Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0bfdae59-09ff-3dd3-a793-8c75d0b9540d.roa
File: 0bfdae59-09ff-3dd3-a793-8c75d0b9540d.roa (raw, json)
Hash identifier: VjH9wI7pe2Ltaewrq1FGxtpShzY7B96J2LnSVFsAncM=
Subject key identifier: 56:A2:20:CF:25:21:F8:A9:D6:FE:5D:3C:4A:21:D3:81:26:98:FA:20
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401FA09FF146E71DEB732E8E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0bfdae59-09ff-3dd3-a793-8c75d0b9540d.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.168.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1f:a0:9f:f1:46:e7:1d:eb:73:2e:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=dff32fa9-3eeb-4416-8e74-da45d4457950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c7:ed:66:a3:fd:9e:12:b7:0b:b3:7b:22:40:
5a:28:53:10:6d:5a:b4:a7:5c:19:e4:ce:2a:0f:49:
84:97:c1:10:50:d6:7a:aa:50:ad:85:58:f4:46:8e:
36:1f:5b:a4:31:fd:60:a3:85:a6:7f:95:cd:4b:6c:
ce:a5:8d:9e:cd:94:0a:fd:18:68:85:cb:b0:ad:75:
bf:af:2c:8e:b5:e7:f8:7e:2c:03:c9:9c:d1:e2:65:
dc:8b:83:57:4e:4b:a8:77:e6:3f:41:f1:e7:92:27:
71:a1:cb:bd:19:e4:11:c8:06:ff:fb:3e:b2:e6:68:
7f:96:a5:fe:94:85:ec:04:25:33:77:04:e2:c7:fb:
d2:f5:a3:bf:29:7b:e5:2f:93:5f:86:c6:78:05:b8:
a9:55:b4:19:70:be:5d:a8:52:de:fa:9f:7a:f1:69:
54:78:65:b1:97:a6:33:82:c9:dd:9e:2b:45:61:db:
15:ea:be:74:03:8b:0a:1d:b5:98:65:a9:f3:5e:1d:
e1:3b:e9:57:91:04:11:e9:55:10:fe:ed:1a:cd:0e:
b7:71:cd:d4:b0:f2:30:ee:6e:78:e4:e8:c9:93:6a:
8d:4b:df:85:f1:88:b7:f4:2f:72:d4:76:c2:c9:bd:
ea:e4:ca:57:ce:d4:a5:6b:9f:bd:e1:a4:72:99:c0:
5b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A2:20:CF:25:21:F8:A9:D6:FE:5D:3C:4A:21:D3:81:26:98:FA:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0bfdae59-09ff-3dd3-a793-8c75d0b9540d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.168.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:4b:cc:29:4c:31:2d:75:c6:07:39:09:9d:4b:be:e0:e2:b4:
1d:e3:ce:9a:29:7a:31:2a:dd:7e:5d:37:6a:ab:6b:cb:0b:f5:
f3:1d:02:72:cd:08:66:e1:1a:b7:2c:8c:6d:bd:ab:43:ca:4c:
fc:69:d2:be:1f:2c:cb:b5:30:60:62:18:82:20:f6:01:86:35:
43:62:c4:44:31:ca:47:1f:63:4d:2f:03:30:f8:83:27:02:97:
07:fb:95:41:8f:0a:cf:0d:8c:bc:d8:2b:20:10:28:1a:0d:d9:
da:f5:bd:29:0f:06:72:12:90:53:ec:84:d5:a6:7e:05:72:57:
5f:90:6c:5a:39:96:a9:8f:19:9b:b5:b7:7d:fe:9c:b3:8a:b6:
45:ce:c8:8d:c8:de:07:91:41:59:06:da:93:ee:cc:4e:a1:b6:
06:95:5e:5f:bb:a2:e2:a9:0c:5c:a2:4d:05:e5:fc:f8:ba:2c:
cd:18:69:f6:34:48:7c:2d:a6:1c:98:b0:a5:ab:70:58:c6:80:
56:49:b5:1b:d5:c7:71:65:5d:d3:92:4a:06:28:c6:fc:1c:4c:
fb:44:65:e0:5c:44:09:cf:8d:cd:5f:c4:83:63:8a:aa:ee:a5:
c8:e1:b0:05:a8:fb:13:ac:bc:f5:e8:65:80:98:0b:e6:1a:3e:
7a:e2:7d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:20:51 2025 by rpki-client