Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/71257a5e-2e3e-385d-b496-b27bd551ed06.roa
File: 71257a5e-2e3e-385d-b496-b27bd551ed06.roa (raw, json)
Hash identifier: FMcrqDImKc7uf+d1Wl11Fl2lhuNpe/E4XkCS6cBqRKs=
Subject key identifier: DB:01:AC:66:E6:56:42:0B:6E:05:11:5A:71:46:45:4A:C3:FF:C5:0B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B99BD45C3A1D889344D24E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/71257a5e-2e3e-385d-b496-b27bd551ed06.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.196.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b9:9b:d4:5c:3a:1d:88:93:44:d2:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=45585593-b0c7-4233-937d-5251d62361d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:b7:38:82:35:7e:b1:fa:ea:7e:d1:56:90:
d9:29:31:f7:2e:7f:58:20:fd:f9:aa:8e:e7:d0:d6:
45:70:6b:52:c3:41:52:43:1d:6d:c6:1b:4c:55:cd:
1b:01:d5:b5:a0:53:aa:9b:64:18:42:4b:a3:71:db:
48:7d:7d:22:5a:ec:87:d6:c9:7d:e5:7e:13:d6:12:
15:21:92:62:77:fc:20:bc:12:c3:1f:56:16:ec:87:
db:00:df:8c:29:e7:30:8a:bd:9a:03:6e:82:f9:ed:
ca:48:4d:8d:15:22:25:82:6f:80:f9:a0:23:dc:b4:
57:86:66:19:e4:c8:9e:42:7f:b8:22:b8:36:72:e8:
da:fa:b7:85:2c:98:03:cb:93:da:13:7b:b1:f8:91:
08:49:41:26:8f:35:94:6e:c8:3c:99:6d:ba:90:07:
53:20:f9:31:f2:2e:18:16:a8:81:b9:18:be:41:50:
d7:28:f1:95:6b:86:a7:8b:4f:40:b6:5e:68:26:b2:
b8:bc:12:9e:d6:43:5e:9a:46:dc:fa:37:e3:ab:30:
be:73:ba:4f:61:c4:2b:ec:c4:13:a7:76:63:88:c3:
a3:97:5b:14:9f:9e:51:16:1f:6f:41:9a:77:cf:58:
7b:12:eb:fc:ef:98:22:0c:1a:b7:12:56:ab:44:bc:
c8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:01:AC:66:E6:56:42:0B:6E:05:11:5A:71:46:45:4A:C3:FF:C5:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/71257a5e-2e3e-385d-b496-b27bd551ed06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.196.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:cb:6c:25:de:36:8d:40:d0:49:39:f9:f5:5f:2f:fa:5b:c8:
17:75:1c:13:65:25:72:e4:81:44:d2:38:31:aa:8c:d2:3b:75:
2f:dc:97:b0:1d:a4:b8:e9:48:2a:86:d8:3c:6d:63:10:88:1a:
ce:45:ed:f7:62:d7:be:16:f2:01:b3:92:03:b1:c9:b6:fe:2f:
7f:65:ac:f7:ca:fd:46:03:1a:69:3e:5c:46:0e:d4:7d:99:bb:
48:2c:41:90:5c:9c:c6:f7:13:77:2e:ab:d0:4e:c3:b5:67:48:
c2:bb:bf:81:8f:44:b2:8b:50:8b:2c:e3:57:92:a6:b3:44:e0:
b9:9f:c3:ee:e4:b0:8a:7c:f8:a6:2c:fc:e3:a7:6c:60:bf:bd:
63:15:45:c7:a0:a8:07:fe:03:9d:cd:4d:63:27:e3:9a:95:4f:
5f:5e:b6:cd:3e:22:1a:2a:b7:ee:24:3a:a8:d7:d4:41:21:33:
18:6c:01:13:36:ba:20:6a:79:dd:11:fb:7c:48:33:29:17:20:
75:bd:93:5d:b8:b8:e0:99:26:d1:b7:dc:1b:2f:20:15:54:ac:
60:bc:44:80:8e:65:df:4c:65:6f:81:da:b7:49:a2:68:e8:49:
06:33:6d:03:a4:e9:74:91:70:38:f0:52:e6:3f:7d:20:b5:e1:
b6:10:54:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:51:12 2025 by rpki-client