Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f2369426-6a74-3487-8fb9-c545c6485d3f.roa
File: f2369426-6a74-3487-8fb9-c545c6485d3f.roa (raw, json)
Hash identifier: MGqC3jql3ZqxKb9E78fONCntFjEa5GoxoQkWCd0BaSY=
Subject key identifier: 71:9C:FE:E1:99:99:73:92:D8:BE:2F:7A:4E:28:B8:41:34:FE:C7:72
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584045C7F2366BAF5A07481CB880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f2369426-6a74-3487-8fb9-c545c6485d3f.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:45:c7:f2:36:6b:af:5a:07:48:1c:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=0a746e6d-449d-4fc3-9523-4c190b49675b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:5f:c3:bd:78:d5:6d:6f:b2:03:cd:e9:b0:
f5:6d:5f:68:c8:0d:71:9d:cd:77:9d:8a:be:9b:eb:
b2:bf:5b:8c:2e:73:41:ba:5b:4d:b0:2d:88:34:a6:
98:7d:8b:67:47:50:1b:69:d5:2e:f6:d8:85:a4:3e:
df:b8:42:22:54:88:79:71:f7:04:ee:22:c5:ea:6b:
8f:fe:a1:8e:be:9f:46:ab:b8:82:d0:63:b1:9c:0d:
8c:10:d6:02:32:8b:57:25:f3:e5:f3:2e:f2:6f:f1:
2e:b8:a1:7a:a6:3d:9d:70:99:8c:af:08:dd:ad:6c:
e4:4b:0e:9a:72:b0:f6:83:0c:fd:9b:a7:99:03:d4:
9f:31:69:ff:fd:85:b1:fe:f7:a4:6e:5e:03:e2:9d:
03:19:86:5d:76:4f:ce:27:55:4b:84:b5:4a:c5:a3:
94:21:fa:03:e5:88:da:2f:41:8b:76:99:a6:4f:51:
7e:67:d6:e1:d6:e7:73:a6:f3:e9:aa:8c:1f:b1:76:
1e:c3:69:d1:0e:bb:e8:27:ba:44:c2:ab:9e:66:1d:
d3:4e:56:5d:ab:4c:21:2c:a1:8f:5b:c3:6e:c7:1b:
ce:65:54:6e:74:8b:30:92:08:45:7a:05:05:a8:cc:
67:bb:1e:f4:a5:b6:93:aa:07:41:2c:95:bd:19:52:
39:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9C:FE:E1:99:99:73:92:D8:BE:2F:7A:4E:28:B8:41:34:FE:C7:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f2369426-6a74-3487-8fb9-c545c6485d3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:33:f4:2f:22:65:8e:48:56:b7:73:02:cf:51:7f:b3:29:86:
46:5e:c0:e3:5b:42:38:f2:d2:7f:f5:7e:0d:8a:49:e9:89:a3:
2b:9d:64:51:83:bb:57:bd:12:02:01:a2:74:83:9d:34:af:31:
3d:ed:64:31:2a:41:e9:db:01:8d:2b:90:dd:f3:2f:bd:28:c5:
ed:08:3c:3d:05:24:9e:a5:48:52:47:87:6f:c6:ca:00:0a:86:
e8:ce:c6:a3:41:b2:4c:56:19:30:7f:4e:3f:9c:c5:56:7a:46:
76:6a:be:b2:a0:3c:a8:02:a3:fa:0e:30:9d:38:0f:53:fa:fc:
05:2c:4f:22:4c:47:25:06:54:b6:00:e6:08:7a:1d:d9:10:9a:
c8:ff:97:2c:b8:6d:7f:ad:00:24:72:e0:6c:0f:86:64:1e:24:
6c:92:fa:bc:69:37:fb:24:e0:06:c5:2d:28:21:a6:e8:6f:07:
d1:2b:6e:57:bf:13:a0:66:55:7d:6e:ca:8e:44:04:07:ce:21:
2b:49:28:6a:0b:47:40:b0:ec:af:62:03:96:f5:9e:2a:55:f7:
75:24:50:16:16:c8:a7:3d:e0:a3:31:5e:55:5d:fe:30:c1:3d:
7a:e8:8b:2a:11:92:a2:28:45:d0:3b:95:48:5f:94:be:b7:ea:
54:87:86:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:15:02 2025 by rpki-client