Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cdbde67e-4ded-3c2b-86a3-63c9a5b69534.roa
File: cdbde67e-4ded-3c2b-86a3-63c9a5b69534.roa (raw, json)
Hash identifier: suQLVFQHSB6SwDEqEpqAipBi/4HtM5oPCKGjd3oz8fk=
Subject key identifier: 4C:11:C4:FD:46:B7:3E:17:4A:35:C9:D0:84:0F:A5:89:3C:0F:ED:02
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD2C710D86BC4AF84A9B31C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cdbde67e-4ded-3c2b-86a3-63c9a5b69534.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.148.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:2c:71:0d:86:bc:4a:f8:4a:9b:31:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=c94b0035-0bcc-4bd5-b466-2acc9eeb99bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bd:c8:de:86:e9:ef:82:27:ab:95:f4:cb:e2:
2d:aa:02:3e:c9:64:70:02:3b:4e:c7:1d:26:b1:a5:
4f:35:79:d9:55:91:38:d9:ce:62:4d:8a:42:2b:07:
b4:9d:06:28:59:94:19:54:78:98:ce:29:0d:ae:32:
4b:9c:fb:a9:d5:46:63:35:15:ff:ca:60:d8:df:92:
99:67:3b:2d:b8:71:7c:72:f7:f5:37:00:fa:43:d7:
c1:f3:4d:42:10:54:86:92:f8:7b:09:d6:6a:a6:5a:
58:bd:7b:3c:ae:f1:10:e8:c7:8b:66:30:0b:e7:f5:
0d:e2:cf:52:21:25:f9:48:54:6e:7b:be:87:ca:5c:
15:82:ee:d9:06:b0:48:06:a1:2c:cb:90:d9:2d:fb:
be:a3:59:7a:84:6d:f2:92:62:f8:80:bb:bf:ab:d8:
6c:38:bf:dc:3b:14:84:ca:14:70:85:18:b2:b9:0f:
54:34:be:88:b4:82:3f:08:7c:69:a8:f4:af:be:64:
b7:fc:75:cc:d4:53:40:ad:cb:b5:05:8b:3b:00:49:
1d:87:f9:e2:48:f8:99:44:7b:9d:ce:9f:f5:af:4b:
be:4c:d2:b4:79:14:4b:56:d5:49:41:27:b3:02:0f:
55:5a:a8:10:8f:19:e6:aa:5e:84:26:e2:f1:bd:b7:
43:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:11:C4:FD:46:B7:3E:17:4A:35:C9:D0:84:0F:A5:89:3C:0F:ED:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cdbde67e-4ded-3c2b-86a3-63c9a5b69534.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.148.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:72:23:0c:e7:19:46:ea:ed:3a:49:38:27:65:e5:f5:55:d8:
fe:18:28:fc:31:e3:bc:df:46:4b:63:d6:04:bd:2f:c1:bc:a6:
ee:f1:9f:c2:43:03:72:9e:64:e1:b2:45:1a:ae:c7:39:b1:7b:
c5:35:07:d2:96:ba:cb:34:05:fe:64:76:ce:6e:3c:aa:c4:cd:
4c:1b:0c:8a:93:86:0e:36:57:96:2d:62:6f:73:ac:8f:82:6f:
a3:6e:11:dd:3c:6c:c3:71:70:f7:d8:69:89:f8:49:1a:43:78:
61:fa:0c:4d:ed:9e:ef:3e:78:30:ee:da:1c:d1:81:3e:be:7e:
20:48:f5:41:bd:0a:02:3f:8e:ed:6a:d1:4c:d4:2a:6b:5a:bb:
d8:cb:65:2d:0f:29:12:87:d5:49:ac:f6:a3:06:3d:2a:00:bf:
3c:75:aa:ec:b8:16:bc:24:62:df:81:61:cb:2d:ef:4f:4c:ae:
d9:31:25:ff:4d:53:f0:de:73:92:95:88:55:90:45:56:7e:4e:
10:d0:8b:9c:3e:9a:06:b0:f3:c6:8a:f9:b6:92:b1:bb:05:5e:
86:73:73:30:09:37:ac:7a:a9:8b:f8:32:07:a3:cd:ec:8e:0a:
a4:9b:e3:05:03:ed:44:d1:5c:55:a8:99:26:dd:a2:81:ec:b0:
3d:49:13:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:00:26 2025 by rpki-client