Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2586a21-88a6-3275-a5f6-0210af5184e6.roa
File: d2586a21-88a6-3275-a5f6-0210af5184e6.roa (raw, json)
Hash identifier: 2W8fEqoR3ScRXdtxgb63g8J0+cUIYA55b9r4K3CmhBk=
Subject key identifier: 84:BF:9E:19:8B:D9:A7:09:3D:1D:28:5F:5B:99:B1:D1:DC:29:EF:EB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FD17CFDA72292EB94051F8740
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2586a21-88a6-3275-a5f6-0210af5184e6.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.59.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d1:7c:fd:a7:22:92:eb:94:05:1f:87:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=3ede599f-7aa5-4fc1-9d9c-297c3015e8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c5:80:a2:de:d8:91:f0:4b:7b:d8:d1:f7:59:
d4:d0:56:7a:79:af:47:f7:67:c7:af:1a:35:a8:6c:
cf:19:46:dc:12:36:be:f4:41:72:e1:4a:84:a2:b9:
ed:a3:c6:53:bf:6a:a4:68:ea:78:a1:e4:88:e1:6f:
5c:bc:94:95:ad:df:4d:14:d3:ec:c4:68:b9:e0:24:
39:f2:e4:6a:13:9d:bc:a5:5b:de:9d:60:e5:18:d6:
36:cc:5f:fe:00:8e:aa:19:53:26:2e:85:2c:a4:aa:
df:3d:6d:38:23:19:98:3d:22:a9:76:af:6e:44:ed:
d6:8c:c8:ca:15:51:b1:d1:86:8d:81:83:4c:8c:f5:
94:47:03:ca:2c:96:c8:c8:e5:b3:40:bb:99:b4:28:
98:d8:b7:9c:47:eb:a0:ef:52:b1:53:cd:da:b8:35:
17:4d:ff:7d:dc:1f:bd:be:4a:a7:b4:cc:c4:95:1f:
64:89:f0:fb:e3:1e:97:18:1c:d9:8e:32:57:c6:37:
f2:88:64:50:d2:c0:10:ee:fa:d9:94:e3:3b:8c:e7:
de:17:15:6a:4b:24:85:48:bc:df:d2:c2:5b:b8:db:
66:13:55:1e:ae:0c:4e:2a:77:d0:06:c0:92:85:75:
b0:d0:27:31:6f:42:3f:93:c0:c4:6f:29:ec:c8:5e:
a9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BF:9E:19:8B:D9:A7:09:3D:1D:28:5F:5B:99:B1:D1:DC:29:EF:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2586a21-88a6-3275-a5f6-0210af5184e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.59.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:2d:84:09:f3:18:84:16:e6:c0:70:f6:46:18:ee:81:27:e1:
1a:d2:a7:26:75:76:24:d1:03:f3:2d:9f:9d:cc:56:cc:43:27:
03:1d:dc:2a:5c:f5:79:00:e9:3a:c8:78:73:e5:dd:ef:01:a9:
38:4e:65:5a:49:b4:41:5a:21:99:e0:46:e4:6a:91:f8:e7:b7:
8a:ac:45:02:9c:d8:ee:b3:bc:f4:3d:df:ef:88:5c:4f:40:41:
ec:6e:ce:d4:1c:57:bc:f1:76:fd:17:5e:72:b4:68:25:bc:fa:
ad:31:98:e6:20:83:2d:12:79:34:78:d2:84:40:cf:e6:96:c9:
c6:6c:4f:aa:2e:e4:3b:2b:6e:9e:e2:62:d7:01:59:ea:29:fc:
6d:b5:64:f6:64:df:09:1f:e2:88:6d:47:ce:8c:85:95:46:35:
0d:7e:6f:2f:e0:d4:66:7d:64:d8:f8:c6:8f:32:17:83:03:45:
a3:c4:7e:30:68:6e:4e:d8:a7:be:93:94:6f:aa:c3:9e:a1:09:
3e:17:47:09:25:f2:1f:c9:a3:c7:5a:93:fd:88:d5:4f:7d:19:
c6:cb:ec:9e:2b:18:92:b1:5d:0a:1d:1c:10:fa:a2:93:b4:25:
34:4b:dd:d6:15:4a:0d:06:84:f5:fb:91:a7:ec:56:05:58:b7:
6e:35:89:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:35:18 2025 by rpki-client