Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/54bf99e1-50b8-3457-983f-eb014b30cd8b.roa
File: 54bf99e1-50b8-3457-983f-eb014b30cd8b.roa (raw, json)
Hash identifier: UyLG9Q+U00dpM6TkoeGiqEgGvfhS2vIHxP1ivO7gFSc=
Subject key identifier: 7D:BC:84:D4:CC:07:B3:20:DB:A9:9C:26:1A:D4:7F:B9:8C:17:04:E8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C961768C377E786122206B180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/54bf99e1-50b8-3457-983f-eb014b30cd8b.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.168.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:17:68:c3:77:e7:86:12:22:06:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=059e275b-3be4-4387-8620-03566b92f5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:51:87:2e:a0:56:9d:b8:52:d7:fb:d9:89:b9:
8f:2e:ef:ab:3f:35:d7:de:e9:fd:4e:35:a4:eb:cd:
3f:51:d6:69:45:9b:69:a3:00:35:11:1d:87:49:8a:
73:ae:e3:14:14:bd:44:45:fe:6a:12:0f:39:a7:28:
55:78:80:d0:6c:7a:92:38:b7:05:14:2b:1a:30:42:
69:f1:7f:fd:d0:f6:ac:32:84:37:e5:f7:48:d1:f3:
1a:2a:8f:52:92:0d:9b:71:28:e5:7d:2b:d8:67:c3:
9e:ae:0c:14:fb:38:bf:af:21:7c:51:23:29:b7:8f:
a0:d4:13:8d:02:52:78:dd:28:1d:2a:c1:0a:6c:59:
1b:2a:7e:f8:03:df:87:60:98:79:36:57:d1:64:8b:
70:2b:67:8c:c1:bf:49:63:9c:86:2f:45:04:23:3a:
74:e0:61:e2:f3:04:59:4e:31:89:f6:cf:7e:ae:d5:
bf:96:ef:fb:9f:a9:db:21:04:4e:f1:3a:a0:b0:d5:
bf:5a:b2:1e:7b:5c:2d:36:6c:cf:b8:03:95:e7:84:
29:b7:d4:19:03:4f:99:d0:a8:0f:32:8f:ef:6e:c4:
b4:da:0a:58:d3:65:b9:47:a1:eb:0b:cb:8f:db:34:
c6:30:80:77:6c:44:e5:11:c7:aa:3c:d2:71:50:07:
da:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BC:84:D4:CC:07:B3:20:DB:A9:9C:26:1A:D4:7F:B9:8C:17:04:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/54bf99e1-50b8-3457-983f-eb014b30cd8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.168.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:2d:18:8c:00:4e:0a:cc:49:92:dd:0e:4b:17:b3:9a:06:7b:
8e:5e:b0:e2:88:96:07:bc:92:0b:43:54:7e:c3:6d:4a:d3:c3:
84:81:d4:bb:13:d4:ed:aa:08:a2:fc:e6:0b:80:e6:ed:2b:3d:
f8:58:98:96:c7:f5:dd:21:5b:7a:1e:29:79:cc:dc:fb:2d:1f:
d0:88:91:36:00:be:3f:65:15:88:43:12:01:02:1b:74:f2:95:
31:ea:cf:cd:82:eb:ee:48:b3:a8:b1:db:74:bc:72:d3:72:a1:
b9:74:65:04:eb:b2:37:90:76:04:8d:92:a0:a5:b5:0b:ce:53:
59:da:9a:5f:35:92:27:5e:98:4b:42:ad:83:4c:0c:51:90:b6:
03:c5:da:88:aa:50:99:bf:19:2b:84:72:a0:72:1d:9d:b0:db:
f9:24:3e:0a:cb:3b:4d:0c:62:e8:45:91:ec:e8:50:ec:6f:6a:
0d:b0:9d:f3:b5:db:34:3d:e5:c7:eb:7f:86:96:7f:3d:45:0f:
1e:30:33:56:f5:17:05:59:eb:fe:d2:62:4d:d6:5a:94:a2:39:
ca:ed:a2:95:3b:28:3c:49:61:ea:8f:37:1a:46:d4:e0:c2:69:
27:92:c5:79:7e:3e:52:d2:1d:a7:7b:c8:0d:c3:06:53:81:74:
4a:e4:1b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:07:48 2025 by rpki-client