Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/17d53a11-43c2-3015-95d4-0a967667139f.roa
File: 17d53a11-43c2-3015-95d4-0a967667139f.roa (raw, json)
Hash identifier: ul3NQCJzkXYSY+tA5fF3XR8Rm5NljJJ8ixyzqsvTgTI=
Subject key identifier: 45:9D:7C:55:BC:DE:52:B9:7E:D7:45:28:14:60:3E:E1:BC:6D:08:AF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D326D563E229B2947D0705D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/17d53a11-43c2-3015-95d4-0a967667139f.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.126.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:6d:56:3e:22:9b:29:47:d0:70:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=94037b3d-3e97-4c19-8038-6efc86781e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:44:24:16:f8:c3:c9:8c:7d:7f:aa:54:47:
47:d1:25:24:61:e2:fe:d9:aa:df:ca:91:c7:ce:fa:
30:3f:f8:7e:44:60:87:c0:51:2f:20:01:4d:4f:01:
4b:c7:18:43:11:e0:0f:b1:52:9a:0a:69:eb:26:d8:
4f:b3:51:64:4a:22:25:d6:a8:51:7c:66:c1:e1:be:
43:24:c7:b4:cc:ec:05:cf:07:0c:cc:18:7f:cb:a1:
23:36:d4:0f:e7:51:96:d7:7f:de:07:16:31:02:ba:
00:52:5b:25:36:6a:51:da:c2:bf:17:8a:b3:55:a8:
ae:4e:4b:96:ed:31:19:bf:f4:0a:2e:49:65:bb:e8:
6a:98:37:ea:8e:23:ff:11:3e:d3:ae:3b:9a:6d:9e:
90:17:54:2a:df:e7:64:86:77:a5:49:34:bd:eb:17:
a8:69:c4:ee:27:e5:6e:cf:ca:06:e2:80:ee:65:86:
31:a4:08:0d:79:80:2c:71:f2:9c:7f:19:82:a3:cb:
28:03:b1:bf:39:26:21:c5:31:2b:51:4c:34:e1:70:
6b:99:6d:f3:7c:3d:d3:81:56:56:0d:1e:3a:23:27:
94:89:14:c7:b1:1e:d4:55:8f:0c:50:c1:17:5b:d0:
93:70:a6:e1:71:13:5e:df:93:b9:a8:a1:59:7a:fb:
38:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9D:7C:55:BC:DE:52:B9:7E:D7:45:28:14:60:3E:E1:BC:6D:08:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/17d53a11-43c2-3015-95d4-0a967667139f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.126.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:bb:9a:9b:95:87:15:93:0f:a0:28:8b:42:40:16:52:75:de:
47:ed:d6:7b:0e:e9:bb:51:58:5a:aa:da:0f:e8:c3:42:59:b8:
e6:40:7b:aa:d1:3f:6e:f0:2d:e0:73:7d:2f:7a:99:44:27:db:
5b:39:82:22:65:54:2c:9e:0b:e9:f0:59:8d:4f:05:c9:c0:c8:
1c:73:6e:18:a9:a6:47:ab:0b:14:f7:94:c6:1b:08:8a:5a:fc:
f2:73:e0:0e:57:d7:5c:5a:b1:e3:71:40:61:74:b6:f5:4b:99:
14:da:92:51:2a:5b:7d:de:bf:cc:5f:52:53:26:93:b0:ba:06:
ac:70:9a:ea:f4:5e:22:f0:53:c2:73:ba:f1:5e:c7:c3:46:1f:
15:f2:19:36:20:2f:84:21:a7:33:ee:dc:4b:b7:87:6b:a8:be:
33:82:e3:da:a9:1d:2a:9c:9d:83:61:c1:74:c7:de:06:69:57:
06:27:06:d7:cb:c0:85:da:7a:4c:7a:4e:be:17:76:ab:a8:14:
b6:5e:b5:8a:e6:80:4f:92:91:71:6a:aa:8e:ee:5c:d5:4c:c1:
a9:31:19:33:e2:5e:d7:43:6f:3f:c0:22:49:09:b0:02:88:ed:
10:ae:ae:60:93:da:cf:c2:85:3e:8c:55:fa:a8:77:60:37:b4:
2a:1d:0f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:38:38 2025 by rpki-client