Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/be3ed785-c9cd-3725-9863-dd7179a3e7e9.roa
File: be3ed785-c9cd-3725-9863-dd7179a3e7e9.roa (raw, json)
Hash identifier: UDdXrttH2ly46ircQ97wN+PdpnVmKpFZ5Hj+8s3TO2s=
Subject key identifier: 61:50:58:EB:57:99:AC:9F:47:35:CB:A8:17:77:12:7F:78:1F:44:65
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840198510C6A6CAAED1187A3D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/be3ed785-c9cd-3725-9863-dd7179a3e7e9.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.229.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:19:85:10:c6:a6:ca:ae:d1:18:7a:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=1971bc70-abf3-4a17-905a-80621222805b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:9a:1e:4e:e7:83:b7:69:5e:78:90:1c:7e:
41:45:73:8f:4d:01:28:49:da:0a:e7:22:de:d5:2a:
0b:d1:08:0a:46:2c:c4:e2:30:be:f8:ce:cd:a0:c9:
d3:49:66:98:2b:ed:53:5e:22:0d:cc:23:56:df:ef:
b6:a5:cf:e0:70:67:46:58:ef:8e:b4:04:a3:e1:5a:
00:64:28:fe:9f:0e:5b:aa:c0:46:b5:76:af:3b:06:
94:00:70:32:1d:ce:3d:04:25:f5:cc:30:f3:ef:02:
46:11:9b:89:82:a6:c0:b4:b0:62:24:7a:24:25:aa:
5f:ac:65:2a:e3:78:35:ff:22:a7:d4:27:bf:cf:23:
79:ad:b3:8b:cf:31:4c:d8:ba:3b:19:ea:e9:9e:e9:
11:82:0a:98:f0:2e:10:e3:d5:db:c8:78:d5:ba:b0:
3d:82:3d:a9:58:de:f3:a1:a7:ee:1b:f4:43:4e:00:
eb:2f:c1:ac:e2:2f:51:e7:91:a4:ea:aa:91:1f:4b:
b6:e5:5a:9f:7a:c1:5a:22:4f:5f:f4:32:1e:dc:26:
85:90:fc:7d:5e:75:80:91:db:42:5a:90:34:7a:bf:
14:38:38:a7:84:f4:9e:40:4f:f1:3e:7d:3e:ae:de:
2a:e3:48:a3:5b:a5:fb:83:5e:1d:81:70:7f:84:a8:
c6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:50:58:EB:57:99:AC:9F:47:35:CB:A8:17:77:12:7F:78:1F:44:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/be3ed785-c9cd-3725-9863-dd7179a3e7e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.229.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:28:fc:2a:05:a9:10:60:fd:ba:33:16:c1:8d:db:eb:47:7c:
c9:96:11:e9:f5:e4:70:47:ae:2d:b7:d9:ff:e5:dc:c4:86:3d:
be:59:7e:c8:8e:92:d6:ed:99:e1:8a:eb:61:0f:54:c1:23:b4:
2a:4b:fd:88:d2:a5:9d:07:7b:9b:61:99:98:31:90:38:7c:b7:
9a:bd:91:ee:a4:7b:e4:d7:12:9b:a3:82:ab:86:30:7b:6b:89:
95:fb:b7:8b:cc:b5:39:a7:ac:3e:a3:95:43:94:1b:06:5a:bd:
f4:73:73:60:c9:16:94:bd:91:ed:ba:ff:f7:60:2a:01:2b:40:
5b:2c:7c:9a:66:6c:22:25:f0:82:bc:f8:a4:98:39:15:d2:dd:
22:d0:98:71:42:cd:5e:c0:f1:3d:56:46:23:78:f9:ba:e4:69:
c9:f7:30:c2:41:07:69:95:af:38:4f:f2:d2:0e:2f:5e:6a:13:
c9:08:a7:a1:97:4b:d2:6b:03:93:cc:21:db:ff:32:b2:af:40:
9f:e9:f8:9d:d8:0b:80:eb:af:dc:01:84:ef:12:b8:ef:93:98:
61:f3:bf:b5:ce:e9:2c:65:a7:19:f3:0b:a9:41:27:66:24:fd:
88:cd:4f:ec:74:74:09:09:90:d7:3e:2c:52:5b:83:08:d1:36:
ba:d4:34:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:42:11 2025 by rpki-client