Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/458962b3-0ad1-399f-b06b-9c9508ca25a0.roa
File: 458962b3-0ad1-399f-b06b-9c9508ca25a0.roa (raw, json)
Hash identifier: dKyRWMUPwmMTp5l9MoO1H8Co47mcoG6JNrU8QaPk26E=
Subject key identifier: EC:2A:BA:F4:F9:F7:8D:6A:96:97:B3:13:AF:FF:5F:3C:EC:43:E5:72
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406CF3E50411B2FC942084DCC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/458962b3-0ad1-399f-b06b-9c9508ca25a0.roa
Signing time: Sat 31 Dec 2022 12:00:00 +0000
ROA not before: Sat 31 Dec 2022 12:00:00 +0000
ROA not after: Sun 05 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.56.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6c:f3:e5:04:11:b2:fc:94:20:84:dc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 12:00:00 2022 GMT
Not After : Feb 5 05:00:00 2023 GMT
Subject: CN=3aa7f7ef-acbc-4b1d-b29c-24de25de6ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:44:26:30:15:22:78:ac:e5:20:a7:e4:a2:
6d:a6:50:30:51:ea:ab:0e:68:83:4b:36:9a:5c:ca:
d8:37:d8:fc:7d:f8:46:55:b8:5c:a8:8b:b9:60:7f:
02:70:b6:83:e1:e1:ea:91:f8:a4:1d:9b:6e:19:02:
ac:1a:08:1c:95:6e:50:69:60:41:d8:d5:3e:96:66:
a8:dd:be:e8:61:ff:18:58:0d:3b:b2:f1:50:90:87:
a0:cd:f1:3c:29:32:9d:10:ee:39:e9:f5:65:7d:1d:
e6:c4:b2:e0:18:60:2a:87:0a:fe:b0:30:3d:b7:1e:
0c:07:2a:06:ca:a4:1c:11:e1:37:8b:e4:59:a1:4f:
fc:d8:88:91:ae:0e:ba:a3:81:f1:ed:1e:84:92:24:
97:17:0d:a1:7b:f2:e0:95:cd:11:71:5d:af:2b:af:
f4:11:0d:f1:8d:03:a6:f6:0f:e9:d9:6b:cd:72:de:
f9:37:db:c4:13:29:df:97:f8:ef:2e:b5:98:90:2b:
59:05:52:5a:be:ca:c7:52:03:4d:29:17:30:fa:63:
e9:85:58:a0:98:30:61:49:13:da:30:a7:91:df:f7:
ec:d6:3a:fe:f1:44:23:70:ea:10:ca:1b:26:9b:4a:
56:50:56:c1:42:5e:a3:22:aa:6d:01:6c:ba:59:bc:
94:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2A:BA:F4:F9:F7:8D:6A:96:97:B3:13:AF:FF:5F:3C:EC:43:E5:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/458962b3-0ad1-399f-b06b-9c9508ca25a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.56.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:e8:89:1f:09:7d:84:54:67:d2:c9:b7:81:55:e8:40:4c:df:
24:d3:53:e1:1a:23:cb:4c:c5:f8:be:5b:03:ef:57:8f:e1:3d:
f5:30:7f:fa:3f:bb:3b:d4:70:b7:db:91:fd:48:f8:05:37:03:
14:95:a9:1f:88:66:f1:02:dd:df:92:f6:7b:02:3b:eb:45:f5:
d6:a1:60:ec:24:4a:22:54:0e:6e:2a:fe:36:35:2e:22:2f:b9:
34:e1:73:7c:c6:23:6a:f5:34:3a:5d:e6:2f:bf:fa:60:6f:e5:
20:b4:a2:03:29:8e:4b:8c:32:9b:a9:01:dd:07:dd:8b:fb:f5:
f0:17:cb:0b:de:85:4c:3b:aa:45:51:b1:66:f2:b4:dd:90:5f:
4a:81:43:ff:78:d7:fd:80:44:c5:e1:15:8b:18:03:1d:58:83:
9c:e1:be:d8:c9:6e:8b:6e:03:c1:95:3a:3d:48:33:fb:0a:a2:
c4:05:d0:d2:8b:e4:4a:a5:df:39:06:86:0d:a1:8c:02:a9:2f:
f5:87:96:46:12:5a:36:dc:b0:c1:cb:ee:4c:b2:6c:a5:0e:3f:
6a:11:98:7f:71:ae:5d:4c:9b:0c:ed:e3:1a:3d:35:b9:79:2d:
cd:c9:84:4a:4f:b1:8a:62:82:dd:69:e4:c0:9e:a2:2b:01:1c:
de:ef:84:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:46:52 2025 by rpki-client