Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fb3d631a-6874-313e-b033-77cdcaec3ffa.roa
File: fb3d631a-6874-313e-b033-77cdcaec3ffa.roa (raw, json)
Hash identifier: J+Am1tZW7ncobpLb2KNalg2LIXWeuqV/d6vO6XlnSdk=
Subject key identifier: F7:B7:0C:6E:B8:86:77:24:D8:6B:89:60:AB:E1:CD:BB:E4:63:20:6D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584093F31FAD81A1520F67E6F080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fb3d631a-6874-313e-b033-77cdcaec3ffa.roa
Signing time: Sat 14 Jan 2023 12:00:00 +0000
ROA not before: Sat 14 Jan 2023 12:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:93:f3:1f:ad:81:a1:52:0f:67:e6:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 12:00:00 2023 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=1ffd4a20-4f9e-43d0-b47d-3d6b4d69fa3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9a:75:84:09:a5:ba:22:ad:ea:b7:3f:71:41:
fa:61:98:e1:27:b8:54:97:ed:05:a6:e1:01:08:ef:
b8:c8:66:ef:33:4b:80:61:46:9f:ce:c8:48:ca:5c:
fd:09:0c:71:b9:df:e9:57:1e:ec:5a:d6:8e:b9:e0:
a2:92:58:52:a8:25:7b:13:01:ee:18:ef:48:02:9a:
a4:9f:c3:be:a7:b6:d1:00:12:8c:96:33:d2:57:77:
fd:a6:e1:c0:6f:14:64:0f:b6:ed:17:98:e3:17:72:
a3:4d:d1:16:f1:40:5c:a8:09:ca:d1:c6:b4:dc:cc:
bd:dd:bc:54:7d:14:81:c6:f5:e5:8f:96:8c:7e:ee:
18:ac:1d:ae:fd:bd:a5:36:1b:9a:91:bf:95:ef:b8:
aa:cc:40:bd:62:f7:e3:93:63:8f:32:d4:aa:ed:0e:
b7:66:5a:f3:14:14:f6:c0:32:23:e0:e7:0c:dc:88:
32:53:4f:e4:17:1b:bf:cf:e3:46:ac:16:b3:a4:ff:
0c:37:54:89:c1:6c:bc:0f:17:d7:4d:7b:da:55:f3:
4c:f7:14:90:75:20:91:7f:87:84:30:8f:cd:29:95:
9b:77:b7:62:88:44:ba:45:bc:7d:b6:5e:3e:ed:26:
8b:ca:11:dc:95:05:84:2b:aa:39:48:1f:ea:7d:64:
31:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B7:0C:6E:B8:86:77:24:D8:6B:89:60:AB:E1:CD:BB:E4:63:20:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fb3d631a-6874-313e-b033-77cdcaec3ffa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:88:e2:ea:d0:42:77:62:72:67:be:76:b1:86:78:7a:78:26:
af:43:a8:81:3b:90:b8:ab:d1:66:fe:e6:23:a9:55:d2:21:8d:
66:85:9b:c1:89:8d:e1:e6:20:45:8c:12:e0:b5:cd:a1:11:d0:
bc:d0:65:72:c3:4e:28:63:f7:82:f8:9e:f2:09:94:cd:25:39:
36:0c:d8:5a:43:89:f0:ef:2b:92:2d:86:22:6d:32:23:0a:83:
0b:99:e0:f2:a9:52:6f:ad:3a:75:0b:bb:d9:db:24:30:1b:e1:
4d:44:45:ed:d2:5d:46:7f:3f:a1:6e:4e:d0:bf:d0:38:b5:5a:
a3:b9:9a:d7:1c:85:23:82:26:94:55:19:56:e5:ad:ca:1e:af:
ab:70:cf:2b:55:9d:2f:98:44:9a:5a:51:09:ca:f9:df:b5:8c:
0d:d9:62:bf:14:0e:d5:2e:52:6c:2e:3c:98:29:cb:3e:4a:c3:
8e:04:30:b7:6d:f1:48:c8:66:99:83:05:c5:1b:c2:6e:f7:49:
1c:d0:52:b4:b7:98:a8:f8:c0:ae:8a:f2:b1:d5:99:28:63:20:
f1:80:3a:ef:09:d6:d8:71:fc:0f:fa:58:af:57:80:5f:86:1a:
a2:bd:91:9a:7f:56:58:c7:a4:46:39:ee:ec:78:50:0d:49:e4:
61:b4:c5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:07:21 2025 by rpki-client