Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d5c70cae-b478-3564-8e1e-6768aaadc1d4.roa
File: d5c70cae-b478-3564-8e1e-6768aaadc1d4.roa (raw, json)
Hash identifier: 3KoeB3aSam1gxx86wk4J4rSBKqi2gyRloujZq/VjNV4=
Subject key identifier: 89:10:F4:06:AF:22:90:5C:FB:CC:3A:51:FF:5D:24:A8:EE:AC:58:73
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401F73C9B6D82F286DFEF7A600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d5c70cae-b478-3564-8e1e-6768aaadc1d4.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.92.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1f:73:c9:b6:d8:2f:28:6d:fe:f7:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=f4afa135-7c1a-4ca2-a119-1269485e6922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ac:bf:ea:31:7b:96:7d:a3:f4:b5:c1:5e:7a:
b6:10:8a:b8:f4:c0:66:ff:8a:1a:9a:5f:99:a5:50:
3d:86:5a:a8:07:d9:83:1d:1d:87:8c:63:3e:4c:36:
95:ab:7f:b1:6e:27:53:6e:8d:63:6c:b9:18:00:fd:
8f:21:52:c4:70:ac:28:e9:d5:db:5a:25:9b:eb:f4:
6e:04:3a:84:70:36:65:fa:ef:f1:7c:b6:bf:e0:b4:
ae:46:fa:12:2b:a0:1c:30:21:2c:e4:31:91:46:13:
84:69:6c:a8:4f:37:a6:01:20:37:a2:18:79:0d:09:
b5:a0:27:c8:28:3f:03:50:80:82:0b:da:59:48:0d:
f0:60:d8:04:00:64:a4:b3:f9:34:1e:b4:e4:44:eb:
57:c2:84:36:af:88:c8:9d:f0:d6:c4:58:70:20:67:
3f:fa:bc:93:4f:22:71:f1:b2:46:b8:3e:21:6c:0d:
fa:12:08:86:b8:32:37:ec:2d:ce:b7:79:7d:5b:99:
3b:a0:4f:08:d2:6e:96:cd:59:7b:1d:93:94:9f:07:
cf:8d:0f:a7:7c:a2:19:91:7e:a9:88:79:24:87:6e:
74:df:d2:2a:dd:4e:84:2f:a5:92:b6:04:c6:50:7e:
bd:fb:e1:86:23:74:82:f3:4b:9e:85:85:53:a6:73:
9d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:10:F4:06:AF:22:90:5C:FB:CC:3A:51:FF:5D:24:A8:EE:AC:58:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d5c70cae-b478-3564-8e1e-6768aaadc1d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.92.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:7c:ee:92:d2:4d:f3:5a:b7:6c:fa:92:6c:df:a4:6a:ab:ae:
d1:7f:54:2c:ed:b4:8d:f3:43:7d:ff:44:bc:2d:96:74:65:bb:
df:0f:51:7c:0c:57:b8:6d:5f:14:67:2b:70:13:6a:3d:ae:d8:
b9:73:6c:08:d4:2e:52:c3:2f:51:45:97:9c:e8:9e:e7:2a:08:
68:47:91:1e:ff:0a:8a:0d:2c:90:9e:b5:52:27:93:10:b8:c6:
8b:40:fe:b3:5e:4c:12:b4:3a:7d:44:cf:72:c9:52:38:02:0a:
b2:c4:1a:a2:ac:e7:90:b9:1a:fc:14:4e:a8:b8:7e:71:3a:fc:
c0:ba:84:cf:84:54:a2:1f:3d:75:69:90:01:4e:ef:da:21:05:
7b:65:e0:62:e2:c9:7c:a5:05:4a:7d:0b:86:04:eb:92:82:4d:
f1:cd:a6:1f:b2:19:08:4c:68:85:96:b0:48:13:16:a1:78:5f:
a8:49:34:52:26:4c:48:7d:13:05:df:66:98:fb:13:19:89:29:
b5:2d:e1:17:98:4e:bb:f9:f2:2b:e4:9b:42:81:2d:45:04:e3:
0d:88:b6:a1:b6:9b:2a:61:ea:ef:f8:04:5f:ea:1a:a1:a7:07:
b9:51:66:23:aa:93:ca:53:a6:22:02:52:f3:5d:92:a2:47:7e:
57:77:6d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:22:48 2025 by rpki-client