Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/41dd26c2-8112-3dda-b743-4f9d0cef8c33.roa
File: 41dd26c2-8112-3dda-b743-4f9d0cef8c33.roa (raw, json)
Hash identifier: 9JfJyur0zzShHSHu/cfOHbBNwht8u5sAM9Vc3N0XxY4=
Subject key identifier: 09:B6:D1:7B:24:BC:30:F0:88:DB:BC:0F:50:5A:30:34:D8:58:D7:C0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584040326B621D030DA85BA6AF00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/41dd26c2-8112-3dda-b743-4f9d0cef8c33.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.44.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:40:32:6b:62:1d:03:0d:a8:5b:a6:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=e45cfb5a-d396-4151-bea8-6f3dafb5f1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:60:72:f0:59:35:15:3c:25:15:8a:c2:01:55:
45:5d:0d:68:b6:11:71:b7:59:28:19:78:3a:78:42:
93:84:5a:be:eb:d0:75:db:63:32:8d:65:ae:6f:2c:
f3:44:94:e4:49:2f:e4:4b:2f:9f:b8:30:de:7d:3c:
84:ee:4b:3b:cd:f9:98:6a:7f:a5:24:b8:dd:22:fb:
59:b4:8d:e2:44:02:b7:6b:4c:be:8a:11:91:4e:34:
8e:3c:a4:fd:29:e9:b1:c6:f4:72:9e:16:5f:88:a0:
8c:29:a9:77:cc:6d:c4:95:65:4d:66:64:81:4f:7c:
5a:e3:e6:45:0f:c4:41:94:c6:df:13:26:4b:8e:2a:
a7:66:a5:2c:8c:e0:a8:b2:e1:b1:57:ae:3b:6c:38:
e4:d1:9e:4e:e8:58:ec:c9:9b:00:df:36:fd:46:ed:
9c:ff:cb:7b:12:27:e6:36:1f:f5:ed:d5:c2:37:69:
90:4f:69:86:3c:07:67:ae:ea:01:f7:19:a5:31:e8:
ff:29:e0:40:6a:14:8f:ad:22:12:d2:c0:c1:47:dd:
51:3c:c4:d4:e2:13:81:b9:a9:af:b8:4b:4f:cc:5b:
b8:47:08:51:2e:51:85:12:4a:90:65:ea:f3:a6:a4:
1e:41:2d:79:5c:ff:6b:a7:61:bc:98:a5:bc:59:42:
70:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B6:D1:7B:24:BC:30:F0:88:DB:BC:0F:50:5A:30:34:D8:58:D7:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/41dd26c2-8112-3dda-b743-4f9d0cef8c33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.44.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:95:03:36:18:86:57:ba:10:3a:7a:7a:ea:b8:cd:89:cd:d3:
bb:f0:ef:4d:03:8c:e5:9f:07:7c:db:e4:96:4b:fa:3c:1c:8f:
4f:9e:34:09:d8:eb:e4:4a:95:f2:8d:10:19:fc:7f:c1:44:be:
bf:d7:9d:66:76:77:09:60:e6:79:03:20:f4:e0:a8:3c:92:0a:
b9:10:12:91:dc:9e:70:f0:72:25:c4:2b:b4:4d:2d:a9:42:f8:
a5:8d:60:79:f8:5c:2e:0f:77:96:ad:8e:1b:2c:5d:38:44:cc:
4a:83:8c:8a:ad:84:aa:5c:5b:2d:1f:70:f6:00:63:20:bd:c6:
87:1f:61:03:7c:51:fe:26:73:65:98:fd:2a:e4:ee:67:ba:a1:
fb:5e:fc:c5:f7:e5:7f:4b:d0:97:4e:3b:16:ca:30:89:0b:61:
f8:fb:2c:6a:e9:52:49:08:62:1d:09:8a:74:be:0a:f0:45:36:
bd:6d:19:d1:51:b3:fd:3d:b8:1b:28:a5:53:11:5a:d4:7e:e6:
e7:7d:45:4d:ae:23:be:a9:a3:26:ce:79:86:b9:62:26:e2:4b:
ea:56:23:38:4d:87:2f:2d:6e:a4:dc:42:58:c4:3d:92:6c:f4:
54:25:dd:81:a4:21:ae:d2:19:fd:7d:4e:83:a4:76:f2:27:ac:
22:0b:cd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:02:57 2025 by rpki-client