Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dcba696e-be42-3959-9d89-94d75a05a31d.roa
File: dcba696e-be42-3959-9d89-94d75a05a31d.roa (raw, json)
Hash identifier: 5TlmthcZgBC9sK+G8xqv1z5kJQ67pCXWnCURHymPTgo=
Subject key identifier: DE:A9:30:23:95:64:50:C1:CE:DD:70:03:2D:20:E5:EF:85:83:B4:8E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF3134B8BFC74B6DE27FE5800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dcba696e-be42-3959-9d89-94d75a05a31d.roa
Signing time: Thu 17 Nov 2022 12:00:00 +0000
ROA not before: Thu 17 Nov 2022 12:00:00 +0000
ROA not after: Fri 23 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.112.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f3:13:4b:8b:fc:74:b6:de:27:fe:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 17 12:00:00 2022 GMT
Not After : Dec 23 05:00:00 2022 GMT
Subject: CN=146f5212-670f-4213-a5d2-bf3b43027ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dd:e9:35:ea:76:ba:1d:1a:7e:3b:d4:7c:de:
a3:79:56:a2:bb:f6:4a:d5:c6:19:04:29:fc:3b:c5:
c6:73:fe:60:c6:11:ad:09:8f:20:22:b5:e6:85:c2:
24:f1:70:c1:9e:b6:15:34:46:f1:3c:e6:49:56:35:
06:bf:94:00:bc:00:b5:8f:87:f3:1a:52:71:8e:f0:
b2:ff:d1:61:56:f7:cb:77:51:54:be:1d:c8:8f:2b:
ec:69:1a:07:54:29:6e:aa:19:7c:86:69:52:ed:6c:
2e:ef:61:b0:bc:ea:1e:4f:41:2f:c6:15:b7:90:60:
1e:55:a5:03:53:62:d3:25:5c:74:fd:65:3d:bb:c0:
f2:2d:6f:6a:43:1e:bc:dc:55:5f:6f:0d:b7:39:4d:
2f:3b:4f:22:74:e9:b7:14:ce:80:a4:9d:9f:9e:37:
68:09:a6:cd:5c:b6:eb:03:20:fd:f1:14:ec:2a:c4:
46:a5:f2:af:29:08:a9:6c:f5:09:ee:66:65:61:80:
a6:97:9c:ec:99:9e:c3:70:f4:37:b2:81:f4:e8:d0:
c2:e9:06:cc:3e:a6:1c:4b:88:c3:ec:09:1d:4f:5f:
bb:5d:fc:e1:a8:ed:e0:16:c8:a2:9f:6b:46:52:93:
30:44:c5:af:01:52:e5:50:44:47:fd:b9:4e:b5:50:
e5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A9:30:23:95:64:50:C1:CE:DD:70:03:2D:20:E5:EF:85:83:B4:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dcba696e-be42-3959-9d89-94d75a05a31d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.112.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:08:89:cd:3f:30:f5:e2:f9:d3:6f:2c:bb:a8:19:68:87:32:
63:1f:99:e8:46:81:cc:81:86:03:8b:a2:30:db:7b:55:0b:ba:
b7:2c:9b:7f:39:80:96:57:67:a4:81:64:33:8f:14:44:99:fa:
a7:70:ea:cc:74:b0:fb:38:3c:73:1e:eb:5f:23:5d:e0:ab:16:
a0:ca:d0:3c:ab:08:0c:85:b3:93:d6:44:5c:1b:53:61:0c:8c:
4b:9c:e2:61:51:4e:eb:43:f8:b3:89:7b:4e:22:b4:d1:13:20:
eb:d4:db:60:d0:0f:da:24:c6:67:d2:88:cb:9d:1e:63:a7:b8:
a8:e8:ab:b4:fc:6c:d6:0e:41:87:f7:b6:29:99:01:79:c2:00:
dc:6f:39:09:02:16:61:7d:db:91:0b:69:68:12:bd:d7:fb:1a:
41:ef:47:9a:66:7c:0a:e4:94:d0:b9:67:2b:2d:95:17:1e:8c:
a2:9e:da:f4:5e:1a:54:fc:0b:92:01:5a:cf:ff:b7:53:16:2a:
d0:6a:8c:84:4c:55:68:56:97:01:5d:74:a8:a3:52:18:52:75:
8c:b1:27:83:da:8f:cf:37:ef:ba:81:ab:81:ce:9f:8f:23:a4:
bf:49:c9:f9:66:e8:b3:96:11:5c:74:d3:5e:f4:66:b5:af:2a:
5b:d1:b7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:35:52 2025 by rpki-client