Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dade7b8d-4f73-38e4-ac3e-5b1e6f0b7755.roa
File: dade7b8d-4f73-38e4-ac3e-5b1e6f0b7755.roa (raw, json)
Hash identifier: bvekKfKpRvFSFBcBYfpSl0SRFcQiIfZuNOJK9rJwGtM=
Subject key identifier: 51:FE:B2:16:C4:E3:3A:FB:1C:96:6A:D5:7C:8F:76:AB:71:4C:BB:A4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C963403ACC188100E08753100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dade7b8d-4f73-38e4-ac3e-5b1e6f0b7755.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.208.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:34:03:ac:c1:88:10:0e:08:75:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=53e6dded-04ad-4904-816e-5b73daa6e305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:91:df:54:5b:08:72:65:86:4f:4e:45:5c:
04:e4:de:01:0a:53:35:5a:c7:7a:60:95:dd:cd:a3:
01:8e:5e:53:91:7e:95:7b:56:5d:a8:56:4c:58:28:
eb:3e:7d:c0:22:d3:64:42:b9:d8:78:c1:c7:54:5c:
6a:b4:34:31:b6:b0:b2:69:f5:cd:f3:47:03:a8:f7:
19:19:db:b5:cf:86:3b:e6:96:48:aa:3f:fd:95:fb:
ae:27:8e:fa:4d:79:bb:3d:46:ae:0f:f9:85:c9:67:
5a:25:1b:07:45:fe:74:9e:5d:6c:36:7b:35:84:cd:
e1:f1:fb:bd:7d:06:dd:14:48:bd:1c:36:23:9c:d8:
e3:31:9d:44:f3:0c:9f:87:d6:a9:0c:8c:9e:2a:b4:
6f:96:08:0f:e1:8e:0f:48:05:d5:a1:09:61:58:5e:
ed:74:a0:3d:36:2a:f2:ba:05:1d:40:ca:83:4e:3e:
e6:39:25:cb:30:74:68:a8:90:57:f4:eb:b2:32:db:
12:10:29:6e:29:80:13:3e:a1:81:ff:49:89:17:89:
e6:db:13:be:8e:60:3e:70:e4:ae:f0:87:b5:0f:99:
8a:79:f7:4e:8f:22:31:32:54:41:5f:66:d4:f2:cf:
81:18:bf:25:be:58:b4:cd:e1:d3:f2:b8:84:4f:96:
78:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FE:B2:16:C4:E3:3A:FB:1C:96:6A:D5:7C:8F:76:AB:71:4C:BB:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dade7b8d-4f73-38e4-ac3e-5b1e6f0b7755.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.208.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:d7:b3:d2:55:a7:a1:ac:85:95:62:e3:d1:55:c0:87:13:57:
37:79:57:73:00:53:a0:ff:8b:c7:f0:08:f5:d3:98:6b:81:a5:
62:b8:05:c3:d0:6c:0c:1a:90:15:26:e9:72:0b:82:2a:02:9a:
61:6b:07:40:e2:60:21:bb:c8:fc:47:17:dd:57:93:21:e4:33:
6f:20:e6:fc:35:3e:3c:b5:97:f8:4f:56:f6:88:ec:92:0a:fe:
99:16:a0:d9:a5:ea:11:64:6d:3e:38:e2:ca:d7:4b:71:2d:20:
0d:72:51:e1:03:bc:5b:8a:fa:51:83:54:12:e7:2f:60:df:62:
be:e0:1f:85:f8:ed:d4:c5:87:35:f0:bc:d0:48:43:b1:51:d3:
4e:43:35:79:62:09:78:df:83:3c:8b:3a:26:c7:78:3a:4c:e5:
ff:a2:f0:5b:b0:92:2d:eb:de:ec:e6:90:f6:e9:d5:69:ee:61:
a9:a2:fe:56:6e:52:3f:eb:dc:e4:92:b4:fb:d7:1e:71:97:17:
fe:61:a9:a6:dd:c4:56:6d:15:62:5d:f7:f6:ec:b9:32:54:d9:
a6:68:b2:5b:37:7a:38:66:68:8d:ea:11:f4:f7:90:0c:0a:2b:
c4:bb:58:a0:6f:da:5f:c7:d2:33:50:88:3e:ad:9d:5b:a6:7e:
68:de:d3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:11:03 2025 by rpki-client