Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/47206c45-61af-34cf-b138-0ef307a352c3.roa
File: 47206c45-61af-34cf-b138-0ef307a352c3.roa (raw, json)
Hash identifier: ktir4Ytx6MaQ+h+aknwnQ2MhrdJ700z0lMpjaegOpAI=
Subject key identifier: E2:7F:22:02:DA:96:0E:03:CC:F0:E7:22:B2:67:D9:CD:C0:AD:E9:F4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FD13A0173273A3ED659D9F080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/47206c45-61af-34cf-b138-0ef307a352c3.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.72.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d1:3a:01:73:27:3a:3e:d6:59:d9:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=55ccdf80-d5f5-4365-a777-24784b0519b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fb:26:14:20:da:d6:d8:54:62:76:56:2f:f0:
08:c9:0a:27:d7:2d:d5:b5:01:8b:61:1f:f0:33:43:
87:97:eb:de:5c:25:75:39:ac:f2:33:42:6e:d0:7d:
ef:54:59:c0:a9:98:42:96:f3:93:74:fd:dd:2e:45:
7d:54:33:f7:3d:d7:71:5d:7d:ce:b0:55:e7:76:4d:
5f:6b:12:e0:f3:6d:30:68:0b:36:18:31:5b:7a:7a:
ce:3a:74:04:e9:19:3c:50:24:4a:6f:15:f1:3f:b9:
9b:25:46:56:59:cc:ca:7d:77:f7:eb:03:f9:f6:e6:
19:19:25:66:22:4c:13:36:9a:95:e0:96:bb:1f:43:
4e:7a:fd:f4:50:07:b9:0b:27:68:8b:a3:a7:dc:76:
ed:26:ad:9b:41:8e:6a:81:89:3a:25:90:78:5b:11:
1e:ca:71:f2:af:29:31:94:82:3c:14:43:06:bb:14:
95:ee:3a:2c:bd:8a:d9:ba:8c:b2:72:5f:5e:f9:9e:
8b:4e:a3:b3:d2:19:8c:cf:27:54:9d:39:5b:69:30:
be:0c:fa:69:64:61:27:ff:f3:39:ae:28:fc:d9:e3:
74:cb:1e:94:b5:b9:24:af:6d:8d:24:f2:1f:cb:98:
cb:2b:cb:09:3d:dc:e2:26:7e:0c:ab:be:9f:0b:13:
4d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7F:22:02:DA:96:0E:03:CC:F0:E7:22:B2:67:D9:CD:C0:AD:E9:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/47206c45-61af-34cf-b138-0ef307a352c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.72.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:0c:75:81:29:c5:c9:11:57:61:2b:5f:ee:f3:60:5e:de:ed:
45:8f:dd:20:e4:28:61:4a:4c:f4:87:a0:91:30:07:f4:7a:d8:
bb:74:27:dc:69:60:6a:fa:94:d6:08:59:ff:f5:d1:dd:3c:f6:
a3:dc:12:4c:7f:cb:c4:a2:1d:bb:dc:54:d5:69:f8:46:dd:67:
ab:a2:2f:65:ad:54:7a:56:64:d0:0a:0d:c9:8e:2f:0f:8b:0d:
00:37:af:0d:bc:80:f7:90:ce:6b:91:8d:be:9e:17:16:7d:a5:
b3:88:f1:bb:f3:96:85:ee:b3:79:ac:f9:34:c4:b2:3a:a7:bb:
91:27:9c:70:d1:b3:20:7b:49:3f:71:52:d0:3e:c3:00:47:a8:
2f:22:11:89:19:11:5c:d8:0e:95:9d:a9:7b:55:3e:18:02:3d:
c1:5d:4c:d4:4b:c1:03:b8:56:57:9e:99:de:06:d6:bf:98:69:
60:18:32:e8:a2:83:3c:46:7f:22:96:d4:f8:aa:30:89:95:aa:
06:b1:b2:93:08:ec:09:24:29:19:b2:e8:5a:84:b4:70:8a:60:
57:69:3d:57:4e:1f:3d:e5:0e:06:09:6e:bc:1b:de:c9:0b:c6:
8a:44:5a:72:96:4d:db:0a:cd:fb:a4:fc:00:d7:34:d5:7c:f3:
55:3b:d5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:45:26 2025 by rpki-client