Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f5a20175-380b-34f7-828f-a56c2f4d7f6f.roa
File: f5a20175-380b-34f7-828f-a56c2f4d7f6f.roa (raw, json)
Hash identifier: VdHxLt8GkjFtzTgrhVsgRnhANdfjdSat+1uKPBwmp/0=
Subject key identifier: 4E:23:F9:6E:41:B4:19:49:41:9A:9A:93:DE:37:17:C3:A2:AF:3C:DB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401CA1DB050211AAFE05AD7D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f5a20175-380b-34f7-828f-a56c2f4d7f6f.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.148.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:a1:db:05:02:11:aa:fe:05:ad:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=6d4b6017-2a4e-4fba-bb8a-541bab880672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:f7:cc:d5:d8:f1:d3:c2:42:52:f7:93:03:
52:d8:14:17:ab:f0:b9:f9:23:36:ba:06:15:5a:ef:
ca:a3:80:bc:5a:6b:64:8d:37:74:7c:d9:2c:c6:2b:
0e:43:75:19:ea:76:41:9d:b7:82:26:4a:2a:7c:a5:
5b:23:cc:71:3f:f2:15:91:18:ef:54:1d:08:ed:b0:
b6:fc:36:98:7c:d3:1b:e2:15:20:69:a0:87:16:82:
7c:8d:64:96:28:e0:e4:b5:36:b4:06:11:d6:11:eb:
7f:b0:49:b1:a2:3d:05:2d:3b:42:6e:d2:2f:cd:3c:
4a:2b:e8:4e:5a:24:7a:a6:79:35:2f:fe:8c:89:40:
41:1c:35:d6:cd:d1:79:b6:53:1f:80:13:b8:68:08:
8e:b6:ff:15:36:c7:04:9d:59:22:ae:c0:cc:89:66:
dc:20:47:de:59:f3:f6:3c:85:18:a3:92:c5:e1:1e:
91:7e:87:b8:49:c7:b2:9b:a6:60:71:d9:db:09:02:
16:ce:f8:3e:2c:40:0f:8a:c0:0d:72:46:b8:57:69:
d8:cc:82:d7:54:2e:66:18:26:6b:7d:b1:2a:35:94:
9c:b2:20:33:42:4a:06:2c:51:08:21:ef:40:76:49:
37:32:fd:72:8b:13:e5:99:b7:39:d0:bf:f1:98:10:
95:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:23:F9:6E:41:B4:19:49:41:9A:9A:93:DE:37:17:C3:A2:AF:3C:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f5a20175-380b-34f7-828f-a56c2f4d7f6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.148.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:e6:9f:3f:ad:1f:ab:86:c4:3f:cf:22:a2:e1:8d:1c:df:9f:
1d:f4:bb:a9:73:70:83:43:01:bc:6b:46:54:f6:6d:b0:74:39:
bb:64:ab:3e:a1:f2:17:cd:83:c1:fa:d8:47:ca:81:75:bd:d5:
09:a4:d7:ba:0e:25:20:92:49:8b:fa:e6:29:7a:df:6a:95:b5:
f8:ef:1d:bc:0c:73:84:1f:e2:42:c8:9f:21:cb:d5:a5:b0:d8:
e8:d0:c5:bf:4a:e4:cb:62:6a:ae:56:cf:29:ec:57:71:6f:6d:
f2:35:cf:2a:44:be:de:ff:b9:d7:14:b6:03:de:96:e8:b3:48:
fb:cc:ad:ef:cb:e8:3d:34:9d:72:b8:3a:96:76:0a:e8:19:17:
35:35:90:51:6d:63:7a:77:77:68:46:6d:47:fc:9e:5d:8e:1b:
3b:a0:ea:a8:27:42:06:46:13:8a:d4:fb:cc:37:3c:62:c4:7f:
62:d0:2c:e7:f3:3c:e5:4d:83:1f:04:72:3b:6b:72:a7:01:6e:
a2:d6:3c:c3:d2:e4:e2:80:7a:5b:c1:46:11:94:ff:ea:8c:6a:
2c:27:05:88:10:1a:f0:ab:f3:ab:80:a6:c2:24:fa:30:44:c5:
84:65:c2:59:05:cd:08:da:17:9b:f3:2e:9c:55:25:f6:b0:fd:
69:d3:8b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:39:15 2025 by rpki-client