Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dd6f936c-a076-31e5-af00-4acf7edcebb8.roa
File: dd6f936c-a076-31e5-af00-4acf7edcebb8.roa (raw, json)
Hash identifier: 61Moivt6fK4WdlXpczJpiHanWAKmF3OZIMGMAoxLB3k=
Subject key identifier: 3D:CA:50:43:09:56:73:9A:1C:48:85:97:E9:E3:20:10:ED:BC:E4:96
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6F0FCB85F78F6206EAA23340
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dd6f936c-a076-31e5-af00-4acf7edcebb8.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.229.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:0f:cb:85:f7:8f:62:06:ea:a2:33:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=c6400b7d-1b82-4f74-a43e-a06345349b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:da:eb:40:9d:ac:5a:65:3a:9c:61:44:bd:6c:
ac:d1:f4:3b:f7:bd:2c:ca:05:20:37:a8:ad:96:28:
d7:51:d6:6a:25:ae:3a:bd:b9:65:22:ba:51:2a:2c:
60:7e:8d:2a:83:3f:bf:37:31:e7:c9:f4:33:86:af:
e8:b2:e3:4d:fe:8c:dd:f4:de:f6:54:9f:43:ce:4c:
d5:09:f2:97:1e:b8:66:30:49:95:10:56:03:11:49:
3f:42:af:25:a9:f8:1c:a6:97:78:a7:b2:9a:ff:63:
12:88:0b:7d:67:76:62:ef:15:ab:a3:ce:ad:bc:ab:
0c:8b:e8:42:df:65:95:42:40:d4:33:77:3b:d6:0e:
bb:28:f1:6d:31:f6:c7:ed:6f:7b:b3:7d:60:49:2a:
3c:33:c8:45:15:f8:54:c6:17:f7:27:66:77:15:68:
b6:74:d7:d2:c1:f2:6c:fb:29:e3:0e:dd:09:a5:00:
ea:83:7a:2d:30:26:74:e8:30:46:e8:1a:31:01:cc:
6e:a7:c8:fd:f8:5c:7f:6f:d1:11:93:a6:67:50:fd:
51:6c:43:ad:c4:ae:9c:28:fa:ce:57:df:ac:3f:a6:
2b:ae:f9:29:87:9e:f8:bc:86:59:45:72:e8:fb:c6:
5c:d0:f8:b7:58:18:ae:df:81:27:e9:b8:56:fc:ed:
fb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CA:50:43:09:56:73:9A:1C:48:85:97:E9:E3:20:10:ED:BC:E4:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dd6f936c-a076-31e5-af00-4acf7edcebb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.229.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:94:68:14:d6:39:d1:53:ab:d9:d3:f9:91:e4:06:7f:6d:10:
63:39:84:a7:83:ab:47:64:2d:b6:53:93:5d:5d:94:a2:9e:cd:
43:06:03:05:47:67:d3:1f:84:db:8e:a1:8a:7f:de:d0:f2:b5:
ac:6a:f7:c0:3d:39:db:c2:25:cd:38:e1:04:a6:db:94:6e:1a:
1c:0e:7d:f0:34:86:e5:85:cc:a5:0b:df:16:cf:e1:12:65:6d:
17:ca:2e:8f:13:80:74:12:87:fe:9d:56:cf:62:30:d6:36:26:
ed:08:92:92:bd:8b:80:91:07:50:b4:77:12:58:02:8a:39:d5:
bf:96:5d:17:63:99:d8:26:41:ce:b7:8e:ad:25:94:04:fb:6b:
64:fa:c6:f9:7f:b0:9e:66:08:4f:7c:ce:6f:fe:c0:e3:ca:81:
e8:00:ec:ae:ed:68:3f:0f:40:39:7f:47:a6:2f:47:56:bb:d9:
61:37:da:be:da:af:6e:42:a0:f7:db:a0:ab:ad:7a:df:e2:63:
85:7c:b5:2c:90:0b:6a:36:50:a1:80:78:39:85:54:85:fa:0d:
ab:25:ff:68:39:d6:ca:b1:2b:2c:f5:f1:05:2b:8b:61:be:93:
21:99:5e:91:09:88:9f:5a:93:2a:1e:1a:5c:05:cc:ab:4b:52:
48:bf:4f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 00:06:56 2025 by rpki-client