Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f822c657-9ce1-38c6-8670-cf5d2850d6d5.roa
File: f822c657-9ce1-38c6-8670-cf5d2850d6d5.roa (raw, json)
Hash identifier: GB1pGzjsbPrdIS7O1fG3ltSHWWJ2GplZosRmgezAZsE=
Subject key identifier: 80:EB:BC:C2:AD:BA:34:06:51:AF:32:E7:1C:4B:B5:44:90:5C:FE:11
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE4B691C0F6CFE88126E4E900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f822c657-9ce1-38c6-8670-cf5d2850d6d5.roa
Signing time: Fri 12 Aug 2022 12:00:00 +0000
ROA not before: Fri 12 Aug 2022 12:00:00 +0000
ROA not after: Sat 17 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.248.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e4:b6:91:c0:f6:cf:e8:81:26:e4:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 12 12:00:00 2022 GMT
Not After : Sep 17 04:00:00 2022 GMT
Subject: CN=db98d247-f914-4da1-96f0-f0209d7292e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ed:c8:01:02:3e:cc:58:af:45:a7:3f:62:d3:
07:6b:23:5d:60:8c:cd:d9:2f:6c:ea:ae:33:53:39:
67:ff:6a:b5:ec:41:06:c4:4f:13:17:52:4c:9e:10:
59:92:8a:d6:1f:cd:c2:db:f7:cb:09:41:f9:31:9b:
65:1a:2b:42:5b:93:3d:d4:40:93:9e:41:bb:3f:4b:
5c:6b:8a:0a:18:99:70:99:f7:36:fa:b7:0b:6e:07:
47:91:67:93:61:d2:5c:42:15:d0:94:8b:d2:e4:aa:
3d:a2:2c:61:c2:c8:1e:2f:7d:76:f5:bf:1d:7a:80:
14:d0:fb:ce:44:88:dc:f0:b4:0c:ed:df:14:fc:50:
2b:b3:b8:c1:0e:51:0e:3c:6a:3e:91:63:c7:17:ed:
30:d0:55:a3:88:12:bc:d4:95:81:5a:c8:47:27:74:
1e:2e:6d:0f:96:f4:ca:3e:20:69:03:07:3d:80:ec:
43:ee:79:36:d8:50:29:17:70:6f:cf:a8:58:a7:d0:
90:66:63:80:8e:23:70:c4:f0:47:41:cf:86:10:27:
6b:01:02:f4:53:24:a8:55:66:85:59:40:0d:6a:ba:
38:ef:a6:3f:e2:f8:0c:76:17:5f:b6:98:2e:af:59:
eb:81:b8:e0:06:aa:d6:3c:5a:a5:04:4f:27:f9:03:
e5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EB:BC:C2:AD:BA:34:06:51:AF:32:E7:1C:4B:B5:44:90:5C:FE:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f822c657-9ce1-38c6-8670-cf5d2850d6d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.248.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:72:61:e9:80:f3:87:1b:26:ca:d9:04:5a:8f:aa:93:1f:26:
56:1e:b2:de:56:1f:43:61:2d:ef:73:9f:5f:b0:0e:51:cf:3a:
1b:c8:e3:5b:3e:04:6a:15:52:3c:14:3a:70:99:4d:d3:75:cf:
fb:30:15:83:0b:03:ea:2d:2d:34:d4:16:42:15:91:9d:c2:ee:
ed:4d:31:96:53:ff:d7:a9:1a:8e:90:33:96:ce:a1:cf:86:62:
45:1d:84:6b:80:26:a0:2c:e5:2e:d8:84:f7:72:f0:d2:32:bc:
b5:ca:ec:93:5c:b6:38:c4:56:08:2c:24:4e:3f:f1:15:ae:1d:
cf:fc:7d:c8:c5:ce:47:07:e1:b9:c9:73:43:19:71:d5:de:02:
af:c4:af:31:17:f7:9c:6a:e4:37:77:a2:ba:a9:74:87:a8:3c:
12:e5:5a:ef:97:ef:13:fe:68:48:c8:78:ce:15:c3:d1:41:49:
cb:95:d4:df:fd:85:eb:83:98:23:ab:d2:be:09:50:11:19:10:
60:f8:1f:7b:70:19:86:97:9e:24:80:92:b1:0c:86:18:b6:29:
71:2c:3d:f1:77:4e:2c:90:f7:38:bd:47:0c:f1:62:2d:f4:28:
53:ca:29:50:44:86:61:2d:dc:03:1b:76:cb:e7:c0:03:e7:5e:
c8:5a:6e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:17:00 2025 by rpki-client