Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c847ae23-6702-3dc8-a8c9-fa03b589883a.roa
File: c847ae23-6702-3dc8-a8c9-fa03b589883a.roa (raw, json)
Hash identifier: K8BfXuS3YcX75JYGGHchoY97DXgzHj364LQaBzfnF8A=
Subject key identifier: CF:E5:4F:2F:52:03:4A:03:43:90:A1:F0:BF:2A:A9:59:67:8E:CC:B2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD3272CB15CB56A567C1BC780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c847ae23-6702-3dc8-a8c9-fa03b589883a.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.190.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d3:27:2c:b1:5c:b5:6a:56:7c:1b:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=3c3f8f0f-a219-404c-b288-eaa404a05df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:be:61:2a:93:ab:8d:7b:d2:56:82:d8:21:a3:
10:3e:aa:33:ee:4b:6d:fe:a3:15:c5:a1:ac:85:03:
2b:7b:2b:67:22:bd:e3:fc:21:48:2f:24:8e:e2:05:
89:66:ba:9b:36:1e:1b:39:e1:40:b1:b7:0e:a4:4a:
96:ed:87:46:77:ea:b7:7b:9a:0e:4a:9a:00:bb:d8:
9e:08:b6:0f:5c:f1:2f:88:f5:85:95:ff:49:b1:82:
6c:1d:b6:ff:c8:83:1a:2a:09:bd:1a:54:7a:7a:dd:
95:b5:28:e5:26:3f:5e:17:78:1f:fc:ab:72:4e:0d:
19:40:0f:a1:5a:37:e0:f2:7b:45:50:0d:b7:73:f2:
62:3b:4a:81:c2:43:7e:28:af:13:63:13:98:da:64:
7d:8a:5f:d3:3b:db:74:e4:14:dc:ee:19:22:07:df:
cf:15:a4:55:4e:17:e1:af:4c:0e:2a:d3:05:a8:e1:
4a:88:72:76:d4:de:4d:cd:a3:6d:34:45:0b:95:01:
ee:56:25:e3:2f:91:89:98:52:e3:25:61:8c:67:d8:
7c:dd:e1:a3:82:ca:3c:ed:32:96:29:8f:6b:17:6a:
dc:ad:97:93:b2:32:89:dc:8c:cd:dd:22:d7:23:4c:
75:14:5d:b9:14:15:90:af:0a:4b:7d:6f:ff:5e:3d:
55:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E5:4F:2F:52:03:4A:03:43:90:A1:F0:BF:2A:A9:59:67:8E:CC:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c847ae23-6702-3dc8-a8c9-fa03b589883a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.190.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:a1:f4:0b:89:a9:c5:40:1e:80:d2:f1:f1:57:86:26:c9:56:
94:f0:3e:2b:b8:98:5f:f0:09:36:73:54:e3:fd:83:28:72:c1:
f6:c8:9e:f0:2e:0e:3b:35:c9:2d:f9:96:ea:62:81:a9:5b:9f:
7c:ef:e1:fc:27:79:7f:79:f3:8a:f8:05:86:9f:93:e8:1b:69:
1e:6d:a5:31:91:b4:7e:f8:4c:95:8e:9f:8f:d0:3a:a4:c8:0d:
14:3e:09:01:7b:ae:85:ee:ee:5a:af:35:b4:87:db:2c:7e:b0:
20:e2:0c:44:5f:d7:7a:d7:71:65:10:0f:40:f8:b4:fa:54:52:
36:c9:74:c1:35:56:8d:4d:4f:2d:d0:65:6b:be:5e:f6:df:70:
a5:b7:2d:29:27:73:4d:a8:a4:9e:3e:12:cb:0f:93:85:81:d9:
00:a1:ec:62:4f:fa:1c:06:04:5d:95:16:69:70:ed:b6:c6:1e:
5f:30:2b:3c:bc:d7:e3:90:64:90:24:62:10:9b:92:2a:b9:92:
3d:3d:17:d9:87:5a:20:37:f0:11:ac:d6:68:78:e6:82:09:d6:
95:a6:d9:92:3f:29:d4:aa:b9:a5:af:5f:8e:20:e7:a4:97:30:
78:c8:d9:71:91:59:ee:4f:09:84:9c:d9:d8:8c:46:5d:42:de:
5a:4e:45:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:48:13 2025 by rpki-client