Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f81780b1-651f-3d44-bd43-42f12f25a558.roa
File: f81780b1-651f-3d44-bd43-42f12f25a558.roa (raw, json)
Hash identifier: xi59C/87Yf5G+mPsqJbeWRLrveTlaIoEIsszLG5gEAM=
Subject key identifier: 7C:15:42:6C:FD:1E:15:46:F2:05:96:AC:D2:30:55:E8:F2:88:BE:7F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E96FB2D9371B29270F2938CC8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f81780b1-651f-3d44-bd43-42f12f25a558.roa
Signing time: Fri 15 Jul 2022 12:00:00 +0000
ROA not before: Fri 15 Jul 2022 12:00:00 +0000
ROA not after: Sat 20 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.168.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:96:fb:2d:93:71:b2:92:70:f2:93:8c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 15 12:00:00 2022 GMT
Not After : Aug 20 04:00:00 2022 GMT
Subject: CN=7c4f1536-29da-4ef1-9f9f-8fa1444b9a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:29:ac:cc:7d:09:22:0f:d9:7d:e6:43:02:14:
89:67:46:65:f7:32:d1:0d:af:e3:d6:90:20:fa:c1:
4f:a1:2c:c7:fb:41:d1:c1:8e:64:34:65:4f:5f:a2:
07:c3:94:fd:de:3b:f6:db:cc:7f:b0:7b:ea:de:5e:
b7:e2:19:75:7f:63:2f:d5:ed:74:0d:0c:4f:a7:34:
1b:27:3b:c7:b5:cc:4c:73:d2:cf:26:be:04:63:47:
d2:89:06:c1:ae:5d:fa:bb:8f:4d:fb:80:9c:a9:5c:
de:8c:16:7e:d5:38:01:13:62:6a:7d:ee:88:e0:00:
55:a0:7b:46:bb:0d:30:8a:67:73:d0:d2:dd:a9:17:
3a:9c:93:84:4e:e8:38:8a:df:5a:79:a3:ae:4f:41:
eb:3e:93:67:ea:3d:b4:7a:03:23:84:1d:50:4a:10:
a2:93:a6:85:d2:dd:5b:1b:e5:b4:25:b9:14:96:3c:
4d:63:37:75:0f:44:fe:3e:68:13:84:0e:b8:b4:d7:
ac:d7:26:90:22:e6:1c:ee:e7:c8:b4:98:04:cd:78:
6e:de:da:0e:30:7c:4d:e4:4b:de:66:44:f8:a5:63:
ab:61:45:8a:13:86:fb:ec:27:79:7d:18:c5:2f:64:
f1:ad:28:c0:b8:a6:ee:4c:ee:c4:de:e5:5d:1c:62:
bd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:15:42:6C:FD:1E:15:46:F2:05:96:AC:D2:30:55:E8:F2:88:BE:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f81780b1-651f-3d44-bd43-42f12f25a558.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.168.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:64:ce:b0:0d:e9:56:58:8f:2c:47:84:bc:78:1d:fe:21:7c:
b3:dc:7c:90:c9:88:57:e1:8d:e2:45:c4:02:55:b3:0f:4d:8b:
93:41:8a:ef:07:5c:25:c8:3c:43:c0:b4:5b:48:0c:ee:33:3a:
7f:32:cc:13:6d:f9:d5:47:2f:18:8a:18:11:b3:8b:73:b9:77:
ce:59:67:b7:9c:5b:7f:99:94:2a:03:1a:e7:00:aa:b5:33:0c:
b9:2c:3f:5e:8d:f9:86:f5:e7:b4:65:f0:5c:c2:67:3b:f8:22:
f3:ec:49:96:07:b4:36:cc:61:b4:63:10:d2:b7:e3:b0:55:6c:
55:72:21:ae:02:da:52:2a:06:54:53:23:53:b1:d1:9c:7d:15:
c7:cf:db:f6:0e:fb:19:ee:ba:e0:30:2a:16:ed:8a:dd:75:09:
63:a8:82:0d:4f:33:ed:43:48:38:6d:fc:18:74:d9:f5:f2:23:
7d:57:f2:fc:10:eb:8a:7c:85:1c:c6:cb:09:a5:31:7b:6b:34:
b1:55:f2:7c:5d:5a:39:27:d5:e8:f5:65:d9:8b:55:68:0a:d6:
5f:15:8d:76:ae:3b:f5:3c:e7:ed:88:45:a9:ab:b7:a6:80:55:
2b:20:2e:f6:b6:2c:70:9e:1a:2f:b3:83:f1:ec:43:2a:19:f9:
82:ce:0a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:03:07 2025 by rpki-client