Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c0c1601e-88e3-3ed4-89f8-32d3b5fb280c.roa
File: c0c1601e-88e3-3ed4-89f8-32d3b5fb280c.roa (raw, json)
Hash identifier: P1jZ9l+78akX3UEpxJK2zA57MXt13ZOvxSmFOjq/tDk=
Subject key identifier: 53:59:63:FC:84:A7:89:6F:51:E1:A1:BF:15:FE:2A:94:36:C1:A0:00
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C95E24E027AF639CCA38E9B60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c0c1601e-88e3-3ed4-89f8-32d3b5fb280c.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.43.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:95:e2:4e:02:7a:f6:39:cc:a3:8e:9b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=0737a05e-064a-45d8-93dd-f398e92e1a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:39:2b:44:1d:21:ad:2a:a0:5a:75:f6:0c:
d2:c9:df:a7:9b:b6:e9:06:88:ef:32:32:f7:0b:10:
b0:dd:f7:9e:f4:46:db:c5:92:0d:ba:90:98:1b:2f:
82:aa:15:71:27:38:0c:99:8d:7c:63:74:b1:4e:2b:
13:1d:ff:56:6e:49:8c:97:5b:20:07:d4:2e:11:54:
7d:d2:ab:1d:09:3f:75:50:dc:54:07:3e:58:1e:3d:
f0:49:4e:3d:dd:43:50:b9:37:08:8f:03:9d:66:73:
69:95:b5:54:d0:23:af:1d:a8:33:e2:82:78:e5:96:
ef:21:85:9c:de:0b:a1:0a:36:d2:2d:f1:fa:62:e0:
3d:a4:45:2e:6d:2d:2f:74:57:79:1e:0a:95:f4:3a:
08:c3:32:7d:22:20:76:0f:7c:4e:62:88:f4:7f:ec:
78:89:fd:92:a7:58:83:1a:ce:af:9c:34:45:51:1e:
eb:ce:73:30:1b:2e:58:98:49:68:c9:0b:0e:6b:21:
95:9b:be:f3:0e:7a:1f:59:55:ad:e3:8c:5e:15:98:
a8:4c:8b:24:42:76:95:8f:24:3f:34:e7:3a:76:02:
3c:80:57:c0:a2:b0:11:51:09:f0:be:dd:7c:c9:08:
6e:0e:e6:ab:db:08:bf:48:d0:e0:ce:85:47:75:02:
b2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:59:63:FC:84:A7:89:6F:51:E1:A1:BF:15:FE:2A:94:36:C1:A0:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c0c1601e-88e3-3ed4-89f8-32d3b5fb280c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.43.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:b5:bd:b9:83:d2:b9:27:6a:ac:53:57:e2:17:7e:88:ea:e8:
fa:ef:43:8c:11:8f:23:10:18:6c:04:0c:7f:5f:4d:a3:35:80:
a6:7a:1c:3a:a4:be:f4:2a:41:a5:45:41:ef:8a:ff:54:5d:59:
1b:d5:15:7e:5b:77:4e:dd:4a:e4:73:b8:33:d3:fc:8c:c4:c7:
4f:e7:ed:88:6d:7d:3d:51:3f:63:83:d6:d0:5d:a6:76:61:63:
ae:33:e3:af:27:a6:b0:42:89:e5:55:d5:cd:af:3f:77:09:77:
8a:cf:14:43:d6:c8:b7:59:ad:d4:bc:f6:62:15:5f:c5:f3:bf:
b4:d7:0f:c1:9f:82:66:e0:1d:e9:59:6d:d5:5a:30:5b:06:28:
d7:07:13:7a:5e:6a:4a:d4:94:fe:f5:a8:ec:ab:31:46:78:bb:
9c:b0:77:bc:99:92:92:6c:cf:ef:83:1d:e5:4b:99:af:d4:28:
11:63:ff:93:04:1d:32:94:60:e1:e9:a6:fa:96:14:a0:be:b1:
24:09:7d:b2:0c:69:bf:8f:70:6d:72:28:42:82:d4:3b:11:a4:
58:90:12:dc:37:33:bc:e3:70:53:e2:00:99:49:30:9e:ad:ec:
f0:e9:41:71:13:97:de:80:a6:a4:98:c9:01:2c:e8:4e:0f:43:
34:cd:6f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:16:49 2025 by rpki-client