Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a281f4a-569f-355a-a13e-cbbd7ca723b6.roa
File: 4a281f4a-569f-355a-a13e-cbbd7ca723b6.roa (raw, json)
Hash identifier: oNlP/ffKp6hM3sptONbWJho8d/kSRfvmlZE/1m59DXo=
Subject key identifier: 71:DB:A6:F5:46:7B:77:2E:ED:3B:D9:2E:47:B2:5B:CE:1E:B1:FC:BB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840BB7858D1BDE3CA4C6A811200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a281f4a-569f-355a-a13e-cbbd7ca723b6.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.111.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bb:78:58:d1:bd:e3:ca:4c:6a:81:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=1140fa4d-c917-4ce7-8ba4-a4d07f99472f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3d:a9:70:0f:33:30:30:ec:b8:ec:7e:1d:c3:
e5:b7:1c:2e:23:3b:04:75:af:8c:ce:fa:b1:ea:5e:
d8:bd:bd:05:16:d1:54:23:f2:34:1c:8d:38:2d:49:
87:c3:84:cd:9e:f7:f5:1e:46:de:96:8f:8d:40:24:
b2:8b:9a:1a:a8:42:1d:c3:67:c1:4e:15:1d:91:4f:
68:7b:e3:b1:89:91:b4:b3:54:ae:82:93:fb:86:80:
f4:86:43:43:ff:30:82:14:53:2d:9c:60:6e:a8:46:
93:d8:06:db:af:6f:e7:e5:7c:de:4c:37:2e:d2:9d:
41:4f:a5:a9:32:fe:a8:d1:ea:ca:95:ed:c5:17:77:
52:e8:91:1b:21:f7:f7:62:1b:b5:21:35:b6:34:1d:
36:45:d2:0a:a5:36:e4:5b:38:89:f1:66:db:21:58:
aa:0f:83:b7:1c:d7:33:bf:0a:f2:4f:49:68:6f:8c:
32:b0:63:62:15:9d:89:23:bd:7d:f9:27:58:ce:25:
24:98:c4:8a:4a:91:bd:6f:73:6b:e9:6e:e3:ba:08:
bf:e6:89:3a:6e:ca:0d:92:4d:6b:e8:39:fe:92:0a:
1e:3a:36:0a:22:b8:a6:38:10:d6:8b:67:22:9d:e5:
37:34:f0:0e:f0:38:c3:18:09:5e:4e:b2:6d:df:3b:
27:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DB:A6:F5:46:7B:77:2E:ED:3B:D9:2E:47:B2:5B:CE:1E:B1:FC:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a281f4a-569f-355a-a13e-cbbd7ca723b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.111.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:8d:d0:39:31:9b:41:23:1d:34:40:f3:8c:d8:62:89:81:e0:
43:3c:f5:15:c8:03:7a:e7:d8:44:f6:a7:93:d9:5a:d5:3d:45:
4b:d5:c9:5a:d2:b9:a1:2b:8f:e3:3c:02:4b:6c:e0:e9:0c:49:
c6:ac:5e:4e:d8:50:e2:0f:91:35:2f:cd:63:c6:4f:02:0a:25:
96:c5:24:22:93:e0:aa:73:48:75:49:58:b7:c2:a4:b7:be:1f:
b1:75:a9:51:3f:33:0c:4d:35:b0:07:49:d4:5d:1b:89:15:49:
50:50:0d:a7:1b:6d:42:91:09:0f:63:05:08:98:48:46:c4:6c:
96:4b:77:a5:7a:13:56:e4:22:ba:c2:3b:9b:b5:4d:ea:b9:d3:
2b:3b:b0:de:db:3e:df:2d:4d:e7:8e:8d:c8:70:a7:fe:e1:65:
1d:c2:32:02:96:8c:39:11:2d:9a:31:5d:fa:c6:5f:86:4f:66:
0e:0b:b6:89:e9:89:04:05:57:be:7f:55:c8:61:0b:c6:9c:e8:
55:83:4a:88:85:fc:d9:34:d8:f5:d4:20:96:17:01:c9:84:19:
c1:de:8a:4b:91:54:5b:07:7e:82:17:c3:ce:f2:2d:73:5d:af:
51:9b:fa:07:46:66:98:d9:4e:e8:62:27:49:46:bf:b7:42:27:
a1:8c:c4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:02:24 2025 by rpki-client