Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/55345b9c-58f7-3a51-b9e4-2f928f76eb58.roa
File: 55345b9c-58f7-3a51-b9e4-2f928f76eb58.roa (raw, json)
Hash identifier: plNUkImgcIYpIxORNyjnZeOpmcMRLRAKn/HfJ1rdTdU=
Subject key identifier: 4C:16:FE:24:A8:F1:28:0A:B0:85:C8:B3:A6:C7:4A:E6:7B:13:C3:F9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F5B90C32B916BD9671CF63E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/55345b9c-58f7-3a51-b9e4-2f928f76eb58.roa
Signing time: Sat 24 Sep 2022 12:00:00 +0000
ROA not before: Sat 24 Sep 2022 12:00:00 +0000
ROA not after: Sun 30 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.80.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:5b:90:c3:2b:91:6b:d9:67:1c:f6:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 24 12:00:00 2022 GMT
Not After : Oct 30 04:00:00 2022 GMT
Subject: CN=aca0a256-101c-4ed5-bb4d-1aab85e4fa2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:fc:55:03:e3:2e:e6:9c:44:a5:ca:98:18:
12:da:9d:48:ed:ee:7a:65:6a:a3:74:51:97:c9:e1:
17:8a:cd:14:0c:92:ea:6d:49:e4:b9:8f:e2:78:ec:
fc:c5:ff:aa:86:f5:1b:a3:8a:ec:00:f0:9d:52:c8:
b2:13:06:56:e2:c7:a9:73:8a:c6:9a:8d:b1:08:12:
7d:73:6b:27:57:00:02:49:ec:6e:72:79:3f:0a:6b:
dc:36:14:e1:70:6e:ce:a9:9a:09:cd:96:52:8f:ae:
3e:24:a5:25:e0:ed:75:59:a7:fb:44:86:e4:d5:ac:
fb:0c:f9:10:ff:f8:16:b7:be:92:6b:c3:e2:2d:01:
84:ba:4f:fb:5d:52:8b:9c:c4:fc:24:d9:0e:8a:db:
ef:f8:fe:d1:51:88:ce:3e:ee:c7:8e:44:3e:fb:21:
31:46:3d:04:57:d7:ef:55:1a:33:ee:49:3e:6d:00:
f2:49:bd:40:46:72:eb:f1:7c:2a:ba:ee:53:a7:bb:
61:a6:08:f0:67:d3:c9:ef:f0:a2:b0:ff:77:a9:72:
e8:0a:3c:e2:84:f3:72:f0:b2:23:b9:15:96:dc:0c:
f3:23:99:fd:35:74:43:da:ce:33:9c:bd:7e:be:c5:
1e:b8:23:e5:2b:42:0b:96:f0:f7:b3:b7:c3:03:cd:
40:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:16:FE:24:A8:F1:28:0A:B0:85:C8:B3:A6:C7:4A:E6:7B:13:C3:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/55345b9c-58f7-3a51-b9e4-2f928f76eb58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.80.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:ae:00:ac:31:1f:b1:ac:f1:c8:be:d6:29:13:96:f5:60:71:
c7:75:19:a8:56:56:9f:cc:cc:08:c1:21:5f:fd:4a:d1:ff:2c:
d7:03:da:41:a3:89:c8:d0:1a:f1:7c:00:6e:03:b3:e4:3f:06:
f3:d3:42:46:e7:f9:e0:0b:ab:c5:63:9c:df:eb:56:e9:7b:67:
dc:68:6b:f5:94:77:d2:d2:f2:55:29:47:18:92:18:70:6d:75:
06:83:3c:f4:cd:fa:fb:76:5b:6a:da:50:9f:81:9f:9c:14:3e:
f9:20:72:75:0d:8a:99:c8:fb:70:3c:b0:46:27:c0:d0:17:50:
73:8e:74:87:cb:4c:b2:c2:89:c2:50:b7:17:e3:4a:a6:ac:ba:
76:d8:f7:61:10:f0:c8:b1:74:65:cf:1f:1b:fa:60:c5:31:d2:
91:f5:7e:b5:2f:da:e2:16:95:c0:2f:74:2b:0b:1f:f5:13:b3:
2b:8f:da:de:fb:6d:c8:c3:6a:88:a6:53:94:71:c9:29:7f:49:
a4:77:c2:98:b9:34:08:66:87:cd:7b:ab:05:72:ad:20:4c:f7:
36:28:d5:31:2b:f8:5a:e3:91:9c:02:17:99:62:f0:4a:04:4a:
36:14:c9:2c:e5:a3:4e:80:87:1e:ee:a2:27:e2:e8:85:89:d2:
bf:6e:65:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:03:47 2025 by rpki-client