Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/109fcb5b-5f3a-3863-ba74-b434edb298ba.roa
File: 109fcb5b-5f3a-3863-ba74-b434edb298ba.roa (raw, json)
Hash identifier: WkG3ftOorD6l/Ar/XiMQJFHV/KrnXHDTVYT0HhRYWLg=
Subject key identifier: 9F:2C:E3:30:A9:A9:D2:42:83:CF:34:36:13:24:6E:69:BA:1F:D5:67
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840466B8D9952CF9727FFCFD8C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/109fcb5b-5f3a-3863-ba74-b434edb298ba.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.48.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:46:6b:8d:99:52:cf:97:27:ff:cf:d8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=72d341b7-aa21-4f35-adc2-403db150be7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:85:83:01:57:1f:b5:24:2d:81:15:89:95:76:
00:dd:e0:fc:9e:63:89:23:fe:86:3e:23:fd:a1:67:
e8:22:d4:a2:95:18:c1:d1:1e:d1:b1:98:65:0f:28:
28:7e:14:43:a7:5c:2f:1e:db:36:19:9d:fa:fe:e7:
26:a8:25:aa:ca:15:c4:1d:a4:60:9e:69:b1:85:66:
3c:9f:b9:f1:03:e5:93:f7:6c:14:bf:21:8f:a6:50:
22:c4:64:00:29:c2:12:8f:5a:31:00:24:76:9d:ac:
d4:e9:c3:78:2d:e5:fb:c7:19:65:fa:a0:3c:77:f0:
79:32:af:1f:c9:ff:bb:76:90:76:e4:04:c3:bd:cd:
4f:78:92:02:d6:41:c1:fc:52:0a:6c:6f:17:ea:57:
53:4f:4f:38:00:b3:3d:d5:da:e8:4c:66:64:c5:d1:
6e:5d:66:ec:bd:88:ec:3c:81:61:7a:92:c5:f7:8c:
ec:43:21:03:b3:11:26:20:d9:49:cd:1b:19:1c:4f:
e2:4b:46:c9:e7:4d:68:f3:e1:84:df:a4:33:a9:5e:
d6:38:4f:c9:e9:09:a5:ae:ed:ca:91:32:45:33:e4:
87:fe:8b:39:b9:25:5a:bf:8f:49:07:84:af:51:e9:
95:ec:99:e0:17:ff:23:bc:bb:b1:d7:a8:e5:c6:ad:
16:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2C:E3:30:A9:A9:D2:42:83:CF:34:36:13:24:6E:69:BA:1F:D5:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/109fcb5b-5f3a-3863-ba74-b434edb298ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.48.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:15:e3:68:be:ce:26:d7:44:22:e9:26:e8:6c:c5:7e:01:81:
1e:c2:fb:1c:4d:ee:3c:84:e6:62:07:4e:79:46:82:93:e1:5a:
a8:cd:e2:56:4f:d2:d9:fa:0c:61:b1:3c:43:9c:21:dd:3c:94:
d3:2b:d7:33:db:ce:69:08:9d:46:1b:f8:b5:60:86:0d:7e:bc:
79:13:95:46:7f:67:6d:ac:4d:bc:0f:ea:08:ec:41:e9:fa:d5:
68:06:b2:dd:01:3f:67:5a:7e:27:a0:66:e7:68:58:06:0c:fc:
eb:e6:ce:66:57:11:59:f1:f4:83:18:c1:30:4f:77:37:b6:f2:
aa:8f:de:83:72:d0:cc:b9:ad:36:d9:1a:6d:c0:34:75:e4:58:
9b:a0:36:7e:4b:ee:a2:f7:34:d9:97:14:eb:d4:9b:8a:c6:a5:
8b:d6:e5:ca:da:c5:cc:96:4a:9b:d3:f9:91:da:d4:cc:c1:99:
8c:16:3d:95:ba:d0:d6:ec:df:a9:c9:1f:c5:73:ed:11:f6:6e:
98:70:0c:09:5f:3b:01:c5:14:05:b5:45:d1:01:ee:95:9a:a3:
b8:d4:72:c9:83:69:58:26:38:26:1b:79:e1:31:e1:f2:81:21:
8a:e7:12:11:0b:0a:ab:76:5f:51:45:55:6f:99:4b:f1:d7:ea:
bf:d4:db:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:54:53 2025 by rpki-client