Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49c653a3-545c-366b-b904-d8935fb47ec5.roa
File: 49c653a3-545c-366b-b904-d8935fb47ec5.roa (raw, json)
Hash identifier: A9jBODG0RkkJ/F53c4hN+MhRfdrFNNOqxxYMdBbaCmE=
Subject key identifier: 9A:CA:9B:F8:0F:66:8E:98:79:AA:AD:F0:4C:EC:A8:1A:4B:FC:C7:8D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0C598CB249F93150D89F4AE0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49c653a3-545c-366b-b904-d8935fb47ec5.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0c:59:8c:b2:49:f9:31:50:d8:9f:4a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=c0942c23-4cc7-4fc4-ae2a-d4ef82021881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:81:44:30:90:d0:ce:88:86:eb:de:4a:86:29:
19:ae:18:28:67:f7:b8:b0:2d:4e:55:64:94:74:a2:
40:8b:73:9c:0b:b3:ae:84:7a:ad:a5:55:33:6d:8c:
00:7c:fb:bc:b3:d1:a0:8b:82:21:66:c9:7f:3c:0b:
7c:9a:57:1b:49:f9:f6:88:bb:92:74:22:44:34:1c:
bf:c3:97:d8:57:79:79:ca:04:82:2e:e6:a7:e1:01:
bf:a3:ba:8d:04:44:80:3d:2c:e5:eb:83:63:5f:9a:
63:cd:67:f2:83:77:c8:8c:da:0f:e9:ae:bc:f9:04:
dc:af:b3:95:8c:c6:36:6a:0e:b9:ad:0a:51:46:81:
4f:16:ad:c7:3c:fd:17:ea:1a:5d:6c:fd:ae:15:79:
52:e9:e5:f3:2b:e5:90:f9:6e:7d:74:29:93:c8:e0:
e0:6e:29:64:14:5f:48:6e:3f:49:be:e9:01:ed:da:
ce:1e:a0:db:95:ba:06:d7:09:49:09:af:e9:df:c1:
66:00:76:89:e1:98:9a:63:c0:1f:a1:58:e6:e2:21:
90:73:24:22:2f:a0:3f:c2:59:e4:9e:28:c5:33:e5:
08:59:b3:87:b7:e7:fe:2b:42:31:1c:dd:e9:2c:20:
b5:38:69:5a:eb:fb:28:0e:ed:78:d7:be:c3:38:d3:
df:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CA:9B:F8:0F:66:8E:98:79:AA:AD:F0:4C:EC:A8:1A:4B:FC:C7:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49c653a3-545c-366b-b904-d8935fb47ec5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:23:03:31:b6:95:66:5f:eb:09:97:f7:c5:e5:87:e8:66:89:
a1:9c:b1:36:02:81:f0:a4:6e:45:b4:a9:0c:be:da:d8:ca:ef:
2a:8e:62:9d:a3:cd:6a:ea:02:c8:38:b3:7a:14:e5:f1:a2:f7:
6c:4d:33:e3:62:80:06:14:56:ec:95:75:4c:1c:f5:fd:6b:d6:
b8:45:98:bb:a8:37:f5:04:86:cc:bf:fb:db:08:30:67:be:a8:
fd:fd:17:a8:27:8d:2c:65:04:d1:1e:19:b2:78:83:35:ec:29:
a7:ee:95:53:c5:28:47:79:3d:b9:4d:d5:09:ed:a5:6c:08:94:
08:46:f5:9d:5e:3b:8c:c4:ec:1a:2f:c3:6b:80:45:57:91:c8:
1b:b3:4a:df:a5:e4:a5:b3:21:ba:8a:60:73:22:29:47:02:cd:
66:15:72:6f:bc:95:d5:3b:16:f5:bc:16:07:67:bf:0c:07:f0:
eb:e7:50:34:f3:14:51:81:80:f6:10:3c:58:d2:fd:e1:96:a8:
19:6c:73:55:8c:d8:dc:49:ab:89:e2:d3:3d:1a:b8:e4:b7:b4:
be:42:9c:b1:4c:26:00:2c:f9:b4:51:33:f1:7b:11:47:11:d1:
64:c6:48:24:0d:b1:fb:34:16:32:be:f9:66:9a:73:89:3b:26:
de:38:34:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:19:50 2025 by rpki-client