Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dfe1b20a-11a9-3c66-8939-0f086de9bdb2.roa
File: dfe1b20a-11a9-3c66-8939-0f086de9bdb2.roa (raw, json)
Hash identifier: NKZxG41UrnRiLWeJG+UOSZowyZBi2UTS8DNa7m5kCE4=
Subject key identifier: EB:E8:CC:CF:71:B3:E2:06:63:9A:C3:77:85:01:CA:51:C2:52:9E:0A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F33519508C3D82173A269DB00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dfe1b20a-11a9-3c66-8939-0f086de9bdb2.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.180.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:33:51:95:08:c3:d8:21:73:a2:69:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=bdd69285-a4f0-49e9-aa40-25269cac02e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:50:8f:3e:4d:c3:ff:6e:4f:10:47:e6:48:
20:a7:0d:34:86:2f:03:fe:8a:6f:26:0e:7a:29:68:
41:8a:b1:a1:6b:13:f7:a5:2d:ed:9b:b9:f8:59:21:
0b:ea:b5:52:d4:ed:18:b5:ac:fa:06:24:5e:c7:75:
54:a5:fe:9f:75:f4:69:10:7e:af:15:7f:1b:1b:48:
dc:55:88:60:e2:e3:40:1a:20:40:be:b8:81:03:97:
83:20:9d:cc:3f:db:e7:65:db:f9:3a:0d:0e:a5:34:
a7:5a:3d:d5:19:91:7d:1e:d2:2d:07:e6:00:2a:e4:
e4:b5:a7:73:43:07:a0:87:70:73:3c:8b:b4:31:1b:
00:7f:db:22:90:01:9a:14:fd:bb:cd:93:00:c8:90:
62:46:aa:7e:3b:d7:4d:96:bd:0e:62:e4:eb:06:55:
e1:2e:7a:03:14:f8:d1:65:b1:c3:90:45:53:0b:e8:
fd:04:c0:83:c9:9c:63:50:fc:bf:2e:f4:f7:ec:b0:
dd:4a:eb:39:ef:74:9c:bb:03:d9:5e:f8:78:0d:10:
4b:17:20:93:43:a6:1a:df:8a:fb:c0:dd:80:26:b8:
61:82:74:a1:fc:79:4e:73:94:aa:0a:45:da:85:e3:
8a:dd:4a:b8:04:f9:a8:16:2c:8e:dd:c9:9b:5a:d2:
a3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E8:CC:CF:71:B3:E2:06:63:9A:C3:77:85:01:CA:51:C2:52:9E:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dfe1b20a-11a9-3c66-8939-0f086de9bdb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.180.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:77:f0:df:fb:7c:ab:5d:d0:7b:9d:b4:23:ae:d9:49:d8:f5:
0f:cc:31:43:98:e8:b0:82:9c:09:d1:3e:c6:8b:62:b4:8a:be:
b5:ae:ea:b7:ed:35:fa:b6:ed:5e:1e:a0:9e:72:e2:92:35:a1:
d5:94:71:a7:66:cc:88:1f:6a:41:e3:65:b3:5d:da:4e:9e:5c:
ea:56:b2:9a:47:d4:d0:78:26:ce:02:ea:d6:6c:f5:a2:0d:40:
77:f1:ed:6e:9a:d1:e8:39:2c:96:38:b5:b0:cc:a4:e2:9d:be:
f0:e6:e6:e6:47:4c:5e:f2:d6:4a:64:57:c1:d3:91:b8:3c:08:
bd:bd:89:57:11:52:04:7b:85:a1:ad:3d:02:6f:c5:61:18:2e:
57:bf:1d:52:a2:c2:07:9f:f5:dd:32:42:84:9c:6d:80:90:36:
19:5b:2d:00:79:fd:3f:db:53:56:bc:77:e8:94:cb:72:75:39:
73:c5:36:a9:5b:7f:af:77:f2:9c:89:99:98:2f:73:d2:7f:32:
05:21:c3:c7:da:0b:3e:bb:ae:bc:34:c3:6b:07:90:14:f7:a3:
7d:ae:84:26:5c:9c:9c:c4:be:3b:f8:f1:c2:8c:a7:c4:ad:97:
09:6d:df:23:21:7f:1f:30:f2:ec:20:fc:c4:91:59:fa:3b:7e:
1b:e7:c6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:17:38 2025 by rpki-client