Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/880c640d-ac9d-33af-93ca-94291e8387ec.roa
File: 880c640d-ac9d-33af-93ca-94291e8387ec.roa (raw, json)
Hash identifier: tngnGWUKLyYbI3UibsoCb+piaUN5mxpfWE9JfhUavco=
Subject key identifier: 04:55:15:F0:4E:5D:88:2A:5B:16:8F:C3:FB:66:89:DD:4B:3D:D0:0A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D32837772652724433CAC6280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/880c640d-ac9d-33af-93ca-94291e8387ec.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:83:77:72:65:27:24:43:3c:ac:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=27c213ec-8d13-4916-8367-654a6e9f1f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:17:0e:e0:ce:86:48:ec:87:90:65:ba:3e:
27:cd:7b:c2:0d:ff:a9:fc:86:73:07:ca:c8:59:01:
62:ad:3d:7f:b4:65:15:58:ca:6f:76:75:c1:24:bf:
46:d2:ff:e9:07:7e:91:fd:b3:03:98:45:b1:16:8c:
d4:99:f1:1e:08:b6:8e:9a:78:25:5b:d7:1c:d1:83:
17:c8:4b:93:6a:47:b5:fc:43:a0:f8:a6:78:8b:97:
11:73:fe:02:ca:1a:58:75:aa:9a:cf:3d:fa:6b:3d:
86:5c:55:72:a0:c7:67:d1:eb:af:e9:37:75:88:b6:
79:d7:3e:0b:cc:45:2e:87:ae:0b:18:9e:18:35:45:
ef:42:f5:5b:82:d4:22:84:ce:51:ba:50:50:db:76:
25:cf:ea:77:1d:ff:46:f6:2c:54:a8:ee:c7:5d:a0:
ac:92:92:d2:e9:0b:56:fa:2d:5d:1f:69:4a:f5:47:
8d:51:63:32:a9:bd:78:60:c3:7d:b9:53:fc:13:75:
ae:7f:13:23:83:d4:e9:26:2d:57:2e:e0:f1:f6:7d:
38:8d:75:d6:c5:2a:30:e6:7b:28:9d:5d:d2:2b:29:
1e:10:0f:6f:02:a9:6c:c3:19:b2:3f:7b:20:3b:5c:
90:22:ed:63:95:db:3f:fe:9e:4e:a9:85:69:6f:89:
b4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:55:15:F0:4E:5D:88:2A:5B:16:8F:C3:FB:66:89:DD:4B:3D:D0:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/880c640d-ac9d-33af-93ca-94291e8387ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:f1:52:67:22:72:c7:9f:16:bb:da:7a:ca:93:cf:ab:f9:09:
6f:b7:14:5c:2a:8a:50:0e:0c:c2:bf:fb:e1:72:cb:e1:2b:e0:
1b:48:c4:a0:3f:d1:4f:c0:7d:3c:b7:f2:3b:33:8c:53:bb:1f:
ee:32:74:e7:27:eb:bf:cc:37:d0:23:b7:48:3c:57:a9:4f:ed:
eb:4a:53:5a:dc:d5:1b:8d:93:72:85:a5:f8:20:90:13:39:9a:
0b:00:53:c0:89:a3:12:72:7e:f2:28:d5:3d:c7:f2:8e:49:b4:
89:c2:bf:0a:27:e8:c2:d9:5b:76:22:37:b3:f4:40:b8:3d:5b:
5f:99:b8:6b:03:f5:ff:03:e2:d4:ac:a8:cd:9a:78:96:72:24:
7f:55:57:0e:2a:92:51:60:10:55:4c:e2:4b:d8:39:dc:60:2c:
84:0a:c1:2e:8b:6c:e4:19:6f:83:c2:cd:08:10:1a:7d:af:70:
f5:14:f8:5c:61:36:c3:b8:12:5a:7b:ee:30:79:9d:97:cf:1c:
7d:ec:cf:3a:a9:cc:2d:22:ef:59:5e:95:d8:d3:8d:7b:cd:69:
9c:d8:d7:f2:32:61:8f:8a:66:f5:73:53:f2:bf:ab:14:cb:15:
85:3b:cb:f0:d8:fb:a1:5f:e9:1c:f9:0f:8d:66:70:df:29:15:
38:5d:b5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:27:36 2025 by rpki-client