Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ab64cf64-20ac-3cfa-951f-c1309a513525.roa
File: ab64cf64-20ac-3cfa-951f-c1309a513525.roa (raw, json)
Hash identifier: ZYMGmziAT3icSOKju6Q+ypytZEp/Xn5dN0mtHSxjODg=
Subject key identifier: 13:2E:24:8F:23:5E:AC:F3:8F:62:99:C9:0D:D5:B4:C9:6A:0C:2B:32
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C95E9F57D416B64409BD99D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ab64cf64-20ac-3cfa-951f-c1309a513525.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.72.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:95:e9:f5:7d:41:6b:64:40:9b:d9:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=40b23f01-0caf-412c-83f7-c6655ed55d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:19:ef:d7:a3:12:e9:bd:f2:d5:6e:32:c7:e0:
64:c4:ed:06:06:9f:4b:a2:ab:04:49:18:cf:05:35:
d9:52:d9:84:38:df:cf:4f:a9:87:e4:5f:d9:8c:da:
20:a2:8d:97:5d:70:74:74:ca:d0:31:05:25:09:f5:
df:d8:c3:8b:f2:e7:bc:de:2b:6f:7d:5e:0a:8a:0a:
73:b2:05:6a:80:97:3d:2c:d0:33:58:8b:7b:9f:7c:
c6:9f:50:8e:ef:ba:46:b1:5f:71:a7:f7:b3:91:66:
2c:b7:ac:b5:8b:28:fb:bf:cc:26:f7:61:0e:7e:06:
95:e9:4e:66:0d:13:a6:c8:5a:b6:39:69:e2:26:ae:
74:2a:23:ac:45:76:ac:ad:c4:d3:c5:bc:11:42:70:
6a:29:bc:b3:5a:e5:2c:32:5c:46:f3:68:82:6f:43:
bb:66:1e:5d:ad:c8:18:9f:10:39:fc:7e:7f:71:c3:
da:e7:05:89:da:76:b4:f1:7b:81:81:06:c4:c7:88:
79:23:02:3c:17:5f:5c:f8:a3:08:1d:cf:9f:e5:de:
ba:10:17:81:42:d4:1b:c2:5b:9c:38:6c:d7:93:8d:
41:88:3f:8c:39:1b:35:1c:51:cf:5f:fc:ec:8b:df:
a5:a3:e3:e0:1c:53:22:42:f9:40:79:33:b1:9f:81:
99:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2E:24:8F:23:5E:AC:F3:8F:62:99:C9:0D:D5:B4:C9:6A:0C:2B:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ab64cf64-20ac-3cfa-951f-c1309a513525.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.72.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:31:3d:b7:fb:b5:a2:97:05:ee:1c:92:e6:80:e4:dc:c0:21:
06:ea:1e:5d:c6:3c:55:0d:72:e8:0f:e8:e8:86:92:29:ab:f5:
6e:f5:ac:5e:1c:8b:8a:2b:7c:04:3a:4a:f7:bf:e6:4d:84:2f:
0f:48:76:36:ad:f9:f6:cd:a3:9c:b7:ec:d2:0b:35:7f:cd:5b:
43:78:f7:db:0a:34:8a:01:ca:82:33:c9:92:d0:ed:5d:93:7c:
50:a7:d2:ad:f4:ff:03:09:7b:86:1a:ee:d9:ae:57:9a:04:3d:
4c:46:ea:11:d4:de:d7:c1:a8:49:db:e2:58:5e:29:21:80:8a:
fb:e9:e6:53:26:ba:be:1f:5d:3e:91:b2:32:5c:ab:1a:ef:aa:
d8:60:56:c6:5a:77:8f:54:68:5f:8a:4d:74:50:f9:e3:56:35:
c0:b4:47:83:b0:6e:35:76:77:7f:a4:fd:10:d3:00:56:87:40:
1e:a7:8f:97:22:29:fd:36:68:d0:07:91:d9:d0:11:2b:fd:97:
b9:29:41:cf:5c:74:15:ea:df:92:b7:41:8b:7a:b2:cd:34:ff:
65:4b:85:1e:60:91:1d:f8:39:71:4b:4e:c8:f4:41:24:87:9b:
6c:76:ef:a9:7d:c8:65:3c:c4:7a:62:5e:b7:42:8f:e7:00:9b:
71:5f:df:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:50:26 2025 by rpki-client