Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f571fb4-1649-3f02-8c86-3221f63ad110.roa
File: 4f571fb4-1649-3f02-8c86-3221f63ad110.roa (raw, json)
Hash identifier: 1b1HLRedFS1CDuqB/TnZ2KygwHwblJfmpSX52nazaU4=
Subject key identifier: DC:60:F2:2A:A9:1A:18:49:10:7F:C6:47:52:4B:9E:29:F6:96:29:50
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7CA8BF45E1E2EB9E7CD2BB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f571fb4-1649-3f02-8c86-3221f63ad110.roa
Signing time: Thu 06 Oct 2022 12:00:00 +0000
ROA not before: Thu 06 Oct 2022 12:00:00 +0000
ROA not after: Fri 11 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.44.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7c:a8:bf:45:e1:e2:eb:9e:7c:d2:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 6 12:00:00 2022 GMT
Not After : Nov 11 05:00:00 2022 GMT
Subject: CN=56af01dd-4854-4c3c-916a-522d492cc8ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:45:4e:d9:b0:80:1a:da:64:54:28:8d:46:29:
44:b4:37:ef:0a:bb:93:21:76:ff:d6:cf:fb:07:25:
1a:4c:95:bd:b4:b1:c5:4a:cc:7a:76:11:29:b6:a7:
13:88:f1:9b:61:f1:cd:3f:3d:c7:2e:42:ca:91:dc:
9a:4b:6a:03:4f:5f:4f:d4:dc:a2:40:5e:b1:bc:5f:
cb:37:1a:52:5c:9c:b2:85:12:b1:bc:71:db:be:9b:
61:f7:4d:85:71:27:ef:bd:8d:e2:c5:bd:8d:07:98:
9a:ed:46:4b:77:10:a1:2d:26:57:e4:a9:7b:75:91:
4e:26:6e:a5:7d:68:cc:96:b0:8b:f6:6a:fa:40:93:
b2:7f:20:1d:d4:14:37:d8:7c:ad:c4:7a:5a:1a:c3:
7c:51:8b:cc:5e:60:5d:3b:59:e6:7e:86:59:ea:35:
a0:de:e8:46:55:66:98:ff:17:83:d0:fa:f3:bb:38:
b6:27:bd:2e:55:a3:fe:55:fb:04:01:6a:f2:f3:18:
87:25:3a:ab:b7:44:13:39:09:58:07:50:15:03:dd:
dc:81:46:c0:0c:68:eb:7f:a1:5a:e4:23:45:94:69:
00:da:88:17:ab:86:81:92:65:9a:e5:cd:68:1e:73:
8d:fe:d6:8b:c4:c7:aa:7b:2c:8d:e0:77:d9:19:75:
3f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:60:F2:2A:A9:1A:18:49:10:7F:C6:47:52:4B:9E:29:F6:96:29:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f571fb4-1649-3f02-8c86-3221f63ad110.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.44.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:bc:81:4a:c8:05:b5:69:db:e3:aa:78:29:10:3f:01:99:53:
59:67:8a:5c:8d:17:f6:c7:e1:e8:83:5a:92:b5:a1:c9:4f:1d:
ad:85:09:cf:df:79:42:a4:ce:96:b2:0b:6d:2e:15:33:da:b7:
4a:b8:61:a9:c4:e4:40:c1:c8:77:a4:d8:e5:0c:09:cc:f9:36:
ba:28:57:bc:4a:59:38:b0:50:4d:79:20:ee:99:12:2f:ae:fe:
bf:9e:eb:6d:0b:33:c1:0f:58:75:3d:c9:4b:f4:84:0a:9b:6a:
c3:c9:24:41:9b:37:4e:ee:8c:00:df:ba:03:c9:43:51:7f:35:
3a:65:c9:d0:da:f7:cf:de:d4:96:78:6c:90:94:97:e7:9f:47:
e4:36:83:cc:4c:c7:98:23:90:b2:90:74:be:ef:b4:d4:38:51:
91:9f:66:aa:f4:38:bc:5d:2d:38:9c:ad:04:d8:75:80:63:29:
b2:d7:e5:b1:62:cb:74:e6:8c:32:4d:02:af:dc:32:d2:66:e0:
c7:7d:97:2f:c9:bb:a5:8a:58:35:65:00:0e:95:a4:73:c2:e0:
f7:cf:05:4c:28:17:2f:cd:14:ee:1b:08:ba:0b:cb:44:04:89:
7f:15:4c:ca:3d:eb:fc:cf:38:a3:5c:b6:d1:76:e9:62:2a:77:
be:43:cf:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:55:39 2025 by rpki-client