Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f33c311f-3a81-391d-9ace-b9c65fa647e8.roa
File: f33c311f-3a81-391d-9ace-b9c65fa647e8.roa (raw, json)
Hash identifier: qmwlUQ7tSOJxfJbsUTU6NnVgLoFCBh7QVCLWw2ftMKI=
Subject key identifier: CA:42:CF:C6:3E:CA:02:C9:E3:96:1F:D0:E0:73:04:38:03:5C:AD:FC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401CB0AFEE7506C0FB64A4D840
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f33c311f-3a81-391d-9ace-b9c65fa647e8.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.186.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:b0:af:ee:75:06:c0:fb:64:a4:d8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=84f89d04-7f2e-4a4f-82c4-66c03a5af079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:07:cc:aa:64:07:49:8d:0b:1b:09:c1:62:ba:
cb:87:f6:d3:b2:56:10:74:3c:e9:9c:46:8b:7b:0e:
28:b7:33:28:d1:96:37:f8:74:b7:95:be:e0:0c:b3:
d2:a0:3d:b0:6b:cf:78:2f:a7:64:f1:0f:4e:3a:d5:
b6:76:76:a1:32:aa:0f:3c:87:a6:ab:be:01:40:25:
42:5a:74:63:f8:10:b3:ae:48:43:0a:b3:47:41:0a:
1b:dd:cf:ce:f9:09:93:ec:11:aa:3d:d8:25:9e:b2:
ca:08:da:54:82:88:b1:90:4e:d0:d0:80:bb:1d:41:
81:72:4b:b1:dd:b3:f3:d6:84:9a:c9:74:68:20:67:
35:33:b0:96:ef:ad:e9:8a:26:e2:7e:f5:dc:92:1f:
47:e8:b2:87:45:2b:ee:4c:cd:f8:47:8e:46:d0:0f:
43:95:16:dc:fa:b2:fb:23:4e:cd:c6:ec:12:c0:ea:
11:4e:a8:67:5b:a7:fc:20:47:01:04:bd:a3:c5:2f:
1e:33:1f:30:9e:f6:f6:2c:12:8f:53:76:6c:c3:fd:
99:4f:18:73:ca:b6:08:e8:5c:aa:14:e9:f6:f1:67:
d2:61:7e:5d:d0:9c:15:ce:3d:08:26:e4:f2:78:27:
83:18:45:16:a0:dd:d9:4a:2c:d5:c1:06:68:70:95:
2c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:42:CF:C6:3E:CA:02:C9:E3:96:1F:D0:E0:73:04:38:03:5C:AD:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f33c311f-3a81-391d-9ace-b9c65fa647e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.186.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:6c:ee:15:4f:f1:cd:8c:37:96:6c:f1:b3:e5:0b:a1:44:3e:
e4:b9:6e:43:34:e0:56:a9:18:25:df:fd:d0:67:30:a9:a4:db:
a3:48:9d:46:01:6c:13:46:23:f7:04:aa:27:22:54:f4:98:6f:
82:03:ec:59:07:41:36:31:2d:b0:d1:40:d5:52:36:38:91:8c:
f0:6b:5e:51:a0:06:17:fa:83:c3:5a:b8:63:b1:3c:87:d8:c2:
76:f9:6c:bd:1a:7b:6c:44:6d:2c:44:39:0a:7b:4c:46:26:4e:
f2:3b:f8:41:d7:dc:bd:09:52:d1:e5:9e:ab:45:e0:dc:a1:dc:
a8:96:35:d4:4e:20:7c:6b:65:7d:18:19:73:9d:61:97:1d:9e:
91:8c:5d:3d:8b:15:ed:af:b3:49:49:1a:fe:12:cf:5a:45:16:
93:94:a5:e8:61:a0:3c:5d:5d:de:95:23:50:ed:1f:31:32:e7:
17:c7:a9:21:4a:44:51:94:6a:4e:41:08:3a:04:47:ea:e9:15:
41:82:7a:4d:55:1a:d4:58:e7:2a:54:ef:96:b6:d4:88:ac:b3:
63:75:75:e4:43:bb:a2:9b:f4:ad:f7:70:fd:0d:ef:5a:fd:50:
41:67:d0:c6:fd:73:a0:40:6e:88:4a:43:de:4b:e0:b1:c4:e7:
90:da:67:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:28:09 2025 by rpki-client