Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bf597690-5ed6-36f6-baf2-2c625ce1db31.roa
File: bf597690-5ed6-36f6-baf2-2c625ce1db31.roa (raw, json)
Hash identifier: jb3g/HSVR1Po235T25tXF6s6kuaAHkh6jbap/XCw8qo=
Subject key identifier: 77:2D:A2:2E:51:A8:B8:11:4C:E5:9A:02:A7:3D:1F:38:9C:12:FF:29
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD59247FEF036BD0CB3D4480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bf597690-5ed6-36f6-baf2-2c625ce1db31.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.253.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:59:24:7f:ef:03:6b:d0:cb:3d:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=57676dd0-6b0a-4f78-b638-e327e34ca7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:29:3e:fc:82:d0:8f:5b:d1:4a:aa:9c:89:
f4:00:db:58:1e:f6:32:70:e2:b6:03:22:7a:34:73:
0f:66:a7:44:b5:d7:48:d8:de:e8:ad:32:d8:f9:a1:
40:c9:2c:e7:47:a3:64:74:ae:60:c2:39:5e:ce:10:
c7:5f:ed:69:92:1b:89:54:55:67:5b:07:e2:38:e1:
13:cb:73:8d:32:27:2d:fd:31:e9:4b:24:16:a8:4e:
10:5f:0f:e4:4c:05:8e:8f:7c:f8:67:ae:4d:29:6a:
6e:6f:84:ed:cd:e4:63:8d:7f:e0:bf:78:cf:af:88:
03:24:7d:b6:7e:60:0c:33:50:fc:69:7d:17:98:cf:
4b:d1:d8:14:5a:16:f1:f0:a4:4e:34:1d:12:1a:56:
bc:9e:a7:df:2a:2a:3d:a2:54:64:b5:4e:d7:ea:09:
3f:b2:70:ba:ad:84:a4:86:38:d2:47:32:d9:55:16:
3e:94:3b:f6:b0:3f:0f:35:be:36:a9:04:70:eb:85:
4f:7d:fc:b3:e5:52:57:7c:09:f0:9e:08:72:b0:ba:
2a:27:29:3b:62:98:fa:d4:64:b4:53:55:1a:03:af:
5e:59:67:b2:cf:9e:da:ee:6b:6e:ce:ba:99:2b:82:
17:54:b8:6e:89:5e:5b:5b:5c:0f:b1:57:c3:aa:2f:
7e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2D:A2:2E:51:A8:B8:11:4C:E5:9A:02:A7:3D:1F:38:9C:12:FF:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bf597690-5ed6-36f6-baf2-2c625ce1db31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.253.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:55:18:6c:fc:99:01:48:3b:9d:53:d4:29:10:ef:42:83:e3:
4d:f5:ad:b0:2b:4b:59:dd:68:53:75:d1:3f:a1:df:dd:c0:a2:
47:a2:88:ed:8e:03:98:8e:15:6a:c9:63:3c:9b:3e:03:84:1a:
db:e8:b1:f1:21:84:0b:6c:2c:0a:c3:5b:70:2c:6e:d3:49:a9:
0f:c3:e9:b0:ae:7a:af:e6:56:3d:c8:03:93:32:ec:7a:14:45:
cf:c4:a7:90:62:5f:89:95:b1:33:44:5c:60:41:23:b0:ad:39:
d2:9a:47:23:77:6c:03:93:e3:1a:1a:d2:df:8d:9b:ad:d3:63:
10:45:d4:d5:29:81:93:05:9e:52:ce:7e:4e:af:7e:fe:4b:75:
d9:2e:04:b7:21:65:51:d4:6f:f1:8f:61:1f:e9:6a:00:88:91:
6b:3c:0d:2f:ea:6e:0b:39:73:4b:ba:75:89:79:c5:46:04:30:
4a:fa:ac:8e:a6:ec:29:46:e1:eb:5a:1a:7c:b5:6c:98:42:da:
51:ab:c6:8e:9f:5f:03:e6:55:0f:12:82:66:6d:cd:9a:f3:66:
af:af:b4:da:eb:09:11:b4:71:32:56:36:24:22:c0:4b:a9:ca:
09:38:b9:06:ae:64:27:7a:95:9a:50:25:d6:95:67:81:87:84:
42:10:29:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:17:06 2025 by rpki-client