Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d19e64c1-3070-393b-ab4e-96c5176f4b41.roa
File: d19e64c1-3070-393b-ab4e-96c5176f4b41.roa (raw, json)
Hash identifier: uD4hefxSl8UM6E6xfIErwjjJIh0BlAf/48rKeN3lsv0=
Subject key identifier: FF:48:3D:92:5E:77:F9:37:A3:16:01:D0:E4:F9:8B:06:DB:AF:F9:28
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6EE30067FDB00074BF928D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d19e64c1-3070-393b-ab4e-96c5176f4b41.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.112.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6e:e3:00:67:fd:b0:00:74:bf:92:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=b889c3fc-83b6-4a14-9276-232c81270723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d3:56:a8:e9:46:af:98:85:6e:a1:e9:7a:ef:
05:33:9b:a1:03:18:4e:47:04:19:50:d0:80:fb:97:
34:aa:e2:bc:6a:c1:c5:51:62:af:4c:2c:af:5d:f6:
9f:fa:53:e7:6f:c4:98:74:53:8b:4a:bc:0b:e9:fb:
40:b9:90:30:75:de:a8:a4:53:1c:99:fd:6e:38:9c:
24:a2:f0:bf:57:d0:ea:a7:df:f2:97:de:51:80:38:
2d:5c:17:57:17:8d:4e:f1:66:64:09:02:fc:73:50:
9c:aa:b3:26:eb:a7:75:b6:60:ea:1b:1b:b1:6f:86:
3b:25:e6:61:90:20:7a:93:0d:c9:c4:ad:23:c3:d3:
05:00:39:1c:b0:dc:3b:24:d1:16:dc:b3:5e:5b:7c:
05:9d:d1:0d:72:83:c4:a0:2b:4a:cb:65:08:9d:9c:
da:e4:18:82:fd:62:00:97:c4:21:93:29:af:06:77:
07:3f:88:80:33:2d:3d:da:88:17:ed:7c:73:c2:b7:
98:9b:1b:12:0a:18:fc:6c:40:4a:29:bd:5e:18:29:
9d:45:32:f8:2c:5b:a7:84:70:b8:9b:3c:8f:72:eb:
1b:8b:c9:96:8e:43:79:c1:bb:57:88:64:6b:56:86:
fe:e0:f5:80:93:f3:dc:18:2f:9a:4d:f7:0c:d0:65:
35:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:48:3D:92:5E:77:F9:37:A3:16:01:D0:E4:F9:8B:06:DB:AF:F9:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d19e64c1-3070-393b-ab4e-96c5176f4b41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.112.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:2d:79:af:a6:32:82:0c:f3:70:f9:ff:6b:2c:14:7f:f1:2b:
e1:a8:04:69:38:40:08:35:04:f8:98:0e:63:a6:81:8a:42:a0:
d7:4f:05:a6:cc:c5:85:4e:3d:7f:22:c8:47:bd:33:5a:db:d2:
84:be:6e:0b:29:ee:a7:fc:fa:4b:b5:20:26:ad:ec:d0:10:07:
5a:e2:97:61:be:b3:5f:c1:9d:d7:f4:3c:c8:bf:92:76:ff:fe:
07:63:8d:5e:e6:b1:23:09:e3:94:9a:8e:00:b7:aa:a6:ae:84:
87:ce:d5:75:e4:b0:d2:76:ce:82:ef:f9:68:01:79:6f:62:e5:
6d:e0:c8:ca:2c:71:7d:bd:4d:cf:ad:ed:1c:b7:62:2a:2d:77:
b1:32:5a:f7:1e:66:a3:b3:53:92:d1:c8:9f:7f:df:c1:5e:6b:
41:ec:ed:20:96:be:fd:f3:68:5b:56:77:f9:cc:f9:99:dc:4d:
d3:e2:52:76:85:5c:2a:e0:c6:b8:78:19:84:06:5c:b8:de:a7:
70:77:d2:25:8c:b3:c9:6b:4e:96:ba:08:41:fc:64:8c:0e:db:
56:cf:23:a4:03:34:82:c9:c2:ff:6b:04:01:73:c5:cf:b3:bd:
76:0a:93:cf:fa:27:db:7f:fb:15:56:36:55:74:f1:48:4b:9f:
2f:fa:6f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:01:41 2025 by rpki-client