Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/91d613ba-b799-31d4-b070-8a36723f2be8.roa
File: 91d613ba-b799-31d4-b070-8a36723f2be8.roa (raw, json)
Hash identifier: mgRLaPNHLUDh7h8Jq8K46a/buka/6qUuVYY2T0W/Kb0=
Subject key identifier: 0E:AB:6F:2C:52:BB:6B:E0:2B:26:C7:93:1C:18:5F:78:FC:D2:6B:E2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6FE582B14CCAB028F722D880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/91d613ba-b799-31d4-b070-8a36723f2be8.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6f:e5:82:b1:4c:ca:b0:28:f7:22:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=a0a77b49-5664-4f55-bf5d-5b9eaf25cb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d2:81:ad:03:fc:69:1d:ac:2b:7a:e4:aa:0b:
ca:3b:96:20:c9:2d:19:14:20:4a:48:1e:85:de:3e:
df:ef:27:79:e9:81:7b:bf:93:8b:52:25:07:a4:f6:
aa:37:a5:46:1b:39:5f:be:a2:57:5b:f9:6e:0a:05:
76:c9:2f:28:d7:1d:39:4c:dd:b6:79:9e:a6:fe:14:
27:5a:32:5d:0c:84:83:c6:94:de:36:94:c9:91:2e:
18:89:08:b9:55:74:99:df:6e:9f:a5:3c:a9:06:f7:
ba:42:2a:79:74:d4:55:c2:68:bd:d9:00:b8:9f:3a:
c4:17:51:c5:96:8f:48:c8:b7:23:87:e7:dd:4d:cc:
77:fc:14:8f:e0:a0:cb:50:96:ce:32:20:23:d5:50:
8e:73:dc:cf:06:e5:56:70:9b:0f:74:4a:6a:3a:cb:
fd:92:c2:75:cc:0c:04:d9:0f:3a:cb:be:d6:3d:0e:
f8:71:d5:0c:7a:c4:a9:7b:c5:ac:6e:ae:44:9d:4d:
7a:a4:8f:02:20:14:c2:ba:38:c0:0e:75:bf:1d:88:
10:a4:53:e6:16:82:5a:90:97:d8:e3:01:24:b8:32:
53:bb:f0:85:5b:5f:cc:58:22:5b:c6:43:33:86:dc:
1e:09:a1:d1:49:f0:22:1b:b6:4d:3e:82:fa:d4:35:
7b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AB:6F:2C:52:BB:6B:E0:2B:26:C7:93:1C:18:5F:78:FC:D2:6B:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/91d613ba-b799-31d4-b070-8a36723f2be8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:c5:f3:19:58:b9:bf:74:1a:ea:ef:df:ba:c3:96:26:fe:c8:
a8:bb:48:b1:60:e4:12:d0:9c:cd:75:86:00:c0:b9:7c:5a:b6:
2d:94:61:5b:7c:db:46:86:97:37:bc:5d:c7:f8:8c:10:a3:b0:
d1:3d:f5:d9:26:c2:8d:2d:87:32:86:f8:52:da:71:ac:fe:9b:
c6:e7:97:4f:70:71:72:40:77:7b:4c:59:8f:ec:c5:3e:71:ca:
c3:dd:b1:3a:7f:a1:a5:98:a9:a5:f6:76:df:b0:7b:b0:4a:92:
18:c3:50:76:9d:95:05:9e:89:a6:2a:0c:3f:77:e5:a0:27:f7:
1d:95:f3:9a:ad:89:61:a7:52:93:6c:15:a7:f8:f0:e0:76:1a:
d0:48:62:44:1a:6b:41:1b:77:05:a5:1d:57:c3:03:a7:83:64:
24:91:2f:f7:88:10:fa:1a:78:92:8d:d8:d2:a7:cf:3a:f6:b5:
35:90:f4:01:78:38:fe:75:41:e2:a2:b8:bf:df:53:21:e2:d1:
00:aa:80:f4:27:c2:47:1c:5a:68:b1:4b:56:00:87:26:32:78:
ff:8e:a4:c3:58:ca:54:65:81:b1:95:4c:15:01:e8:d1:dd:77:
5e:c6:cb:9a:56:1a:f2:62:70:74:9a:42:dd:ba:4b:37:69:04:
38:f5:93:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:16 2025 by rpki-client