b:c0:b8:dd:2a:98:4c:1f:77:ce:
32:d1:a2:48:d7:0d:38:1c:66:e4:2e:d1:cd:71:9a:c1:74:f4:
b2:99:91:16:a7:68:f6:8e:9b:32:ff:54:df:dd:35:38:21:0c:
62:bd:ce:50:3a:da:7b:24:de:9b:d1:56:c4:e1:93:2d:3f:a0:
82:d0:c5:65:18:c7:e6:b2:23:fc:60:b1:2e:d4:20:fc:d1:0f:
f8:8f:e2:4a:e6:8d:c3:83:65:19:8f:35:8c:84:4f:af:08:9f:
75:21:bd:13:93:89:cc:40:ce:88:10:d2:5b:2c:dc:ca:9d:db:
9a:2a:29:35:b0:f2:d3:5b:e3:84:87:e4:00:94:da:1c:00:e2:
53:b4:ae:84:f4:4a:e0:91:d8:5c:3a:73:35:54:f2:5a:96:c4:
03:c8:06:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:05:07 2025 by rpki-client