Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cbdecdab-efad-3ce0-a320-60d6f3655e33.roa
File: cbdecdab-efad-3ce0-a320-60d6f3655e33.roa (raw, json)
Hash identifier: +mG4iJ1X0lY97bNqountQqXhPRdVUtS+b8Nj35R1NAI=
Subject key identifier: D0:DB:F3:0F:F5:DF:C5:16:C3:6D:DF:D1:47:1D:C2:C8:6B:93:EF:65
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D809F45F842ECE6A2BA3EEB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cbdecdab-efad-3ce0-a320-60d6f3655e33.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.94.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:9f:45:f8:42:ec:e6:a2:ba:3e:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=0817842f-5c75-43f6-9065-7dab0adff9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c2:fe:23:71:24:99:9b:37:39:2a:e0:11:a9:
5d:59:d5:05:4f:ab:cd:65:43:88:03:ce:f2:cf:df:
b6:d2:e0:81:4c:87:e6:5f:7b:e4:19:f9:bb:b7:70:
30:24:f8:db:6c:e8:8a:f4:3c:31:72:e0:2e:b6:83:
4c:c9:a8:07:53:53:5b:73:b5:e9:48:ee:83:41:c9:
5c:6a:39:44:8e:e0:be:92:ca:62:00:67:18:32:f7:
25:53:0b:d4:a6:56:da:4c:2e:63:bc:a8:a3:67:45:
ee:97:df:8f:d2:08:99:66:da:f6:d8:cd:96:dd:23:
36:60:16:dd:9a:68:c6:98:f1:b6:9d:fb:cb:da:4f:
85:6d:29:38:99:a8:f3:60:1b:a0:a4:8a:12:53:f5:
ca:ff:ec:5c:ea:fd:91:b7:0b:2a:fc:a3:0e:2d:f9:
c9:eb:4f:46:13:e0:b4:6e:ca:a2:c1:f9:85:77:60:
4f:da:7d:bb:f8:d6:1f:e2:14:b0:95:84:7d:73:95:
f8:bf:0d:30:1c:c1:1e:72:55:5c:bc:c5:87:32:63:
ea:34:28:0a:92:1e:0a:c1:ce:1c:d0:a4:a3:44:e8:
44:bb:42:42:a1:57:3f:90:e0:12:9b:f4:4b:09:46:
85:3e:fb:e6:48:ff:68:9b:e7:83:79:eb:a7:47:d3:
53:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DB:F3:0F:F5:DF:C5:16:C3:6D:DF:D1:47:1D:C2:C8:6B:93:EF:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cbdecdab-efad-3ce0-a320-60d6f3655e33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.94.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:fb:24:8a:d4:4a:11:d8:08:c2:6a:a1:32:7d:da:83:0f:d0:
1c:66:91:c7:d2:df:f4:48:5a:9f:70:0e:69:de:a7:94:ed:9e:
27:70:15:ff:69:fe:bc:b9:44:c1:b9:80:26:55:59:23:b1:33:
6d:e4:96:27:48:d9:e4:75:c1:e6:bf:90:53:92:c6:1f:25:bf:
8a:0d:17:9d:8e:fb:c3:e1:76:6b:db:5b:18:f4:05:b5:aa:b0:
6a:94:49:f0:2b:e1:d8:a1:a8:69:6b:27:02:2a:41:ba:c1:42:
c4:ef:78:4b:fb:f5:a5:1e:a1:23:33:48:03:20:8c:4c:1c:23:
59:38:cd:75:ac:59:47:64:8c:58:5a:2a:69:39:18:d3:ed:cd:
cc:a7:77:fa:5f:30:bf:4c:b0:60:db:ff:64:fe:cc:27:0f:09:
46:d8:47:29:89:49:45:f4:9d:c5:16:e6:df:9d:53:5d:2d:f1:
26:da:da:8f:11:75:c8:51:96:e6:76:16:99:50:9f:58:05:2a:
7e:5f:d2:d7:ff:ec:f6:49:9b:65:fd:79:9b:b3:68:fd:b3:f4:
07:47:83:25:c7:c5:0f:7f:b8:47:89:bc:75:dc:88:50:4c:96:
90:96:c3:4f:3b:26:19:07:63:9c:22:22:f8:fb:90:1f:73:cf:
28:85:6d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:00:01 2025 by rpki-client