Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f8c0a75e-8b8b-35bb-bf86-f58c7493e210.roa
File: f8c0a75e-8b8b-35bb-bf86-f58c7493e210.roa (raw, json)
Hash identifier: PasQ8KhFrZQ1hvZWkM85VJX5JyIbLqQE+8LWcW1GIz8=
Subject key identifier: 91:C2:3C:0D:67:B8:74:E2:54:82:52:39:7C:14:94:BA:4A:BD:4F:82
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF329D71296F198E138DA3D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f8c0a75e-8b8b-35bb-bf86-f58c7493e210.roa
Signing time: Thu 17 Nov 2022 12:00:00 +0000
ROA not before: Thu 17 Nov 2022 12:00:00 +0000
ROA not after: Fri 23 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.201.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f3:29:d7:12:96:f1:98:e1:38:da:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 17 12:00:00 2022 GMT
Not After : Dec 23 05:00:00 2022 GMT
Subject: CN=a5c71618-feae-42ba-9747-16ce4a5e61eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:10:ff:56:22:4b:93:2a:fd:d0:01:ec:05:cb:
1a:01:6a:0c:22:c6:5c:19:dc:fc:4a:50:c1:3a:d8:
39:7a:73:ed:4d:84:9b:af:1f:1b:77:78:66:4b:c7:
82:41:8b:b6:ab:20:cf:ff:aa:bc:a1:b3:4d:ea:0f:
44:d7:ef:06:1f:ec:7b:4d:e7:47:47:2c:a4:57:65:
34:ec:08:ec:2e:cf:2b:ce:1e:3e:3a:0f:98:00:2f:
b4:1a:8f:a4:43:7b:4a:48:a3:39:cc:21:33:5d:eb:
c7:cd:f9:37:80:28:be:8b:6d:5c:1b:0d:73:ad:3f:
7b:e2:6f:dd:1a:24:76:b7:9f:05:3c:ec:ae:09:12:
8d:9e:5b:26:af:6f:b9:0d:da:5f:4a:db:13:66:56:
c0:14:9d:ba:2a:13:7d:a7:0c:54:a0:0e:cb:a4:13:
57:11:30:17:ab:57:7e:f5:38:d6:9c:55:84:9e:cd:
ed:b5:95:0a:bc:af:36:aa:d0:d2:5a:44:0f:2a:6f:
4a:9f:b5:35:81:ab:bb:44:68:22:45:96:9f:16:86:
41:4c:83:4f:9c:c4:95:40:b5:ea:84:58:eb:00:c2:
f7:60:ae:35:41:75:d1:d2:25:8a:65:8e:a3:3b:d9:
14:8e:1c:1f:2c:28:45:c3:5c:43:62:93:7b:83:36:
cf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C2:3C:0D:67:B8:74:E2:54:82:52:39:7C:14:94:BA:4A:BD:4F:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f8c0a75e-8b8b-35bb-bf86-f58c7493e210.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.201.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:b8:a8:89:fb:2b:72:30:5e:c4:f8:b1:38:62:1e:87:8a:08:
f5:c5:d9:38:b1:8b:af:3d:98:72:05:5e:67:a5:09:99:29:16:
80:ad:b4:fd:ec:30:e5:5e:36:55:35:f2:9e:2d:37:c7:9e:28:
32:b2:f4:33:73:fc:d9:fd:06:c3:08:31:da:2f:43:4c:11:d0:
c7:c4:38:d0:4c:71:56:4c:23:77:2a:a3:e5:29:62:b9:dc:bd:
4f:71:e2:98:2a:13:3e:8d:ce:2a:f4:09:fc:3b:95:1a:3e:d8:
94:09:be:4b:69:f1:62:87:92:e4:3c:1d:68:57:93:4f:32:8a:
1b:74:17:1e:a4:51:32:24:0d:01:2d:c3:87:7a:f6:ce:1c:89:
39:7f:9a:21:d1:61:7d:ad:00:55:3b:39:c9:d6:2e:97:04:1e:
8e:6e:3d:85:fb:88:03:3c:40:b3:8a:f8:09:69:af:27:ac:47:
13:de:f7:13:06:bd:b8:2a:2e:cc:32:2f:28:bd:b9:fa:b8:12:
69:0b:15:8f:f2:a2:df:80:ca:e1:c9:12:42:e4:47:7e:0f:b0:
a1:77:8e:67:86:72:15:31:5f:09:6a:38:eb:c5:3f:35:de:73:
11:b0:1e:96:f8:1c:15:d7:49:79:f9:0c:b5:cb:80:2f:61:f5:
5e:87:f8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:49:56 2025 by rpki-client