Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/00ff49b1-d544-33fa-8ec7-38b8958cdfe9.roa
File: 00ff49b1-d544-33fa-8ec7-38b8958cdfe9.roa (raw, json)
Hash identifier: cRglXtnaYQTv7S/j5n6IOoU8F37FJgTxK6A6NNeyI8Y=
Subject key identifier: 59:6A:BB:FC:6C:0E:5A:D7:67:DA:28:95:9A:65:B4:9A:9F:0E:99:58
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E70464AF2C97CBC96BF03CB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/00ff49b1-d544-33fa-8ec7-38b8958cdfe9.roa
Signing time: Sat 02 Jul 2022 12:00:00 +0000
ROA not before: Sat 02 Jul 2022 12:00:00 +0000
ROA not after: Sun 07 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.95.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:70:46:4a:f2:c9:7c:bc:96:bf:03:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 2 12:00:00 2022 GMT
Not After : Aug 7 04:00:00 2022 GMT
Subject: CN=bc0ac59f-482e-4a63-bd68-86280c20c309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:46:9e:0a:54:46:0c:7a:af:e7:d1:65:84:78:
9d:33:92:17:50:81:0c:45:8e:f4:62:28:33:3a:a9:
40:21:f4:eb:35:65:8b:89:e3:aa:11:73:bb:d5:c9:
9b:f2:37:0e:db:83:4e:4f:2c:f5:24:fe:f7:77:82:
83:a1:a3:8a:4b:8f:e4:88:94:04:80:04:a3:46:8d:
6a:55:95:20:cd:18:c2:9f:43:ee:e8:6e:41:0c:e8:
e5:79:be:2f:11:43:74:4b:50:4c:a4:43:7a:d4:80:
e8:04:15:6b:68:c8:e4:53:98:e3:1c:74:bf:87:99:
34:59:92:10:75:77:b0:3f:71:f9:12:07:e7:2b:dc:
4e:e2:55:39:66:59:fe:3d:71:ee:ea:0c:2a:50:c6:
ba:58:3e:30:00:64:7c:8a:06:d0:90:66:bc:f4:ea:
b8:03:a3:02:d0:e8:de:96:64:67:a6:87:4c:d1:eb:
d7:14:8f:cb:59:ae:4b:95:92:3a:ec:8e:34:27:f0:
90:65:cb:eb:1b:ed:fd:04:df:32:26:23:6b:4a:5c:
ad:3d:cc:f0:b3:cc:e3:37:31:dd:98:d5:3d:a6:9c:
6c:e7:c5:46:2c:2c:e6:dc:15:26:6e:9c:a0:9a:95:
3f:35:ad:16:d6:20:5f:97:ff:9d:e9:49:15:dd:f6:
8a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6A:BB:FC:6C:0E:5A:D7:67:DA:28:95:9A:65:B4:9A:9F:0E:99:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/00ff49b1-d544-33fa-8ec7-38b8958cdfe9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.95.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:95:a7:4b:9e:47:5b:9e:4e:81:0f:af:71:ab:ce:71:b1:cf:
d8:bb:16:1d:61:c7:47:29:8f:47:26:df:6b:87:97:ea:4e:75:
22:dd:45:a7:14:e3:2b:c4:1d:cd:1b:3b:14:db:60:91:f0:ed:
4a:24:f7:ed:4b:68:fd:c4:2f:de:94:30:9d:f0:88:fb:4b:c0:
4e:2b:25:80:0d:49:2f:3f:27:50:3e:01:60:56:e1:57:32:8e:
7c:28:dd:97:e0:e1:18:6d:c4:27:ed:43:a1:44:f0:f3:82:5f:
3b:4b:0d:c4:c9:02:6d:a0:49:f7:54:10:a8:68:e0:61:89:ba:
be:ff:bd:98:ca:d0:bd:cb:d3:fc:ca:13:dd:44:21:56:10:4b:
9c:aa:a1:72:fa:c9:b4:39:71:7e:c6:de:9c:de:45:79:55:7d:
39:d5:5d:32:a3:62:a4:cc:59:75:10:f0:32:ab:51:d6:dc:fe:
5a:a7:76:16:71:a9:dc:22:ab:f3:03:60:83:81:3c:6a:cf:f2:
23:a3:2f:d3:43:84:04:c0:4e:79:7a:df:df:f9:6c:67:e7:b8:
3f:88:25:5c:cf:67:7e:04:a3:a0:fb:65:d8:0c:d0:c3:55:40:
53:ab:be:07:92:aa:ad:41:bc:29:67:8b:bc:91:85:e6:fe:60:
c8:ba:c1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:14:24 2025 by rpki-client