Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9633a949-c93f-36bd-8f4b-a8c57a10b341.roa
File: 9633a949-c93f-36bd-8f4b-a8c57a10b341.roa (raw, json)
Hash identifier: /RWlIzF/IrFp2712YIvcZqtXpu5aimZ4j60cqbXq6mI=
Subject key identifier: DB:81:F9:4A:BC:70:21:F1:66:00:83:B5:DB:FB:36:61:6F:2B:5A:58
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD2C8A7CAE8DE306A5506890
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9633a949-c93f-36bd-8f4b-a8c57a10b341.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:2c:8a:7c:ae:8d:e3:06:a5:50:68:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=2814359b-6325-4cc4-b095-639c0a1cb170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:df:96:b5:84:c1:7a:32:39:c4:41:7b:d4:8b:
26:37:9c:a1:48:35:55:cf:79:0a:aa:5c:7c:bc:1d:
a0:cf:4f:b0:e2:1c:2f:bc:2f:c4:77:9f:1c:0c:44:
bc:86:69:d0:92:8b:c8:f2:c7:f9:71:ae:f9:ea:3b:
9e:e4:37:60:b9:95:8d:45:c4:35:4e:3b:1f:6e:16:
1b:ff:8f:f3:b1:59:b6:46:72:ae:3c:7a:a7:43:94:
16:97:98:c1:e6:07:f4:0f:66:c1:e4:8f:c9:ab:9b:
f9:82:05:2e:db:24:e1:45:43:8a:09:43:57:14:6c:
67:05:d1:94:70:10:3b:c2:b1:c0:49:9a:e3:ed:70:
09:ef:3d:5a:11:9b:34:cc:5e:10:aa:cd:b4:9f:1c:
df:38:a8:3d:cf:32:14:d7:9d:5a:78:f8:02:e8:22:
8a:1c:21:bf:e5:be:34:9d:4e:0b:33:ec:b6:cd:03:
fd:cc:97:e3:28:c4:1c:56:98:78:69:96:70:d7:59:
8b:2e:d1:a5:a3:56:6e:d9:7a:13:d9:9e:cf:37:7b:
77:38:cc:40:f0:52:df:45:bf:fe:fc:21:10:ec:22:
9a:cf:7f:b6:a2:09:bb:c6:7d:4a:5c:84:15:b6:c1:
aa:43:1c:71:35:07:0f:80:6d:cf:75:87:c7:6c:3d:
89:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:81:F9:4A:BC:70:21:F1:66:00:83:B5:DB:FB:36:61:6F:2B:5A:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9633a949-c93f-36bd-8f4b-a8c57a10b341.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:ed:f6:27:c9:62:9d:55:1d:a9:d6:d7:73:62:21:e6:1c:c6:
5c:27:3a:2d:6b:6e:21:4d:5a:b2:4a:7f:1c:f0:79:db:44:ec:
a3:22:50:29:05:44:50:7e:65:36:d7:83:9e:f9:40:75:50:97:
01:ee:3a:9c:e2:97:85:0e:84:a5:d6:fa:84:73:ac:8f:5e:69:
4b:1e:51:9a:2a:e7:6b:1b:02:6a:fe:c2:b3:0d:40:32:6b:ab:
75:f7:64:f7:6a:ff:69:6a:bd:53:b0:bc:cc:86:78:89:4c:7c:
0e:f9:3d:57:48:84:f9:b0:1b:27:7c:67:6c:a2:16:8c:1e:d8:
1a:e1:55:bf:61:43:bc:03:e1:e1:8e:22:99:54:46:f9:1b:cc:
99:80:2e:09:0a:7a:a6:4b:c6:13:61:92:7e:59:2e:4c:78:ce:
e2:2a:12:07:51:3b:d0:9e:c6:ac:6c:2d:0c:3f:fc:99:02:b5:
ae:f7:23:b8:df:3e:ab:7c:19:8f:b8:3c:63:6f:e8:54:f6:20:
f0:7a:95:ce:69:7d:5d:69:f9:0f:8b:de:77:30:cf:5d:2b:5d:
fa:13:cd:71:7d:ab:36:b7:c6:9c:46:07:8f:87:59:32:43:8f:
46:46:b0:bd:b2:b0:08:33:97:27:34:6d:e3:04:e4:d9:30:b2:
ce:14:55:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:25:24 2025 by rpki-client