Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73801a22-89a3-3730-b6bc-92d52c92bef5.roa
File: 73801a22-89a3-3730-b6bc-92d52c92bef5.roa (raw, json)
Hash identifier: chZLq9FWx6hrPt2FS/fhv0M7FVz3Cb7/fo+6gPYSE0w=
Subject key identifier: BE:22:AA:29:CE:23:CA:77:1E:FC:D3:4A:B3:CC:6C:59:A1:C5:78:A6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840191CCDB6985E32D74292D7E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73801a22-89a3-3730-b6bc-92d52c92bef5.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.44.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:19:1c:cd:b6:98:5e:32:d7:42:92:d7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=da45e58a-09a0-4e20-ab47-9b2164f7c72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:f7:27:cf:9e:28:9e:57:52:4a:b8:f3:70:
15:2f:a3:ef:e3:53:15:69:7b:af:c0:52:40:2f:ab:
e9:7d:bb:5b:64:d3:2d:58:d4:c0:21:b4:b4:dd:91:
da:ca:b6:9b:e5:e6:62:8e:88:e6:60:26:b1:95:10:
ce:a7:c5:85:fb:29:bf:f8:d8:94:6b:b3:9a:47:79:
e5:73:a3:9a:96:c9:fb:ba:7c:dd:58:b9:da:96:77:
20:9e:20:77:7d:77:8c:a6:29:08:93:f7:50:5d:3a:
fc:92:48:41:35:47:b3:7c:b5:e6:89:53:cf:53:8d:
31:5e:ff:d7:48:d8:c5:73:11:f3:7b:75:d7:4c:01:
1f:3d:43:06:e7:d2:5b:13:b6:c7:66:20:88:8a:62:
b0:61:d2:76:93:23:55:74:19:5f:53:a2:dd:61:1f:
5d:0c:c5:b5:fa:d7:f0:8c:3d:66:96:b6:b9:49:7f:
7e:e6:e3:42:32:da:03:76:b5:40:9f:b2:f5:0f:54:
bc:dd:94:1d:a5:34:ca:ba:8f:82:1e:b0:6f:d4:16:
f4:c6:a0:3a:cc:09:f4:67:84:d1:32:20:b9:83:30:
07:42:4e:76:8d:6c:e4:c6:f8:d8:88:7a:62:41:25:
09:ce:8e:c2:17:eb:ab:3d:ba:53:ed:26:8e:58:ba:
ea:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:22:AA:29:CE:23:CA:77:1E:FC:D3:4A:B3:CC:6C:59:A1:C5:78:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73801a22-89a3-3730-b6bc-92d52c92bef5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.44.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:65:61:bf:0e:65:33:30:af:14:36:f1:c0:2e:50:9c:bb:8e:
84:dd:b8:46:5e:40:bb:0c:aa:bc:fe:03:71:74:3a:dc:8d:22:
c7:07:7e:fb:c9:6e:79:b6:5f:58:45:ea:a6:28:22:9e:c6:a9:
38:11:04:97:d5:2d:1c:d2:e6:46:9c:59:8e:92:c3:b5:a2:28:
88:27:e5:5c:b2:ca:64:00:8c:74:2e:36:7f:8c:07:9a:be:0c:
70:a6:00:ee:f4:ce:0d:6d:b5:d4:28:81:41:2c:94:c8:78:ab:
36:5c:a0:c2:65:bc:ca:6c:f2:23:dc:90:04:1a:42:be:cd:41:
01:96:82:e7:69:80:6a:05:85:18:05:6f:ef:6c:28:1b:b4:8c:
7c:de:20:54:e0:3b:ca:80:dd:49:69:40:9c:3e:8f:86:b9:18:
2b:0d:37:38:77:ce:b2:90:4a:07:97:9c:e7:62:bf:a0:bf:8a:
1b:28:23:3c:91:41:93:0c:0b:4b:d3:d7:de:ce:ea:52:01:56:
04:85:9f:39:1a:81:f0:db:a1:8e:5a:a2:af:39:c7:80:8f:c6:
3c:8f:83:bc:28:67:f3:92:e5:fd:cf:eb:8c:2c:46:18:49:21:
31:f6:9a:32:c2:be:b7:d3:00:d0:74:61:61:e5:58:c7:16:e6:
16:e1:e8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:20:40 2025 by rpki-client