Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4458dbe-db04-3dd9-89b0-fd73a1242e26.roa
File: d4458dbe-db04-3dd9-89b0-fd73a1242e26.roa (raw, json)
Hash identifier: qBzKEmD4qlih0I4zUqEzAGIBEWanb5qnL49rPmLdlh4=
Subject key identifier: C5:27:C6:6A:12:6B:31:58:58:15:16:3C:87:21:8B:B0:77:11:C4:6D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA6AE40E9BD1C486C438D8D20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4458dbe-db04-3dd9-89b0-fd73a1242e26.roa
Signing time: Fri 21 Oct 2022 12:00:00 +0000
ROA not before: Fri 21 Oct 2022 12:00:00 +0000
ROA not after: Sat 26 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.188.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a6:ae:40:e9:bd:1c:48:6c:43:8d:8d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 12:00:00 2022 GMT
Not After : Nov 26 05:00:00 2022 GMT
Subject: CN=2eb9e89e-db18-4a20-8bc1-bdf23dbdc6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:dc:33:18:84:35:ee:c2:c4:60:07:17:52:1f:
6b:6c:39:3e:15:62:22:e6:ed:e0:ce:6f:19:08:12:
9b:f9:7c:15:5d:0f:bd:b8:42:7e:a1:8d:7b:c9:7a:
ea:9e:fd:36:a0:2a:14:dc:7d:ab:cf:25:dd:c2:4f:
5e:1a:0b:b1:00:fe:f4:5f:f5:64:94:8e:e9:91:4b:
d1:df:a8:94:db:74:48:17:14:9b:37:2b:e9:06:11:
3d:cf:4c:ad:35:04:a7:ca:c0:51:05:6d:a8:56:19:
ed:b0:8f:8f:5c:ed:a6:5c:35:ac:85:9c:79:90:b8:
88:cf:3f:3e:28:9b:4a:6d:45:5f:2c:b3:58:86:d8:
01:92:83:ec:b6:8b:ab:e6:6b:44:65:5b:97:df:ca:
b1:63:5e:07:6f:c8:5f:bb:0a:f9:b8:cc:fd:ef:a2:
fc:4d:5a:a8:11:83:65:13:de:a7:be:2c:d2:65:19:
a7:1c:2b:bf:f4:0c:7f:59:fe:e5:c9:8b:aa:44:ca:
51:b0:64:8d:1a:73:91:7f:16:f9:82:ea:3d:d9:a3:
26:c2:fe:5d:55:a9:84:f3:e5:7e:7f:a3:a4:2c:4d:
e4:b5:31:96:29:76:0f:b6:ee:17:2b:c6:60:7b:a5:
f2:a6:14:8a:06:9e:29:fe:40:74:f2:ae:71:42:7c:
08:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:27:C6:6A:12:6B:31:58:58:15:16:3C:87:21:8B:B0:77:11:C4:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4458dbe-db04-3dd9-89b0-fd73a1242e26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.188.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:bd:aa:ae:63:84:0e:7e:f4:cb:58:32:66:44:08:99:c3:07:
5a:dc:1c:04:b9:1e:8b:30:c7:d4:19:ce:3d:e2:01:86:65:13:
22:c2:27:ac:5e:43:fb:68:c4:b8:8a:2c:71:83:6d:d1:16:71:
1d:3a:06:13:40:31:3c:04:0e:aa:f0:ed:bb:7a:9a:e9:48:94:
da:3d:02:40:95:9c:8d:34:af:f8:88:d0:61:5e:01:4f:f3:93:
4b:79:51:a1:2a:30:74:d8:5c:f0:e7:c1:fb:87:db:21:86:3c:
59:7c:5e:ac:5e:72:ca:54:9b:c2:e0:01:4e:fa:48:3d:56:b7:
98:c9:db:06:c1:db:a6:e1:9f:a9:67:fd:be:b0:af:86:7a:fc:
8f:8a:8c:9f:cf:ae:1f:e9:45:bc:e8:c8:71:94:30:bb:8c:78:
62:cc:bd:83:7f:e1:41:17:33:b5:0f:af:35:ee:ec:47:62:b4:
87:04:9f:59:d4:c1:d4:4f:3b:b1:2d:6e:7d:69:11:c0:53:5d:
a5:e9:51:1a:a3:d1:3d:be:61:68:8d:a1:84:97:4f:73:fb:7e:
3d:21:08:7a:d3:88:ef:a1:86:1c:0f:ac:e7:04:9e:c4:fb:ee:
5f:dd:ec:c8:7b:cc:e4:54:90:f9:27:fd:68:1a:28:8c:45:03:
ec:f2:c3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:32:05 2025 by rpki-client