Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1fe1e31f-67c7-3f9d-9d44-4e7337b385ea.roa
File: 1fe1e31f-67c7-3f9d-9d44-4e7337b385ea.roa (raw, json)
Hash identifier: e8nwBDCHCQp7dAV3t9LZkKymx/QL1v76+sD2Owsxnkc=
Subject key identifier: 20:78:68:9D:E7:36:43:BB:4B:EA:0A:12:F9:15:FB:7C:69:09:8C:9F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B8AD7FF4E54199DE913C8D40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1fe1e31f-67c7-3f9d-9d44-4e7337b385ea.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.174.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b8:ad:7f:f4:e5:41:99:de:91:3c:8d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=97dbb59a-4c88-4d6d-877a-e142be08c1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a9:59:1a:bb:d4:20:8f:ab:ee:9d:27:80:a3:
45:b9:4d:1a:5c:b0:2f:1f:69:e3:03:e0:a3:dd:b0:
b1:e2:67:f3:3d:14:a6:c7:96:5b:c3:36:40:ba:74:
a6:a8:2c:7e:58:65:4b:ad:1e:92:77:b1:c2:81:00:
0a:d6:d3:6b:2e:36:ca:79:7d:fe:e7:76:25:82:8f:
3e:21:3d:46:95:ed:05:3e:52:3d:fa:bc:af:91:de:
05:84:d7:ef:fa:cb:04:6d:71:fa:90:3a:94:92:73:
0e:17:3d:3e:18:e0:a4:f3:3e:74:4d:d3:12:02:fa:
aa:cf:34:c3:a5:ba:ce:15:6f:ba:0b:9f:a3:56:d9:
02:f1:a0:9c:d6:08:0c:9c:ac:33:85:c4:23:43:fd:
2b:4e:97:bd:68:4b:20:21:4e:80:3a:a9:64:71:df:
ec:68:7a:4e:10:ee:69:0a:51:43:b2:88:f1:83:79:
d1:e8:d1:b4:89:5d:bf:c9:db:35:31:0d:b4:f1:ba:
00:6d:f5:ea:98:57:fe:ad:f4:10:b3:2b:94:31:85:
14:26:cb:cb:2a:08:c1:42:30:1a:4b:ac:d1:20:f9:
d5:22:e5:1b:56:5d:70:33:11:d6:5e:84:f0:17:43:
97:4e:08:6a:82:0a:ff:c5:25:2a:90:0f:c7:f3:54:
13:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:78:68:9D:E7:36:43:BB:4B:EA:0A:12:F9:15:FB:7C:69:09:8C:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1fe1e31f-67c7-3f9d-9d44-4e7337b385ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.174.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:c8:7b:cb:cd:e4:ec:c3:2f:29:13:2e:df:1d:91:ff:fd:fa:
41:da:1a:45:c0:3f:85:fb:d6:b5:36:f0:64:22:79:86:15:9d:
d9:36:c3:5b:3e:91:70:fc:9e:6a:1e:2b:83:0c:9f:3f:2f:54:
2f:ca:68:93:04:5c:75:9e:21:d8:f1:33:de:72:aa:98:72:7a:
af:37:8d:1a:c9:54:3a:09:83:e6:99:4d:25:a9:ad:db:04:08:
4a:78:19:45:a4:06:f0:00:0e:ef:ac:d9:1b:8d:c5:84:72:ae:
b4:1e:01:98:fd:62:65:e5:09:11:38:78:9f:2e:ec:ad:a1:66:
06:2a:59:35:b6:f7:4e:08:dd:cf:84:32:8a:9a:46:6a:8d:a8:
b1:b0:7f:90:b3:c2:e0:37:0e:cf:b4:01:38:1a:a7:ef:2f:8c:
d1:c4:d0:e4:20:37:a6:5c:e5:36:c9:1f:f9:ab:cb:0b:cd:e5:
35:49:e1:87:ff:3c:e2:c1:19:47:39:fc:30:04:74:19:e8:db:
3f:b7:6b:bb:fa:0b:dd:19:de:1e:32:7c:81:56:c4:b7:74:28:
51:38:33:69:92:67:27:85:15:ba:3d:24:67:e7:a2:77:3b:d7:
50:1c:aa:d0:35:ae:6c:d1:6c:c7:ca:74:72:24:f8:4d:99:69:
b8:07:f7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:28:39 2025 by rpki-client