Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dabccf04-a344-34c9-9784-5613376a09db.roa
File: dabccf04-a344-34c9-9784-5613376a09db.roa (raw, json)
Hash identifier: wdYDj5RTZjVECrtvxoznn2GKck7gJgS/NMBzlcXxIFw=
Subject key identifier: 42:72:F2:F7:52:9B:4C:C5:08:DA:A7:B7:6C:0B:BA:72:83:CE:31:4F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6EE32AFAEABC58A5277BFD00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dabccf04-a344-34c9-9784-5613376a09db.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.114.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6e:e3:2a:fa:ea:bc:58:a5:27:7b:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=ea02713e-f3f8-4db5-8bb1-cb6f052a431a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:75:76:dc:5c:0c:89:83:75:72:47:be:04:19:
95:c2:53:20:9d:c0:14:70:88:7c:6a:34:5e:89:bc:
1b:3e:7e:32:5e:e4:c0:ff:68:a3:4f:5f:ad:c4:1c:
d1:08:d5:fb:0d:fd:4b:98:14:fb:d1:85:03:a4:3c:
a7:00:4c:f8:d7:d4:7e:a8:1f:c4:eb:6a:eb:76:13:
6a:89:80:50:ca:76:5e:71:9a:0c:ac:56:a6:1c:e6:
39:c9:9b:4f:9d:0a:69:7f:85:7d:68:7c:74:ca:50:
d2:d2:18:1d:5f:f3:65:5e:dd:11:f8:f5:18:73:59:
4e:0c:00:b2:f3:69:a4:2e:22:48:a6:6f:0f:c1:5a:
a7:15:c6:49:ef:31:6d:19:d9:87:0c:5a:be:b1:f4:
fc:b1:f9:71:2d:0e:30:51:a2:29:02:c1:9f:41:1a:
04:ef:c2:ed:21:fb:5e:bd:0a:7c:5c:e1:89:8e:81:
98:4d:0f:00:a6:04:d2:b6:d5:8f:77:f6:f4:45:61:
ad:54:d9:24:6a:35:c8:ba:19:c5:ae:d2:4e:a2:17:
f2:04:77:42:71:3f:c8:f0:d7:ec:ea:10:84:84:d2:
a1:28:16:18:a1:78:b0:e6:ff:c6:2b:7a:05:e3:16:
24:88:49:3d:aa:6f:ad:22:3c:75:b6:c0:54:55:b3:
dc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:72:F2:F7:52:9B:4C:C5:08:DA:A7:B7:6C:0B:BA:72:83:CE:31:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dabccf04-a344-34c9-9784-5613376a09db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.114.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:99:99:e2:4c:40:9d:02:60:34:97:c4:c3:4c:08:00:65:07:
b7:90:0c:4a:2b:34:11:53:b2:ae:c6:c1:c5:f4:b0:a0:11:cf:
8e:99:a0:03:96:88:21:0d:8c:8c:62:a6:a5:cb:53:64:83:73:
36:31:43:56:57:e3:0d:74:c4:3e:c5:fc:fb:41:c3:54:df:d3:
26:9e:4e:6e:cb:db:41:19:07:1b:9a:aa:6a:b7:d3:9a:33:8c:
ba:d8:0d:bd:4b:c0:e8:ef:be:92:8c:9a:bf:c9:75:17:81:76:
00:a6:af:46:e5:c4:25:aa:23:81:76:fe:15:99:59:f5:40:b4:
a3:a3:71:37:e6:14:20:1b:e7:da:95:2c:b1:4f:7a:3c:81:8c:
de:ed:f1:88:3b:8c:96:54:e6:dc:17:32:35:b0:8a:b2:32:4c:
15:40:3c:3c:10:e9:42:2c:d6:22:7a:8c:5d:6c:78:70:f8:62:
80:82:cf:08:d3:51:8a:73:74:79:12:d9:35:a1:57:17:74:43:
d1:65:e9:42:7c:fe:3c:f4:e9:f5:33:a9:ed:f3:16:73:9c:f3:
e3:df:42:92:40:de:f7:7a:ca:a4:e3:d9:b5:89:27:ba:37:d7:
b8:e1:21:5b:0c:2e:55:73:b0:8b:7d:b9:c2:cb:86:97:bd:6f:
c8:8d:28:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:10:57 2025 by rpki-client