Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/91d57769-63a7-3d44-8506-6758bdecdbf0.roa
File: 91d57769-63a7-3d44-8506-6758bdecdbf0.roa (raw, json)
Hash identifier: 69vhhWHbreJ6/edmXB64QcObqU9/EOn+GR5EtBca7Gk=
Subject key identifier: 42:AD:41:EC:20:1D:1D:92:43:44:2A:92:92:AF:9C:53:A7:76:E0:0D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD4B1CF1CFF65E114A298A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/91d57769-63a7-3d44-8506-6758bdecdbf0.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.231.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:4b:1c:f1:cf:f6:5e:11:4a:29:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=561c663e-1588-4af8-8158-9ffd4cbca1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:aa:fb:c0:79:99:b0:d1:be:2c:f2:f4:de:34:
c1:1c:fa:d4:5d:9a:be:a7:b2:6e:f6:18:ae:fc:8c:
d4:2d:0c:48:85:78:db:2b:53:b0:0a:44:37:99:28:
7c:33:a8:f6:f7:6c:52:d3:80:5b:2a:d1:c2:53:5f:
b8:53:b4:d7:bd:86:90:46:3e:30:e8:e6:f7:04:67:
3b:a0:cf:8f:8b:d5:c8:48:1f:36:fe:12:90:38:9d:
fe:4d:5b:3c:df:c6:bc:cf:40:d4:e4:c4:fe:b7:51:
9a:2a:16:d9:cf:33:06:81:02:70:2f:71:4c:5d:3d:
99:c8:bf:00:9c:4e:fa:f2:d8:e5:84:88:7a:42:76:
23:7c:93:40:c7:24:bf:a4:5e:a3:1f:20:0b:6a:b5:
da:07:ef:18:90:04:b3:a9:6b:98:29:f4:41:91:48:
c5:32:0f:5a:d6:c9:0c:bb:b1:d7:83:19:87:2f:5c:
a8:b5:da:50:de:fd:1b:bc:b5:6b:e7:21:a5:f1:73:
61:26:11:0a:d3:e2:78:98:69:e3:46:51:1e:15:06:
c2:4e:26:05:d7:66:39:cb:c1:3d:4c:1b:a2:20:b2:
54:e1:4a:82:a4:91:96:13:bb:7f:0f:2d:ab:c0:ed:
af:43:3e:90:6d:ba:11:46:8b:ad:e1:0e:1a:37:7f:
35:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AD:41:EC:20:1D:1D:92:43:44:2A:92:92:AF:9C:53:A7:76:E0:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/91d57769-63a7-3d44-8506-6758bdecdbf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.231.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:e7:2a:da:1a:0e:d3:9f:34:3a:df:4a:2c:fa:89:61:61:1b:
50:9c:cc:01:72:20:fe:66:55:2d:19:48:10:3f:fd:81:3e:a1:
c9:bc:b8:d3:bc:0a:c4:d2:65:2f:3a:23:7c:69:83:79:99:bb:
02:01:9f:29:e6:c6:bf:54:f0:b0:9d:c4:93:79:99:79:df:89:
8a:cd:5d:b2:c3:8f:bd:e0:11:cd:75:5f:98:d8:d5:82:96:a1:
f0:24:f0:72:4e:e9:42:54:40:33:02:ed:be:35:05:5b:0f:d5:
93:d2:11:b1:c9:64:86:0d:34:6f:f0:91:89:91:6b:11:5d:a9:
bb:f0:ef:3a:c0:8c:5d:f7:83:cf:48:05:3a:eb:f6:47:82:92:
43:29:d9:92:f8:31:52:93:84:26:88:a0:2d:f5:01:76:b4:19:
11:88:48:cc:78:ac:13:11:42:ad:09:ab:dd:32:5c:06:be:47:
40:83:60:f9:f2:9a:1a:2b:d5:77:b2:cb:18:30:ca:b3:3a:29:
f3:a1:c4:35:13:95:34:40:75:6d:da:66:17:87:b8:67:d8:79:
81:c2:fb:0e:b5:94:f8:f2:9b:2e:72:14:6b:62:aa:1e:63:44:
da:ec:bb:be:81:d6:8e:2a:20:7b:79:aa:82:96:ca:77:8b:6f:
be:ba:8d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:47:36 2025 by rpki-client