Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/18e0196e-6df2-32be-847d-6fc69175b205.roa
File: 18e0196e-6df2-32be-847d-6fc69175b205.roa (raw, json)
Hash identifier: zNmaBo79RWIwmCTcumRqdi0wlh7/1zNVf835Kpj6FnE=
Subject key identifier: E6:E4:13:DB:D2:3D:7B:5D:4C:33:6C:FA:F5:82:79:2C:25:D1:6A:15
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C971445C49F1EC7CA2004AD80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/18e0196e-6df2-32be-847d-6fc69175b205.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 156.7.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:97:14:45:c4:9f:1e:c7:ca:20:04:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=8d4cc404-b8b4-4f1a-8628-e0578a582252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f7:f9:d4:81:15:bc:c3:bf:f2:50:6f:04:af:
ac:a2:26:41:ed:41:b3:c9:05:ae:2d:d0:b3:92:3e:
0d:95:cd:8f:fe:3e:af:3f:28:f9:7c:a3:be:26:a8:
3f:5e:b5:e0:8c:8a:10:02:77:70:0d:be:63:4a:ac:
21:5a:81:53:cc:e2:d8:39:8d:8a:87:e0:9f:e8:21:
40:3f:54:08:67:d6:fe:f6:46:d8:b7:05:2d:18:93:
47:a7:e3:86:fb:ff:0a:7b:6f:50:bd:d3:41:2b:c1:
a3:2a:da:3a:5b:ed:c4:dd:b7:19:87:eb:6e:0d:63:
40:6f:c7:9f:60:f1:c2:a4:24:5e:4e:5f:39:fb:c2:
58:1a:cd:f9:b3:21:7d:5b:b5:87:7e:b0:be:2e:ce:
a4:8b:7b:22:24:64:71:38:63:f3:41:58:8a:7f:28:
c5:6c:9d:d9:76:08:b8:58:8f:5b:6d:81:66:87:e0:
1f:1c:bb:bf:aa:a2:1e:83:de:ca:b4:df:70:3f:65:
1d:c8:35:8c:a1:ed:23:89:f9:6e:91:8d:3a:93:c2:
66:76:79:38:29:4c:74:40:78:37:7b:d6:a1:c0:22:
46:98:ea:2a:06:53:66:07:a9:d1:55:80:06:d0:66:
88:2a:cf:c8:15:5f:ae:2e:63:3f:03:c4:fe:7a:06:
f0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E4:13:DB:D2:3D:7B:5D:4C:33:6C:FA:F5:82:79:2C:25:D1:6A:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/18e0196e-6df2-32be-847d-6fc69175b205.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
156.7.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:18:e8:56:84:af:99:bb:80:c1:b2:30:cb:87:5e:f8:23:f7:
74:b4:df:48:80:65:ab:45:be:83:98:91:e4:c6:f0:3b:af:a7:
46:77:ea:9b:31:6c:43:4d:38:12:99:8d:36:f9:12:42:bf:9d:
dc:93:34:f2:b3:b9:e4:9f:ee:8d:42:ec:2d:9f:66:04:42:fa:
80:34:6e:16:11:85:75:35:83:04:1e:bf:6a:5e:8b:b1:2b:e3:
03:d9:14:31:10:54:b1:60:7d:dc:4b:cb:92:3c:bc:b1:51:cb:
e4:9e:54:82:b4:bd:11:03:a6:40:75:5a:0c:ad:2c:ae:a6:b2:
3e:9f:19:35:b0:a8:d1:23:f4:b8:75:d7:dc:32:99:16:c8:b3:
ba:6a:cf:3b:83:0d:9c:a5:51:ee:00:53:79:ed:d3:dc:53:ba:
8a:ff:dc:9e:1b:43:c1:a8:c3:f1:86:98:0e:5f:46:68:d8:76:
f0:26:a5:f0:e9:46:99:1c:05:03:3d:fc:cc:cc:28:f8:f7:d4:
f9:40:5f:7e:0c:50:c3:36:f7:61:c9:cf:68:15:6f:d4:5b:fa:
15:65:64:0e:80:3f:54:0b:30:9c:de:68:9a:f6:e4:d3:5b:81:
f3:ea:c7:8e:65:87:df:62:20:75:dd:6b:ac:85:01:4c:e3:d6:
cb:2e:89:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:09:00 2025 by rpki-client