Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/76a23405-803f-3aae-8b96-c980b1436b84.roa
File: 76a23405-803f-3aae-8b96-c980b1436b84.roa (raw, json)
Hash identifier: nV7gCaEZQpAzzCBM7oK06nYPJ4Vds9yQSNF5aIeMKAY=
Subject key identifier: 56:64:51:2A:40:94:14:63:8C:31:05:77:E5:79:D2:2E:40:B6:2F:3B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F34220851CE0B8A09A4530100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/76a23405-803f-3aae-8b96-c980b1436b84.roa
Signing time: Sat 10 Sep 2022 12:00:00 +0000
ROA not before: Sat 10 Sep 2022 12:00:00 +0000
ROA not after: Sun 16 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.56.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:34:22:08:51:ce:0b:8a:09:a4:53:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 10 12:00:00 2022 GMT
Not After : Oct 16 04:00:00 2022 GMT
Subject: CN=11290c1a-635f-426b-9fdc-92bfff52f083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1c:71:c9:4e:a4:b5:8a:74:b6:89:84:f9:3f:
f4:23:73:09:48:a1:e3:2e:84:ce:fd:68:ca:b6:87:
87:e4:cf:f1:98:10:f3:e6:47:c2:b1:4a:5b:ff:c4:
05:ac:ed:3c:bc:d1:d4:2e:f3:f8:fe:e3:85:4b:dd:
8a:1b:8a:2b:6a:6f:44:bd:fd:88:87:b4:ca:59:de:
b5:b5:30:07:80:e2:c3:ab:70:13:ee:fa:bf:c2:ca:
19:2d:b6:e0:47:7b:0e:b1:70:d9:b8:22:98:96:cf:
28:ae:82:98:de:5a:64:fd:82:87:fc:5f:b2:6c:c0:
f3:f8:19:12:90:52:13:50:8c:7e:d5:00:d6:59:5d:
34:a2:63:0b:d3:b8:9e:57:c8:58:e1:e6:23:46:c7:
fb:cc:c7:5d:a5:47:33:cf:18:a8:f5:60:eb:e2:22:
b0:bb:09:ba:9f:63:27:60:50:48:1b:b5:d9:aa:22:
82:1d:b7:6e:9d:a0:48:a2:2d:99:d7:d3:df:cc:5b:
74:eb:ec:d4:98:bd:14:ef:d0:b4:75:64:1b:65:87:
a6:ae:2c:c2:c7:1c:16:14:43:8e:82:f3:c9:52:41:
69:2a:6b:cc:c2:ea:5d:f1:4b:99:52:08:5b:c8:7c:
16:00:b8:bf:90:86:cc:c2:19:10:46:2f:44:53:5d:
4e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:64:51:2A:40:94:14:63:8C:31:05:77:E5:79:D2:2E:40:B6:2F:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/76a23405-803f-3aae-8b96-c980b1436b84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.56.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:66:68:43:dd:ac:99:96:22:36:f0:80:5a:f1:3c:d2:4a:69:
4b:94:8a:96:9c:f9:c3:ca:b2:08:77:92:d2:3c:b9:d6:fa:67:
c0:b6:01:e9:f3:e5:97:4a:49:dd:e8:98:77:04:45:b8:78:18:
0a:5a:ac:57:27:ff:60:0c:b2:0b:8b:b3:18:e0:5d:df:25:a1:
11:ed:62:85:37:86:74:28:b6:93:71:10:61:29:fe:bb:f2:e6:
f0:2f:f5:8c:43:f1:a3:60:0f:8e:e4:35:81:43:ce:dd:34:48:
f3:9b:a9:21:17:88:7e:08:0d:f2:03:cc:41:9e:d7:4d:a6:c2:
0a:c0:1e:42:e9:56:42:f4:af:59:b3:e9:b4:80:05:9f:06:e7:
15:24:af:1a:92:d3:04:d2:8c:74:4d:01:74:f5:5b:07:a8:80:
9a:9c:01:28:2b:35:a6:f7:fa:24:b5:14:46:b4:ca:13:01:c6:
bd:da:6e:99:78:d6:a7:4e:cb:f2:4b:e0:95:56:68:0a:3f:8e:
e3:eb:99:6c:dd:51:66:d7:5e:9b:f7:90:b3:aa:05:b5:3a:53:
bc:5d:f9:cc:76:f3:4d:64:09:33:3d:07:1d:c3:fd:2d:72:c1:
b4:8f:62:1f:f0:9e:4a:77:cf:e8:c7:7b:f9:3d:4a:2b:8e:1e:
ba:66:32:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:43:29 2025 by rpki-client