Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bb23f43f-5f3f-3b36-b118-a74558c3185e.roa
File: bb23f43f-5f3f-3b36-b118-a74558c3185e.roa (raw, json)
Hash identifier: 56WC1vXaQRMrGDS0FVGsubM43BbLI0ZXVTTP+TJ9+jM=
Subject key identifier: 81:B5:1B:04:3D:C7:CC:D8:E7:99:5A:A5:52:27:75:2B:6C:85:16:86
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B75C9EE8E9D77933BA62280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bb23f43f-5f3f-3b36-b118-a74558c3185e.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.179.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:75:c9:ee:8e:9d:77:93:3b:a6:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=5976ab36-9ba2-4f17-bb2e-4f2142409877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:93:3e:19:0c:26:b4:1b:8f:2c:c7:aa:10:9a:
e2:fa:f6:97:c8:f5:ce:16:b0:42:51:7f:51:51:97:
4b:19:84:41:61:3b:d8:4b:f9:29:23:ac:c5:75:cb:
c4:6c:87:b1:af:a9:d8:82:5f:7a:b6:82:a3:12:08:
34:9b:97:eb:07:09:7d:0d:5f:36:b4:f0:30:77:b3:
92:e8:35:cb:f6:4c:02:f7:9e:82:ee:26:fd:4d:bd:
b2:29:0d:ae:01:13:33:ae:dc:70:0b:df:3c:21:b7:
e2:3e:a2:f1:a4:e8:b0:ad:9a:1f:46:c7:f0:5a:c8:
d2:65:41:a5:75:b0:d2:f2:1e:57:a8:65:aa:7d:1c:
bf:15:a3:01:5b:d5:51:2b:2c:51:f0:f0:f1:3d:17:
bf:85:e9:75:0d:d3:ef:cc:d9:3a:2b:5b:28:83:b1:
87:10:f5:4d:ac:2d:ee:d0:7b:1b:c0:b4:25:76:57:
b3:b1:a4:bb:f0:76:32:87:3e:1c:f1:24:08:ff:da:
00:ca:b9:79:4d:81:19:fd:6f:73:84:a6:36:7c:53:
08:c8:eb:3e:3b:64:46:e8:57:f2:f5:fe:f8:52:f9:
cf:dd:5a:f9:5f:69:67:38:44:c0:b1:ed:b2:1d:77:
34:f9:38:a0:d7:6f:38:77:ee:5f:90:5a:bb:1e:7d:
bf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B5:1B:04:3D:C7:CC:D8:E7:99:5A:A5:52:27:75:2B:6C:85:16:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bb23f43f-5f3f-3b36-b118-a74558c3185e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.179.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:bd:e8:8f:48:4e:e1:21:f1:21:7f:6b:41:12:d3:17:c4:f4:
f9:0b:fc:a9:ba:1c:73:af:3c:78:f7:21:3b:e9:99:40:16:b3:
de:63:4b:69:90:0c:71:86:85:ee:47:17:0b:20:5b:67:53:07:
55:b6:13:44:6a:e2:ec:e4:bf:00:60:b3:da:cf:19:b1:9c:4d:
9f:85:d6:61:77:e8:5f:03:29:ee:e9:e0:cf:24:54:24:5c:88:
bb:3b:55:fa:5d:e3:a7:7e:85:c4:2a:81:cc:cf:c2:82:83:dc:
43:07:96:a9:0d:7a:71:cf:22:55:3f:95:93:82:78:37:2d:92:
62:9a:92:eb:44:5d:4d:f6:79:bc:b3:03:66:b0:85:d1:e7:99:
a9:97:c0:ce:5a:de:f9:9e:6e:8a:29:2c:2b:ad:f5:8b:4c:9c:
8e:2c:12:09:41:5d:03:97:31:b0:8d:12:6e:cb:ec:7c:83:ba:
1d:a3:a8:4d:cf:d5:1b:f0:83:2b:46:80:ad:8d:fc:a1:4f:13:
d5:1e:4c:18:ee:af:0a:74:a9:a0:1c:97:4a:7c:89:ff:6e:43:
6d:01:c6:05:48:ee:dd:7f:69:f1:49:22:e2:14:6a:77:e0:bc:
68:77:c8:f8:40:52:44:4e:82:99:8e:bc:43:9a:25:15:d9:6a:
e2:bf:67:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:01:01 2025 by rpki-client