Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0fd23aad-90e6-3acf-b380-18c36c57e165.roa
File: 0fd23aad-90e6-3acf-b380-18c36c57e165.roa (raw, json)
Hash identifier: ncaBKmlFYGrvWlBEzNDs6nnXZ8aXG11GWpPmusFuQ/M=
Subject key identifier: 12:E9:9B:2D:C3:3A:8A:6F:F5:DA:E2:24:74:75:E5:33:36:D7:E9:19
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E70896655C4A7216937045E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0fd23aad-90e6-3acf-b380-18c36c57e165.roa
Signing time: Sat 02 Jul 2022 12:00:00 +0000
ROA not before: Sat 02 Jul 2022 12:00:00 +0000
ROA not after: Sun 07 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.42.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:70:89:66:55:c4:a7:21:69:37:04:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 2 12:00:00 2022 GMT
Not After : Aug 7 04:00:00 2022 GMT
Subject: CN=113a0bb8-1caa-4e01-9bee-cb5a2c781baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:f7:78:95:6b:21:5f:aa:e5:11:04:74:1b:
29:aa:09:5a:cf:11:0c:64:4b:0f:ac:e6:02:cd:45:
fd:cd:f6:60:e7:3e:e1:93:12:66:38:a4:bb:5a:d3:
18:e7:6e:57:34:e0:10:ac:a1:8e:29:c8:da:cc:e1:
01:10:84:2b:df:78:f5:8c:5e:11:ce:eb:9c:5d:bf:
45:1c:a9:3d:99:ff:c8:7f:66:67:e3:0e:dd:c0:25:
c6:42:89:2e:b3:8f:03:f9:3d:ee:51:ca:ef:66:2f:
76:07:95:df:2c:81:d7:c8:fc:44:0d:fc:bc:61:75:
87:4c:f8:30:6f:e7:91:30:04:9c:ce:51:80:f0:7a:
be:c0:bf:59:84:ba:3d:76:6c:f4:73:06:ba:cd:01:
35:49:d1:cf:82:9a:b2:cc:dc:8f:ac:38:84:0e:76:
7b:4b:25:eb:07:65:14:a8:fb:13:3c:c3:43:79:00:
66:ec:07:83:ee:5d:3f:80:50:c5:4a:7e:db:40:0e:
1b:9a:db:7b:e7:3a:42:a8:e7:cf:f7:71:c5:04:09:
89:fb:42:5e:19:93:92:1b:f0:97:16:8c:2c:16:37:
4b:7d:99:48:24:e8:2e:54:bd:f3:c1:52:f7:34:ff:
44:e4:a5:e9:cb:b2:74:51:c9:9e:50:f6:fb:36:2d:
6e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E9:9B:2D:C3:3A:8A:6F:F5:DA:E2:24:74:75:E5:33:36:D7:E9:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0fd23aad-90e6-3acf-b380-18c36c57e165.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.42.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:a9:88:6a:3c:ca:13:1a:75:05:62:b0:3e:7b:06:e2:49:bf:
e7:ae:c3:ff:09:37:cc:28:07:bb:5f:8a:09:07:de:9a:29:8e:
f4:5e:a2:35:1d:bf:b4:55:d0:d4:cd:bb:35:fb:23:62:d8:4f:
c9:6b:01:e7:ab:7d:80:12:65:1e:08:47:7e:f2:4b:f0:38:e5:
fd:dd:a6:68:c1:ad:07:69:17:e3:70:6b:b8:cd:06:17:43:45:
c6:dc:a3:80:df:9c:c8:2f:34:ca:e2:57:c2:0a:82:d7:b5:07:
5b:5b:28:33:ac:6c:83:da:6c:5d:8b:4d:a9:35:f6:71:53:fc:
e3:31:3c:eb:98:5e:5b:94:ef:f5:7f:47:f5:88:da:6e:76:19:
8f:ca:35:ff:1e:58:84:ef:0c:19:e6:3d:ae:91:25:3c:ee:f6:
c1:8a:a6:6f:3d:5b:5d:6d:4d:1b:6e:98:dd:90:05:5e:d0:98:
27:ed:05:b4:78:60:27:f5:b9:8c:89:56:4b:6a:de:67:7e:72:
c5:54:e4:c1:52:f5:4b:e6:29:25:1c:e6:f9:8d:ff:56:06:a9:
a6:2c:62:c2:f7:22:cd:15:57:26:46:71:c2:61:ac:72:03:41:
83:09:92:95:ec:6e:12:50:cd:c9:b3:84:08:2f:ee:b8:87:cb:
b8:fe:9c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:43:14 2025 by rpki-client