Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/612619d6-1fb3-398a-b0e0-4315f85cfe2f.roa
File: 612619d6-1fb3-398a-b0e0-4315f85cfe2f.roa (raw, json)
Hash identifier: DbazO2g/Iz3l4d/sRADupZj/UiCud601SEeBeyA/tRo=
Subject key identifier: 7A:4C:66:BC:BF:3B:B7:A0:28:F4:73:58:D6:FB:31:45:8D:96:32:D8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406E0E93390D4B53CA7497B5C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/612619d6-1fb3-398a-b0e0-4315f85cfe2f.roa
Signing time: Sat 31 Dec 2022 12:00:00 +0000
ROA not before: Sat 31 Dec 2022 12:00:00 +0000
ROA not after: Sun 05 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.59.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6e:0e:93:39:0d:4b:53:ca:74:97:b5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 12:00:00 2022 GMT
Not After : Feb 5 05:00:00 2023 GMT
Subject: CN=a1d76cdf-45da-4e13-9dcd-3af1c588f77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:9b:1c:04:02:36:6e:16:81:f9:d6:1b:d3:
e8:40:3e:ed:c3:b1:e8:ed:04:c8:0e:df:18:7c:37:
be:72:a0:c6:bb:17:11:af:7a:f2:3b:e1:98:18:c3:
2c:47:f2:d4:08:ef:ea:1c:56:74:b9:a1:17:f3:d0:
e1:1b:6d:3f:23:10:d6:b0:5f:e1:81:5c:00:34:1e:
45:fa:c4:bb:53:92:19:53:89:81:85:62:fe:78:ed:
4d:ac:97:67:2c:11:ff:be:92:c9:ae:d5:45:93:bb:
f6:5d:21:fb:f5:91:dc:04:77:1d:7d:9b:dc:f6:df:
96:f0:70:2e:0e:60:be:08:41:24:d1:a5:3f:da:39:
4c:df:2f:4e:c9:f5:e7:f3:ba:e7:53:f2:d8:96:68:
15:0e:e6:99:0c:0f:af:3c:29:5f:7d:23:a0:e7:22:
dd:f8:ba:ce:f9:d1:4d:52:bb:27:e8:c9:a7:bc:54:
fc:5a:3f:10:51:a3:aa:85:8b:ba:27:5b:f2:80:bc:
b7:df:01:ea:57:30:0f:5c:ae:bf:a0:ed:7b:ad:bc:
b5:87:1d:b2:20:87:64:bd:ba:03:c2:0f:fd:10:48:
21:5b:fc:75:c1:c3:79:2b:ef:0f:12:ec:e4:a3:d5:
34:d1:23:dd:c6:fa:bb:24:9d:25:3c:6e:6d:76:0b:
ac:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4C:66:BC:BF:3B:B7:A0:28:F4:73:58:D6:FB:31:45:8D:96:32:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/612619d6-1fb3-398a-b0e0-4315f85cfe2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.59.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:f7:61:d2:1c:1a:60:fd:68:9a:e6:49:2f:70:e9:76:e8:1f:
bb:62:f8:13:51:de:47:ec:1f:5b:09:ee:10:f7:6d:dc:27:7a:
b2:7e:4f:fc:10:8c:82:47:06:c9:f1:f3:d1:af:64:8c:d3:2d:
eb:03:fa:a8:dc:7b:ff:28:15:b5:9a:ee:3c:78:29:ea:58:1a:
42:30:19:c0:cb:d6:86:9a:a8:c0:2e:d9:92:ef:72:0d:a2:8e:
31:8a:4b:08:ee:07:9f:f0:10:b9:60:98:e5:b7:e2:90:92:e8:
3e:26:28:36:0c:d8:2e:31:1c:04:21:7d:cf:43:a7:74:8b:fd:
f1:9d:bb:c5:b0:37:30:78:8a:d5:6b:b2:52:98:dc:aa:ae:24:
31:c2:bb:a8:1f:82:3e:fa:f9:ac:82:e9:5a:23:3c:8c:45:aa:
97:9f:07:7b:a2:0d:a6:8c:0b:57:3b:99:6a:e3:a8:d3:ac:b6:
0e:f9:4c:4b:df:48:71:e8:49:96:b0:de:c1:bd:8b:ab:21:2b:
18:8f:bf:81:9a:f8:12:32:71:b5:5b:0b:ad:3b:e8:3a:fd:50:
a5:bf:90:02:10:bc:cd:0f:9b:99:0b:90:cf:46:74:c6:18:d9:
ed:49:bb:e3:d4:22:ce:39:50:ef:1d:b5:ed:81:97:51:04:ab:
c0:31:78:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:36:35 2025 by rpki-client