Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea2762b4-f49d-381d-b246-7add56cb833d.roa
File: ea2762b4-f49d-381d-b246-7add56cb833d.roa (raw, json)
Hash identifier: aZpsH2i0yyuwq0RRFZWeZpD22ThPBlL942IbjzDE8oo=
Subject key identifier: 59:80:9F:67:E2:35:0A:C0:68:2B:A1:DA:D1:C1:66:DB:6D:A3:EE:DD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DAC88D676091C2435CE19A990
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea2762b4-f49d-381d-b246-7add56cb833d.roa
Signing time: Fri 22 Apr 2022 12:00:00 +0000
ROA not before: Fri 22 Apr 2022 12:00:00 +0000
ROA not after: Sat 28 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ac:88:d6:76:09:1c:24:35:ce:19:a9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 22 12:00:00 2022 GMT
Not After : May 28 04:00:00 2022 GMT
Subject: CN=6c89f538-1e65-43f1-bbc0-74ebbae593cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9e:7a:bc:75:37:88:49:8e:b8:04:20:2e:0e:
93:a2:05:f4:89:6d:66:ee:a4:31:90:20:3a:8b:49:
5d:5e:18:3e:13:be:99:92:e9:24:ec:6c:af:d9:29:
69:63:f6:99:61:b1:84:24:63:b2:f6:21:a5:ca:b5:
6c:c3:5a:c7:88:2d:e4:c4:7f:65:90:66:bf:7b:59:
6f:43:df:7d:21:87:3a:17:de:ac:76:d2:db:a8:ca:
e6:59:19:47:d9:0e:19:c8:d1:92:5f:bf:8b:b3:f3:
c7:ce:b3:76:41:ee:38:f4:4c:e8:01:77:78:2c:cf:
c2:f7:a6:2d:9d:ad:e4:a3:4a:87:7b:4a:c4:8a:d7:
67:b1:c5:f6:5a:44:24:00:fb:1a:6f:75:b3:dc:c3:
e8:8c:a1:a4:ff:56:ea:89:82:7f:26:7c:8f:5c:43:
db:10:32:02:ba:1d:e5:6c:db:00:bf:7b:ed:8c:a9:
61:28:93:0b:f4:4e:4d:ae:46:eb:39:22:c1:87:8a:
f1:f8:d6:a6:1b:fe:84:7a:a3:73:9f:aa:31:0a:62:
f0:95:56:19:91:b8:55:0e:e2:13:18:57:82:5a:6b:
0d:1e:1c:54:6a:11:e1:29:6e:7c:73:7d:e1:38:99:
53:db:1a:9e:b1:cd:c4:7a:16:90:30:4c:f2:77:b9:
c0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:80:9F:67:E2:35:0A:C0:68:2B:A1:DA:D1:C1:66:DB:6D:A3:EE:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea2762b4-f49d-381d-b246-7add56cb833d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:84:c5:e6:e6:07:08:8c:e6:6e:2e:93:e5:19:65:a9:ff:ea:
c8:15:ec:09:9e:66:bd:62:87:de:cf:62:ce:c8:14:fe:e5:13:
d1:e3:fb:08:1c:11:bc:2d:f8:9c:5c:5e:48:92:6c:b6:2f:42:
70:d0:26:7f:94:79:b7:0b:67:84:cb:b9:2a:56:7f:29:be:74:
93:4a:f7:4f:d1:6f:a0:f3:b7:ea:37:c2:45:a3:c7:66:96:9a:
26:e5:42:fd:e4:08:11:2b:2c:c6:da:1d:06:7b:fd:88:02:71:
a2:f7:2c:1c:11:f9:51:ad:c2:e7:75:86:e2:7b:55:7f:17:2a:
96:44:aa:6e:3e:9b:26:2e:56:3f:e5:57:4d:69:8a:7b:61:dd:
7b:1b:2c:e3:e5:ca:56:5e:a1:ec:18:b1:84:81:4a:91:bc:b7:
c7:82:fc:97:cc:7e:19:91:a0:d2:51:3a:f5:39:e8:a4:8a:b5:
3d:11:17:d1:79:63:4e:6a:c9:4e:e0:59:ae:b4:7f:5a:ac:5e:
1e:c8:13:1d:76:bc:92:d9:3f:a4:7d:ca:2b:cb:73:9b:6a:e2:
59:60:97:ae:55:6c:c3:47:47:98:58:d3:47:e7:a7:ca:5e:26:
4a:6e:96:ee:83:8f:be:9a:fe:8d:a6:89:00:80:a5:f4:6c:2e:
11:f6:b6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:34:02 2025 by rpki-client