Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5266b33d-8641-36f4-9f9d-c4a566c3b95a.roa
File: 5266b33d-8641-36f4-9f9d-c4a566c3b95a.roa (raw, json)
Hash identifier: Qi8QZypFIoc1Qb7WvY9i1cydoR51rDyDj6Et5QOwni4=
Subject key identifier: FD:86:8D:78:05:F9:F0:82:74:A1:8A:F9:7E:92:FA:5A:F2:88:65:94
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406D0A482E3F69C40891EC5D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5266b33d-8641-36f4-9f9d-c4a566c3b95a.roa
Signing time: Sat 31 Dec 2022 12:00:00 +0000
ROA not before: Sat 31 Dec 2022 12:00:00 +0000
ROA not after: Sun 05 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.96.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6d:0a:48:2e:3f:69:c4:08:91:ec:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 12:00:00 2022 GMT
Not After : Feb 5 05:00:00 2023 GMT
Subject: CN=7dbf5f63-090a-4d14-86f7-4aadbe2ce715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b2:86:8d:50:8a:e7:77:e6:9c:45:4d:5f:ad:
4f:08:57:e1:a0:4c:ae:28:18:5d:fd:7a:68:45:e5:
db:c9:3a:8e:d1:15:0e:b0:cf:31:73:9b:51:be:e7:
c1:05:73:cf:68:91:6e:d9:40:9d:bc:5a:44:e1:bc:
8b:56:fe:80:12:9d:a2:d2:80:96:55:ec:40:c3:b6:
d2:08:b4:3b:dd:c0:7b:e4:80:a0:3d:9c:17:b2:b1:
04:40:f5:ba:0c:2f:e7:0b:cf:c7:c3:b5:21:b1:28:
cd:7e:59:44:f1:6c:05:8b:e0:88:17:d4:0f:99:b9:
a7:8a:a2:35:b3:3a:ed:da:22:dc:3b:12:de:00:f4:
88:cf:7f:51:56:ed:3b:09:5a:c9:61:07:c7:42:1f:
01:0c:c0:33:6e:8e:72:d2:6b:f9:8e:e1:e9:07:ef:
01:0f:3b:78:4d:8e:7f:ec:28:fe:33:de:43:b9:88:
93:02:ce:ce:5f:43:bd:87:30:b1:03:22:d3:1a:a1:
18:97:f7:f0:79:6f:0a:09:cd:5b:54:c0:26:82:42:
41:e8:88:4d:59:24:81:36:8a:89:60:d3:cc:da:7d:
2a:2a:09:6d:f3:04:96:93:62:5f:68:30:9b:76:f1:
71:65:7c:da:b2:5e:b1:d4:ec:99:91:72:2d:06:ed:
9c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:86:8D:78:05:F9:F0:82:74:A1:8A:F9:7E:92:FA:5A:F2:88:65:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5266b33d-8641-36f4-9f9d-c4a566c3b95a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.96.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:e4:40:ee:45:b8:f9:c5:bd:80:b2:c3:c1:29:1e:7e:a0:9a:
f3:47:9c:99:da:4f:18:aa:df:3a:1e:06:76:77:9d:eb:79:49:
4d:94:c4:39:cc:6b:cb:e8:b9:70:8d:29:d9:6c:7f:1c:45:30:
fa:7c:9f:db:76:3d:41:45:88:25:1b:ad:92:fc:d2:fb:8f:53:
75:c3:72:5b:83:f1:bf:3b:e1:24:1a:4a:27:f4:d9:5c:b0:3e:
ee:35:1a:db:a5:ed:28:05:33:3b:09:4b:80:da:43:3b:a1:53:
6d:85:b5:21:6d:57:af:1a:f9:0c:a8:48:45:8f:12:8e:a3:1d:
fe:9a:b0:73:d4:15:db:3d:37:d2:91:1f:c0:1f:78:31:5b:af:
31:19:b3:52:8f:73:f8:a3:1c:57:2b:1f:a3:1d:ff:fa:ca:fb:
3e:ab:7e:37:6e:0f:3a:d4:2d:6e:25:37:ab:cb:c9:79:d8:ba:
a2:cc:16:cc:2f:8e:8a:57:df:6c:72:ae:32:e3:e7:6c:42:c1:
b4:85:db:8d:30:69:34:7b:aa:4a:b4:60:df:1d:28:a1:b1:2b:
f3:d4:6d:20:1b:c8:2c:7d:16:d9:ba:7c:93:97:01:d2:1a:f8:
24:95:2a:26:b3:ae:10:17:39:fd:2d:39:17:4a:b2:d1:59:e0:
8c:21:da:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:13:25 2025 by rpki-client