Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b9e01a0-1100-3a0d-bfed-cd068f260bac.roa
File: 0b9e01a0-1100-3a0d-bfed-cd068f260bac.roa (raw, json)
Hash identifier: 756ytq/6gd+YalAfLHF1BWnyassHRrvmD9/sFhO2UT8=
Subject key identifier: C8:51:B6:45:BC:20:80:4F:B4:A2:EE:F1:A4:6B:CB:BE:E5:3E:B5:89
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA82A0E3FEBE6A5D3A32F5300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b9e01a0-1100-3a0d-bfed-cd068f260bac.roa
Signing time: Fri 21 Oct 2022 12:00:00 +0000
ROA not before: Fri 21 Oct 2022 12:00:00 +0000
ROA not after: Sat 26 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a8:2a:0e:3f:eb:e6:a5:d3:a3:2f:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 12:00:00 2022 GMT
Not After : Nov 26 05:00:00 2022 GMT
Subject: CN=a6025b1b-2829-48c4-82dd-44c1453f3a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:90:3f:b6:66:44:92:23:37:85:76:24:6d:
84:18:19:2a:69:e2:17:ab:83:23:fd:b3:51:35:dc:
b9:b0:c6:0d:1e:77:b3:84:35:e0:84:64:6d:40:9b:
48:26:f1:94:89:86:03:75:3a:1e:78:ea:d7:40:73:
ee:2b:76:9d:5e:12:10:6d:81:9b:db:1d:ce:d3:5b:
41:d3:27:d9:f1:0e:31:3b:83:1d:2d:bb:27:7b:72:
35:c7:cb:23:f6:90:74:00:f7:c4:07:cd:81:b6:5b:
56:4a:94:56:17:5c:94:2b:50:86:00:75:76:0d:15:
21:4c:91:99:7b:68:44:24:a5:8e:9b:34:de:9c:83:
2a:ca:87:22:48:ae:52:b7:05:37:c5:e4:8a:9a:f8:
39:3a:0f:50:a4:60:56:62:17:44:4f:14:de:bb:c4:
ee:6d:58:f5:f5:30:81:ec:65:5b:c0:70:39:d1:c4:
93:4d:7a:21:2e:0c:c7:9e:d9:94:44:77:d0:17:f1:
d2:53:df:47:f8:61:d3:44:70:7f:fe:d0:a9:4d:5c:
68:7f:a3:7a:58:70:6a:81:88:f9:fb:f7:45:c7:7e:
72:0f:3a:bd:d8:0d:06:f0:e1:80:c1:e2:2c:25:1e:
d9:c8:1a:00:6e:46:70:1c:1e:87:69:7f:c3:13:4a:
d9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:51:B6:45:BC:20:80:4F:B4:A2:EE:F1:A4:6B:CB:BE:E5:3E:B5:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b9e01a0-1100-3a0d-bfed-cd068f260bac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:4e:e4:a0:f4:4a:89:89:bd:bb:6b:32:f2:f3:12:2c:86:63:
dd:7d:4e:06:83:cb:63:14:c2:98:05:8e:e3:fa:f8:b7:4e:a5:
83:8a:b7:a5:5d:94:7a:d9:16:cd:0c:e1:59:97:0a:d7:aa:4d:
8f:ec:7b:77:5b:9d:dd:e6:d7:7a:b6:b4:29:bf:fd:ab:12:f1:
e1:9e:b0:e2:fb:e5:0a:4b:99:84:44:ca:2f:b5:26:f7:08:56:
b4:5c:86:17:b1:83:c4:8a:60:80:0f:99:ad:d8:1a:29:44:ae:
39:0c:ef:ab:6b:ec:5a:09:ec:c8:6c:d5:d9:26:63:ca:c0:a6:
85:cf:3f:6d:e1:0c:51:85:89:09:c2:6d:a6:30:06:e9:cb:fe:
23:fa:1e:2a:c8:65:9e:af:f2:51:2b:b3:c5:18:de:19:95:4c:
da:98:76:d2:f8:4a:09:b1:13:d4:90:62:f4:13:37:e0:5b:2d:
7a:22:42:cf:ce:88:bc:aa:b5:9f:41:d0:26:4a:2a:08:22:6a:
be:c5:20:2e:d0:5e:bf:c3:2b:b6:9b:4a:a4:3d:95:e7:15:ff:
f5:31:43:69:19:a7:42:2a:b4:e8:33:76:8d:91:8b:22:b2:57:
b8:3d:69:c8:12:7f:dc:22:2f:60:16:95:5c:6f:0f:c3:10:08:
21:09:82:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:02:21 2025 by rpki-client