Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5b25a6be-1a06-3ec1-b3b9-3ac28f0eee23.roa
File: 5b25a6be-1a06-3ec1-b3b9-3ac28f0eee23.roa (raw, json)
Hash identifier: ofr+Q0p1qZ/8dwzPDVZGe66k/f1wQ9SGClzCGy8NYSs=
Subject key identifier: 14:30:E4:37:AA:45:34:9D:9D:23:F7:E5:B5:A6:7E:AB:60:4E:0F:0A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584093EBAFA52BC41E8487240380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5b25a6be-1a06-3ec1-b3b9-3ac28f0eee23.roa
Signing time: Sat 14 Jan 2023 12:00:00 +0000
ROA not before: Sat 14 Jan 2023 12:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.46.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:93:eb:af:a5:2b:c4:1e:84:87:24:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 12:00:00 2023 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=7a40f562-f26a-4d61-8540-1de2d874f324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:83:71:26:7c:74:36:e7:35:fb:c3:46:c8:62:
11:bf:e2:0c:a3:18:e2:a5:8c:41:c4:25:e2:30:15:
83:8f:64:fc:c7:2e:fc:fe:a2:54:6c:b2:39:3a:69:
32:22:38:2a:cc:bf:c7:22:43:ba:1f:d8:ab:a6:48:
f3:91:f6:2e:04:dc:52:c5:59:8d:8d:48:05:70:03:
bc:40:b7:2a:42:2d:15:8d:72:87:b0:e7:8d:5d:b4:
bc:55:54:8d:da:1c:42:6a:ec:66:af:50:26:36:37:
ce:25:18:f5:51:03:e8:8b:5f:d7:70:02:30:fa:32:
f2:5f:53:69:77:5d:49:2a:81:94:fc:06:ad:10:ba:
d0:03:4d:3c:ba:0e:19:6c:48:d7:c3:8e:3e:b0:3a:
c3:37:77:7a:48:b9:0d:0d:1a:0d:35:70:da:10:c4:
fa:cd:2b:fb:67:8f:6e:25:39:87:1d:3a:a7:8b:00:
8a:de:e5:9f:81:32:09:fe:43:53:35:60:91:46:92:
b2:dd:4d:46:83:47:e9:c4:4f:e3:a0:18:38:05:00:
e9:6f:9d:af:05:c5:6e:89:08:f7:37:3a:10:ba:7c:
24:c7:5c:a4:03:ce:c5:ac:09:80:de:6f:c6:44:4f:
b1:e1:3e:ff:0e:95:af:87:b0:a0:7a:6d:af:4d:34:
9c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:30:E4:37:AA:45:34:9D:9D:23:F7:E5:B5:A6:7E:AB:60:4E:0F:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5b25a6be-1a06-3ec1-b3b9-3ac28f0eee23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.46.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:73:71:fb:2c:db:65:47:0c:23:9b:76:be:f6:fe:9a:11:90:
ee:94:aa:ee:59:d6:aa:8c:da:25:b9:b8:a4:f6:7c:ba:50:59:
80:8e:67:e5:30:96:99:36:ac:ce:07:f7:42:d7:8f:a8:6a:40:
76:94:eb:66:2c:72:92:e2:35:39:c7:6f:cd:50:6f:ea:26:b1:
c0:a4:a8:32:18:02:e5:90:46:6d:b4:ef:f6:23:0e:13:f4:5d:
dd:00:8e:16:29:a2:ae:9c:67:b3:81:4b:39:39:48:61:1a:d0:
1c:7c:9d:49:80:97:e6:ef:70:9c:4e:8b:05:5d:88:fe:da:96:
66:21:8b:bb:7d:34:0f:32:4b:43:bd:42:c0:ae:38:08:d9:87:
20:a2:b6:a9:02:1c:70:26:1a:c3:a0:a4:35:58:ca:f9:70:17:
d3:5d:d8:cc:c0:a3:24:65:bc:ba:6b:90:75:91:13:a8:01:61:
cc:d6:3a:38:36:c9:91:10:9d:94:1c:c3:e8:ca:6f:44:78:90:
fc:9f:bf:dc:52:ee:2a:3f:85:a6:05:37:55:30:74:d7:37:20:
58:05:83:c1:fd:be:ed:64:84:40:29:05:36:00:84:6f:4a:d1:
91:c9:8a:92:40:76:d1:53:37:5b:29:83:a6:a8:4c:a6:90:2f:
06:37:12:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:31:55 2025 by rpki-client