Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cd178929-debc-3ab9-a6f1-0f4379edb056.roa
File: cd178929-debc-3ab9-a6f1-0f4379edb056.roa (raw, json)
Hash identifier: kwS3qzdY9e/sHLVZUbRiue3XBvYmkcAfeZ7Nq6noGgc=
Subject key identifier: 51:25:5A:DB:C6:A4:E1:8B:A0:D7:FB:D6:B7:A3:BC:02:6C:B0:84:77
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F82C45038EB7503481D075600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cd178929-debc-3ab9-a6f1-0f4379edb056.roa
Signing time: Sat 08 Oct 2022 12:00:00 +0000
ROA not before: Sat 08 Oct 2022 12:00:00 +0000
ROA not after: Sun 13 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.116.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:82:c4:50:38:eb:75:03:48:1d:07:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 8 12:00:00 2022 GMT
Not After : Nov 13 05:00:00 2022 GMT
Subject: CN=a5d90bd5-107d-4f2f-bf72-e3d12232b2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9d:eb:94:eb:21:ed:f6:a8:18:30:4b:d9:61:
c0:a5:9d:c8:e1:13:5b:d9:58:21:7d:61:93:ee:3d:
7a:ad:36:d4:49:68:49:86:4a:c2:85:c3:ad:08:fb:
fe:5e:c2:ca:d2:e5:32:8b:12:8b:90:83:06:7a:24:
d6:57:f5:0e:22:1a:2a:61:a8:63:ff:04:23:2d:67:
8e:9b:70:d5:81:46:1a:30:2b:f7:e1:74:f9:7c:24:
e7:5a:91:a3:cc:0a:61:cf:1d:53:b9:b2:69:37:cd:
ad:a2:28:a0:1b:4c:e6:f4:85:81:4d:b7:f7:44:27:
21:59:2c:da:e4:7a:9e:c7:bb:92:c3:f8:3e:57:29:
ba:cf:61:df:43:ee:13:a1:3c:51:c4:8d:65:33:c5:
0e:65:49:fb:86:2b:a7:11:db:d3:d2:88:2e:68:e0:
c0:6f:47:79:0a:93:8c:06:eb:2e:9f:4a:e9:3b:66:
7f:28:78:c3:68:42:78:8f:f2:81:02:6e:be:5f:54:
0b:d8:55:78:29:ee:70:61:3e:54:df:f9:0f:7a:62:
d9:0d:2a:40:7c:26:bb:8e:f2:c7:e3:c1:ff:68:8d:
a9:be:38:8e:6f:01:a0:6f:95:37:c8:69:71:89:02:
9a:50:bb:48:f2:c0:54:f2:d1:66:19:83:89:ac:1f:
b0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:25:5A:DB:C6:A4:E1:8B:A0:D7:FB:D6:B7:A3:BC:02:6C:B0:84:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cd178929-debc-3ab9-a6f1-0f4379edb056.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.116.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:2c:e7:fd:f7:43:09:24:ea:5d:92:ca:9b:d9:47:51:df:a1:
13:19:c6:02:40:cb:56:9a:80:74:17:fe:37:50:6b:91:49:87:
7f:44:e2:af:54:50:3d:50:88:fc:cc:c4:b2:ee:56:d1:91:bc:
f2:eb:8a:76:c5:f1:81:bc:31:46:05:f0:94:0f:1c:ad:8e:5f:
40:9f:90:c1:14:83:07:20:64:03:53:ee:9a:d9:2f:7a:e8:aa:
b2:55:cd:8a:75:b6:eb:3e:89:01:70:99:06:2a:32:fd:81:70:
c4:83:be:c0:12:06:a3:7d:3d:c6:ec:b8:6f:ea:ec:19:ad:a1:
d0:2f:69:b8:39:5a:93:d5:ca:77:5a:41:b1:76:c8:d1:58:c8:
de:31:6b:81:40:dd:27:ba:c9:d7:5e:f1:cd:dc:a6:f5:25:75:
54:b7:f7:b6:5e:56:de:e2:b7:ef:9c:64:7e:ac:61:d1:96:39:
e8:de:37:21:60:26:50:00:a3:0a:c5:70:a8:06:1a:9c:65:f9:
1b:0e:6c:2d:85:2b:80:e8:88:f3:42:5c:48:76:e2:d8:82:e6:
3b:69:bc:01:e4:16:5a:0c:58:22:68:a3:36:96:7d:14:03:8a:
36:e3:67:83:10:d6:4b:f3:61:17:e5:2d:9c:c4:e2:38:57:ec:
d5:cb:6a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:13:25 2025 by rpki-client