Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ebd8f9a-b2f6-3a30-81b5-dd4c23f24b9e.roa
File: 4ebd8f9a-b2f6-3a30-81b5-dd4c23f24b9e.roa (raw, json)
Hash identifier: PTTius/RvEJmYf7e/k7yXsi32VUEqacr56wRml6UvN4=
Subject key identifier: 57:CA:32:98:7C:B3:78:63:39:01:FC:42:32:E4:F2:C9:3E:15:72:62
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840BB08BA888724026FF005FE20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ebd8f9a-b2f6-3a30-81b5-dd4c23f24b9e.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bb:08:ba:88:87:24:02:6f:f0:05:fe:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=4f18e9c6-2217-450d-acde-3b1da2a9a3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:03:25:cc:46:c7:0b:58:14:45:69:7c:ed:b7:
41:e9:53:3b:47:26:be:52:07:e4:25:68:a4:ad:d8:
c5:f5:94:a0:d9:52:0d:34:14:50:dc:99:d0:2a:55:
15:d5:3e:4f:db:9d:f1:3a:39:35:fa:de:4d:af:2a:
ff:27:fe:29:f1:54:15:92:4f:87:5a:a4:a2:df:30:
a1:62:74:c4:31:18:7b:5e:7f:ac:b7:b0:45:2d:9e:
1e:70:2d:a7:44:0a:c0:1e:fe:51:d7:c4:b5:8b:6e:
86:7c:5c:92:86:78:a5:75:db:50:99:e2:6b:d6:3f:
73:17:1c:d3:ce:0f:4d:f8:f5:78:5c:45:54:80:0d:
66:73:97:50:f9:be:37:af:df:50:ec:1e:9e:2c:75:
b2:7e:41:83:7b:13:c5:d5:11:dc:91:c7:9c:d3:d8:
96:5b:07:89:9b:48:b7:33:00:8c:68:32:c6:e4:3a:
0f:a1:46:9b:02:2b:73:eb:2d:00:8a:84:38:0b:a9:
8b:44:bc:48:fb:1f:de:6a:92:55:4a:46:ce:e6:ab:
45:5e:80:36:1c:be:ae:45:1a:83:98:39:f3:81:81:
9d:80:db:d4:7e:13:7a:21:89:3a:3a:93:02:4c:79:
f8:73:7a:8e:a0:4d:17:71:1f:76:41:92:49:bb:6a:
27:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CA:32:98:7C:B3:78:63:39:01:FC:42:32:E4:F2:C9:3E:15:72:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ebd8f9a-b2f6-3a30-81b5-dd4c23f24b9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:8a:b7:6f:1d:2c:b3:56:d7:28:cd:c1:05:8d:be:f0:1f:51:
7a:86:f8:7a:5c:58:69:16:0d:eb:61:41:27:14:25:99:6f:99:
0f:8b:f2:c1:f1:be:cf:1d:63:e6:1a:a6:a3:10:37:7c:06:7f:
1a:be:47:51:da:70:fe:9b:37:0c:5c:ee:d5:71:98:85:a2:c1:
65:ae:ef:e4:10:36:22:21:23:12:3f:a5:77:9a:10:9d:d2:d2:
a1:1a:fa:2f:e8:9b:7b:0d:8c:a8:0d:be:8b:b2:95:09:42:5b:
47:5f:09:52:b2:0b:11:eb:44:33:88:03:f5:8c:ce:a3:6a:00:
3d:fd:95:82:b5:7a:48:0d:fd:01:b2:58:92:a1:f1:c7:ef:a9:
78:43:aa:5b:06:e0:7c:dd:09:ae:11:70:9f:bd:39:7c:be:75:
58:a4:d7:fa:b4:14:21:cb:d5:a1:0d:ed:bd:a1:83:b9:68:51:
e0:9f:33:35:dc:88:a8:5e:80:3f:4c:2d:fd:a0:e1:fe:45:a7:
22:2a:57:64:71:b6:82:db:84:a4:d9:fb:f3:d7:8b:6c:95:c7:
55:9b:27:a1:0b:92:11:1e:e6:d5:11:72:24:90:ee:07:d0:e5:
7f:92:c5:37:3a:cd:2d:2f:6f:bb:23:84:b9:80:e0:c6:49:92:
ee:c4:3a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:16:17 2025 by rpki-client