Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db874287-e96f-32ec-9d96-49a7beffc718.roa
File: db874287-e96f-32ec-9d96-49a7beffc718.roa (raw, json)
Hash identifier: Ckg44JqSPcutPeC9I72EFNyVx+VzVvMPqNrR0qkSaaw=
Subject key identifier: CD:18:54:50:30:AF:C0:F8:3C:F2:93:3C:87:23:86:15:56:2F:8E:B6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E4930BB1DF0490A7B09B24880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db874287-e96f-32ec-9d96-49a7beffc718.roa
Signing time: Sat 18 Jun 2022 12:00:00 +0000
ROA not before: Sat 18 Jun 2022 12:00:00 +0000
ROA not after: Sun 24 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.92.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:49:30:bb:1d:f0:49:0a:7b:09:b2:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 18 12:00:00 2022 GMT
Not After : Jul 24 04:00:00 2022 GMT
Subject: CN=ecb5e5b5-918a-471d-8e15-98ad0eaf65b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:cd:39:d4:ba:e4:39:28:96:d9:85:f1:99:
b5:31:ce:a1:60:87:f2:60:39:53:57:4b:c5:e1:49:
64:76:09:d4:b6:62:46:19:31:f0:dd:d1:89:96:2a:
db:5d:8c:9a:3a:8d:4e:47:64:49:ee:db:3f:71:56:
55:ec:ed:13:dd:ca:fc:a8:07:ec:4e:23:11:8c:62:
c8:66:3e:bc:7b:ff:2f:52:15:35:ff:59:83:07:47:
b9:d8:a7:06:ec:94:d6:f1:77:63:94:7a:92:5f:50:
3e:41:b6:d0:91:52:12:47:5e:5e:17:9a:a5:ac:9a:
ee:af:f4:a2:0e:ae:d7:0c:b1:16:47:29:a1:8e:f0:
7e:b5:f6:21:19:a6:75:bc:f6:df:05:b9:9e:e5:19:
e6:9a:25:d1:27:5a:28:bf:20:29:dc:cd:2b:29:16:
ad:35:f6:c7:8e:b1:52:43:92:8e:41:c8:74:d7:0b:
ab:91:a9:43:54:ea:ca:a0:55:be:78:35:8e:ee:64:
f2:81:8a:da:57:7f:79:b0:8a:86:f2:ec:c5:a5:77:
e3:ff:5c:fb:d7:5e:3b:8d:11:f6:11:39:83:ab:c5:
da:05:7e:6d:a1:d7:54:53:65:36:0c:73:ce:e0:bf:
67:a7:5b:7d:c0:40:d8:af:19:b1:af:5a:7e:9e:a2:
10:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:18:54:50:30:AF:C0:F8:3C:F2:93:3C:87:23:86:15:56:2F:8E:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db874287-e96f-32ec-9d96-49a7beffc718.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.92.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:1b:cb:98:f8:31:a7:f0:00:20:5e:76:95:0d:bb:ae:c6:7f:
39:c8:be:a1:b9:80:e4:2c:6f:39:96:7e:9d:c4:e1:7e:fb:bf:
32:b9:b2:c0:7f:15:3a:18:81:f9:ef:00:d9:ce:ff:39:fc:63:
b1:74:9b:4f:a1:e1:67:e0:e0:c2:c3:ce:04:7b:c5:a3:ce:e8:
b5:4c:3e:c4:87:02:9f:70:c7:e7:b0:55:f1:7c:5f:68:80:dc:
99:37:14:eb:14:ad:0c:58:3b:b6:6a:c5:5c:ee:2d:ef:4c:a4:
90:a0:b4:bc:dd:57:02:1a:d8:64:1c:d2:e3:b1:61:40:1a:68:
c0:43:c9:5c:40:aa:0e:10:4c:f6:61:4a:4f:14:a4:b7:52:3c:
ff:9e:e4:f2:c8:be:65:7b:98:a6:c2:cb:5c:6c:65:bd:95:c8:
55:1b:53:c8:ac:fe:f7:cf:d5:80:d8:6b:9e:96:df:bd:48:6c:
85:0e:8d:7f:bf:63:c6:28:df:17:b3:e4:2f:c7:83:f6:16:6b:
6b:04:2d:e1:e4:22:2b:9e:e9:27:ad:ce:ac:a3:63:43:dd:0a:
2c:ea:a2:51:1e:24:60:8a:97:8e:08:cb:8a:dc:46:75:4a:8e:
5a:1c:f4:69:69:ce:4b:ea:2f:b1:80:8b:97:63:7f:e3:dc:59:
60:96:b1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:36:21 2025 by rpki-client