Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/19a9163e-af26-3cf6-9e13-24d6b49202d5.roa
File: 19a9163e-af26-3cf6-9e13-24d6b49202d5.roa (raw, json)
Hash identifier: G4cFtmx5Nx10v4GPIki+rq1HKtWfuFWQBe8MAPmG3Fw=
Subject key identifier: 63:B0:07:C1:04:8A:C0:4C:94:1F:68:42:8B:F2:0E:6A:33:9D:75:EA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF63779FE6F849DE9582A7854
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/19a9163e-af26-3cf6-9e13-24d6b49202d5.roa
Signing time: Fri 18 Nov 2022 12:00:00 +0000
ROA not before: Fri 18 Nov 2022 12:00:00 +0000
ROA not after: Sat 24 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 156.7.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f6:37:79:fe:6f:84:9d:e9:58:2a:78:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 18 12:00:00 2022 GMT
Not After : Dec 24 05:00:00 2022 GMT
Subject: CN=3845f331-9e0b-42cb-a624-a6e7b2850a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:95:af:46:bf:74:c3:d8:d2:dc:39:d3:7d:
9f:5c:2e:0a:70:96:0f:db:96:4d:4a:c7:92:54:85:
46:2a:eb:e7:13:c7:f4:16:45:29:3c:8d:c7:b5:6e:
fd:42:a5:59:86:60:6d:9b:22:0d:6f:93:2f:23:d4:
af:e3:c1:20:86:2f:cd:97:b5:f9:b7:33:b4:df:26:
5f:e0:43:fa:e7:b5:eb:08:96:38:29:d8:87:5f:26:
08:a7:83:28:dc:bd:f7:be:fc:a3:f4:fa:4f:d6:28:
36:80:11:b2:cc:fc:3d:3f:fc:54:2d:8b:ea:dd:04:
86:ff:11:21:b7:6c:a5:c1:ae:2b:ae:d8:5f:52:61:
99:86:91:4e:21:07:75:5e:9d:25:6b:69:e6:75:c2:
c5:e8:36:fb:e9:80:6b:85:a0:85:7d:b8:c2:5a:f7:
7f:52:85:5e:28:32:8a:d8:c7:b3:99:fa:74:b6:64:
44:e2:d0:2b:85:46:ad:6e:9b:5c:31:d1:53:0c:84:
1a:52:35:c3:5b:16:97:c5:5d:ad:6e:ea:77:8e:1c:
e2:6a:a3:85:cb:3f:41:2e:86:9e:59:c0:53:b6:11:
06:77:54:7f:af:16:f0:ae:86:43:d2:55:95:bd:aa:
0c:f4:9a:aa:18:89:23:0e:c1:0c:11:37:4b:0b:65:
7d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B0:07:C1:04:8A:C0:4C:94:1F:68:42:8B:F2:0E:6A:33:9D:75:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/19a9163e-af26-3cf6-9e13-24d6b49202d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
156.7.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:11:5c:f9:40:99:c8:f6:be:fc:f4:8f:2a:93:8c:02:24:42:
d2:49:77:45:a6:96:3e:61:82:ce:94:ef:da:0b:75:b0:a9:50:
f0:40:76:2d:d0:dd:0a:82:c6:37:30:c9:cf:9b:bb:02:c0:1d:
a4:46:3d:b4:b3:15:26:eb:33:ae:e9:ef:87:ee:e3:38:78:56:
42:2a:87:8b:76:ef:8f:56:25:20:eb:f8:48:d8:c4:87:97:4e:
db:e4:6f:51:cd:fe:70:4b:18:a5:7e:14:e5:83:f4:52:37:93:
32:89:12:3d:0c:c3:91:a3:97:ee:ad:38:1e:b6:75:7d:b8:a2:
9e:c6:af:91:1b:e5:3d:b5:c5:a5:37:ed:ae:85:fd:4a:63:a7:
0b:5c:d9:b2:83:67:fb:cf:f9:a7:20:ba:34:c2:9e:a4:96:36:
57:e8:9b:d9:1b:2b:af:43:23:8c:ea:fc:5f:05:fc:fa:98:a5:
4c:e2:36:9d:9c:94:c8:cf:ec:b8:a0:a7:60:cb:e2:d1:88:a1:
1d:d0:8f:c0:f9:4b:29:49:dc:0f:19:66:f1:8a:af:49:c7:d5:
1a:ce:9c:af:cf:a4:ae:68:33:11:79:67:29:b8:48:e9:d9:5c:
4e:4b:38:0a:33:a8:cb:52:17:65:ab:2d:98:bb:ab:28:5b:b7:
1b:9d:83:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:28:17 2025 by rpki-client