Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a2170784-1195-3fa6-b430-78eae8c14a34.roa
File: a2170784-1195-3fa6-b430-78eae8c14a34.roa (raw, json)
Hash identifier: FjXJSGsmlUyg6V+HOtT+Mp+UBOkTsWwxwv4safj8QFE=
Subject key identifier: 0B:51:B1:52:2E:96:46:21:24:3D:FD:1B:7F:28:BF:1D:3A:74:6C:CD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840958C94554A6B1220F67E0F72
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a2170784-1195-3fa6-b430-78eae8c14a34.roa
Signing time: Sat 14 Jan 2023 12:00:00 +0000
ROA not before: Sat 14 Jan 2023 12:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.91.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:95:8c:94:55:4a:6b:12:20:f6:7e:0f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 12:00:00 2023 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=f810dea2-83a6-4fc2-9f4a-8ef6e82ca8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c8:55:08:cd:82:23:7a:1e:1e:6d:b6:f1:ba:
56:0e:4c:40:a7:09:5c:9e:06:34:26:1c:31:0a:36:
04:54:0e:c7:43:4d:a9:40:da:a5:8c:10:48:f7:de:
15:52:36:13:b0:b9:8e:64:2a:56:e1:5f:39:a1:93:
6e:6a:01:01:2b:b6:6f:17:51:b4:0f:63:10:ed:b9:
8e:9f:aa:d0:db:66:95:ed:cf:c2:64:3e:48:08:f8:
17:66:26:c1:ff:9c:17:59:70:a4:1d:f5:03:e1:f0:
25:8b:43:f6:9a:f3:13:18:d6:2e:d8:e1:d9:c9:ea:
40:e8:ba:e1:3e:ee:08:1e:48:29:d2:73:5d:57:99:
59:ff:f1:5f:dd:4c:a0:87:75:65:40:79:78:59:bf:
f3:06:2d:5c:ba:8c:11:49:eb:3e:9e:e9:d2:35:fe:
05:79:2b:dd:c3:96:1a:06:99:91:35:c7:04:13:b6:
fa:97:dc:aa:1c:c7:6b:05:d6:9f:54:22:cf:1f:82:
36:66:34:07:c1:5f:9a:14:91:76:a6:86:0d:6d:29:
2f:40:41:3e:ba:b7:30:fa:a1:d5:bb:d6:ef:1e:76:
f5:95:be:a1:c5:5a:89:30:4f:ff:1a:6e:25:a2:dc:
76:5d:be:a7:fb:6a:d2:ce:34:e9:fd:e6:c1:8b:9c:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:51:B1:52:2E:96:46:21:24:3D:FD:1B:7F:28:BF:1D:3A:74:6C:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a2170784-1195-3fa6-b430-78eae8c14a34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.91.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:95:ea:d3:a9:e9:ff:7c:60:ae:28:3d:25:b7:5e:9e:e5:eb:
d1:04:e4:b7:d5:44:6e:32:7b:ba:08:9a:f0:2e:0c:78:68:86:
a8:b2:0c:c5:a3:9b:04:2c:f9:57:bb:24:ea:75:b8:0a:b6:ca:
6a:66:7e:1b:55:75:63:c4:cb:d9:b4:da:b1:85:50:10:f5:bc:
f7:13:32:1d:02:ef:6b:4e:25:58:b2:3f:f1:31:55:91:47:21:
70:b4:ba:f5:5f:f1:b3:c7:4e:8b:5c:46:5b:10:a9:2e:3e:7d:
ff:48:b1:ee:f5:19:ea:78:df:53:cd:68:03:28:fd:24:7f:61:
93:36:9d:cf:96:5a:a5:0f:76:2b:01:ba:52:f0:e9:62:06:89:
4f:31:44:1f:1c:e8:50:a2:af:40:9d:0e:81:01:6a:b8:f4:a0:
a0:5f:dc:f4:ea:54:5f:31:19:ed:6c:39:48:ff:a4:73:d3:20:
15:33:c1:e0:3a:7e:e1:96:43:61:46:db:3d:e2:be:58:ac:c9:
b3:37:5f:3d:da:1e:da:f8:b9:f9:ba:41:a6:de:9a:e1:82:50:
33:3e:de:bb:a4:25:12:19:b9:08:6b:73:ab:b9:11:d5:58:86:
c4:03:c3:c1:2e:98:ed:8b:5a:a4:fd:90:03:d6:d8:b1:60:8c:
33:ea:16:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:01:07 2025 by rpki-client