Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d0661df-4cc8-3aaa-b78f-c91439b19791.roa
File: 0d0661df-4cc8-3aaa-b78f-c91439b19791.roa (raw, json)
Hash identifier: YF0pITP3Bg81cwKneCicL4mUm+dMOKKNP2USw/bx0V4=
Subject key identifier: 03:CC:EB:A4:A3:5B:78:AE:CC:BC:67:40:EE:E3:4B:A0:23:E3:72:7B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DFAC2BB74FE63889D4346DFC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d0661df-4cc8-3aaa-b78f-c91439b19791.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:fa:c2:bb:74:fe:63:88:9d:43:46:df:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=e9aac42e-28bd-41f5-ba23-e8d78bf1e419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:39:55:e0:b3:58:fe:70:a7:fa:9e:5c:d7:
ea:06:c2:cf:48:38:0a:6e:67:2c:83:b3:48:96:c9:
54:06:b8:8d:c6:db:a6:60:4a:7f:91:4f:fd:a8:2c:
51:0f:71:83:14:6f:75:d2:7d:e3:db:c7:84:4e:d2:
f6:31:89:5a:3e:91:ac:76:08:89:dc:0c:3e:4a:8d:
cb:de:de:42:30:6c:0b:79:87:92:b5:a6:e5:35:e9:
b8:5e:41:e9:b9:7e:c4:5a:23:c1:1d:ed:91:1b:6b:
bc:f7:bb:79:45:cb:59:d9:5e:74:4a:6d:f0:52:58:
40:db:9a:b3:44:dc:6e:89:d7:52:b6:85:48:9b:d6:
1c:6f:d5:7c:43:4b:48:ad:91:20:d9:5d:1c:b7:24:
3e:ad:4c:e7:7e:ec:a0:b4:df:f8:df:34:b4:34:dc:
87:b1:fd:9a:88:20:13:70:4a:5e:17:fb:8e:29:81:
1b:de:a9:08:ec:04:dc:81:cb:d1:08:26:a3:b0:f9:
4e:07:8b:41:4f:f3:5f:03:0b:57:d5:ef:7e:76:d5:
60:6b:6d:87:b7:e0:8d:be:78:5d:bb:3e:06:c3:38:
70:29:f9:05:bd:db:e6:ec:cc:9a:e4:6a:68:e9:eb:
d3:cd:23:0a:8e:1b:66:e6:24:78:10:d7:1e:63:a2:
34:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CC:EB:A4:A3:5B:78:AE:CC:BC:67:40:EE:E3:4B:A0:23:E3:72:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d0661df-4cc8-3aaa-b78f-c91439b19791.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:f5:e1:06:48:c0:52:d3:f4:ab:ce:74:9a:45:84:67:7c:5c:
8f:09:52:96:87:e7:bc:7d:54:57:fe:0a:df:6e:10:2f:24:27:
75:4a:3c:ff:35:97:1c:14:dd:f7:97:55:51:87:3e:84:67:eb:
f7:a0:ad:ed:1e:d0:4d:66:f9:8f:4d:df:08:75:51:20:31:ce:
fc:d7:01:74:9b:cd:1b:69:9a:97:73:e6:8f:b4:49:e7:53:a0:
dd:b7:9c:08:bd:66:bb:f9:d4:39:7d:de:60:2e:11:3f:6e:ea:
63:d1:39:74:98:96:22:57:fd:7e:75:4a:41:04:46:28:cf:8f:
8d:93:2c:fc:70:e2:91:a3:92:4c:de:99:95:38:f8:17:c3:31:
ea:a8:67:2f:fe:82:02:d8:6b:6d:f1:72:1e:d1:56:d7:0c:8e:
7e:b9:bc:31:a2:7d:a4:63:43:f0:e8:43:21:43:4e:a1:28:1f:
c5:a0:3f:46:2b:09:7b:a6:3f:cb:4d:ae:8a:2c:96:50:4a:20:
5d:63:db:87:87:2d:77:17:ee:03:f2:16:01:7f:11:f8:04:ab:
1f:d8:e8:50:a2:d5:8e:74:92:28:42:b1:56:e5:94:da:20:5b:
df:79:d8:4c:be:b4:ab:96:c2:0b:ee:c1:46:6f:a9:95:ae:aa:
9e:c1:da:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:08:33 2025 by rpki-client