Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/44912a24-74ad-3e3e-a2eb-20c69e1c0fff.roa
File: 44912a24-74ad-3e3e-a2eb-20c69e1c0fff.roa (raw, json)
Hash identifier: lDrgjFCYk4b3FVPPL1f/NghGMC8NbVjpUzpYuyuZQr4=
Subject key identifier: 71:37:BC:AA:C2:2B:41:7B:97:CE:36:F5:21:A6:E7:93:61:C4:C6:FA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401C1BD0E0DB1C522F43C846C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/44912a24-74ad-3e3e-a2eb-20c69e1c0fff.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.244.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:1b:d0:e0:db:1c:52:2f:43:c8:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=671b0ddc-e401-4eb0-8860-548338ec6ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:2b:e8:0f:81:3e:f7:39:a9:54:70:87:87:
de:d1:ff:62:bd:c3:0e:55:0d:ca:4e:ff:9d:2d:e6:
7c:a4:5c:00:09:13:1f:d4:48:17:e3:10:f8:06:a5:
96:a7:3c:8a:1c:fd:bb:59:e0:bc:72:d5:98:b1:50:
0a:7b:53:45:47:3e:69:87:d1:30:0f:e7:a8:df:7d:
ee:c1:a9:17:e4:a7:ab:ee:0c:7c:29:6f:e3:ca:f3:
da:3d:2d:e2:1a:51:3f:de:d6:04:a6:6c:18:8e:f1:
0d:55:85:09:df:dc:66:72:1a:f4:7a:9b:ea:11:b9:
99:34:35:0b:05:c9:a7:47:9e:14:6a:0e:36:4c:9c:
3d:d1:dd:83:f8:31:d8:db:51:a2:3d:f9:df:62:c7:
d6:a6:b7:32:51:02:2a:b9:e3:b3:74:9e:30:f4:10:
ed:fd:62:01:2d:44:19:24:48:df:de:bb:0c:78:a8:
0b:39:8c:ba:9d:06:f9:69:80:81:14:f4:23:c7:ef:
b2:0e:2b:42:11:1b:ed:52:32:6c:7b:06:f2:8f:0f:
be:9e:eb:11:08:24:a5:55:75:03:55:0e:09:44:95:
e8:b7:2c:48:7c:7d:52:6b:2b:5b:93:6e:fd:70:73:
67:ac:e4:dc:38:97:8e:de:fa:8c:39:dc:ce:ac:aa:
c2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:37:BC:AA:C2:2B:41:7B:97:CE:36:F5:21:A6:E7:93:61:C4:C6:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/44912a24-74ad-3e3e-a2eb-20c69e1c0fff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.244.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:e5:32:47:65:91:0e:fd:b5:4a:07:2a:64:46:eb:0c:10:1b:
b9:8c:fb:9d:a9:59:71:ca:04:27:c4:a0:57:cf:4a:8d:1c:a3:
70:16:c9:61:f7:f9:44:63:89:82:e4:72:a6:a3:62:a8:72:06:
0d:44:d1:9f:f5:9d:98:a9:f9:d8:6f:32:8a:bc:e9:8b:76:a6:
28:37:c6:db:20:ae:09:cc:73:a4:1c:15:b2:6f:06:03:8f:50:
d9:ba:6f:f7:0d:5f:ef:f0:e8:39:30:27:ae:51:71:29:2d:14:
60:73:ae:55:97:dc:f9:dd:87:ff:71:5d:3a:18:94:b1:4e:68:
40:33:94:28:10:f8:f2:7f:47:06:32:6f:04:eb:14:19:e7:9b:
d8:e3:41:32:ad:56:43:59:83:2e:94:22:11:95:ba:3f:af:0c:
72:a2:74:7a:22:27:ad:d6:46:b1:ce:9c:2b:05:21:12:58:59:
ab:b9:66:3a:5c:25:85:46:1a:d9:7a:b2:1b:1d:5a:bb:47:44:
28:bb:63:77:ec:6b:38:07:2f:b6:48:b5:06:23:81:69:1b:76:
fd:e5:ab:a6:6f:11:f7:3f:cd:bb:14:9c:9d:b6:2b:cb:54:45:
75:0c:3e:a0:bc:a6:f9:d7:83:ac:97:a6:86:2b:4c:9c:7d:52:
33:1e:34:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:13:25 2025 by rpki-client