Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0f7e3b3-d439-3bdb-9f0d-5180c4e52a01.roa
File: b0f7e3b3-d439-3bdb-9f0d-5180c4e52a01.roa (raw, json)
Hash identifier: BvWsp8gbStUjfcBC58eWMsPHBrpKfNl9hP7kA8A5zDY=
Subject key identifier: 03:CC:0A:7D:00:2A:0D:78:72:A5:54:9E:C1:33:6A:19:52:4F:5B:34
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF6553422D8AD316D57683C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0f7e3b3-d439-3bdb-9f0d-5180c4e52a01.roa
Signing time: Fri 18 Nov 2022 12:00:00 +0000
ROA not before: Fri 18 Nov 2022 12:00:00 +0000
ROA not after: Sat 24 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f6:55:34:22:d8:ad:31:6d:57:68:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 18 12:00:00 2022 GMT
Not After : Dec 24 05:00:00 2022 GMT
Subject: CN=2ca8e29a-16ce-478e-aa6f-714224f957fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:b1:ff:c0:4d:0c:eb:d8:72:16:a6:59:09:
b6:27:ac:db:c4:3f:ba:39:4a:5b:90:81:5b:2a:4d:
93:6b:aa:df:6d:f7:de:5c:bb:e0:87:4d:ea:b5:80:
e9:55:ca:d8:70:ea:4a:19:8a:43:d3:ba:a8:7e:6d:
77:c1:ec:b6:83:45:07:7c:04:25:60:ab:0e:ad:94:
4a:bd:c5:21:f1:6a:2b:66:8f:02:b8:df:3a:1b:58:
89:1a:13:4b:c1:c9:b9:3e:4e:b6:4c:a2:24:6d:e4:
e8:aa:79:ed:28:31:ce:26:9a:b1:c0:45:28:d6:3e:
b0:3a:16:77:b4:21:9e:0c:92:ea:e7:df:68:cd:61:
d8:f3:2a:45:d7:5a:c2:42:ec:08:c8:52:0f:5f:05:
0a:77:f3:ae:f2:cf:f8:7e:56:48:fc:30:b3:fb:24:
b9:2b:76:7c:bd:58:62:77:ba:3c:b1:7b:79:1f:a9:
3c:64:d0:c0:55:f2:9f:91:3c:c1:95:d6:1d:3f:77:
38:1b:76:f4:a4:49:8e:c7:aa:11:f6:48:93:f3:10:
07:c4:85:4e:e5:6a:d9:d6:63:b6:33:d4:52:54:8c:
5d:10:82:17:4c:b9:ac:78:95:31:21:b8:13:19:fd:
f6:5c:49:39:58:fd:80:49:7c:79:62:a4:a1:2d:ab:
b3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CC:0A:7D:00:2A:0D:78:72:A5:54:9E:C1:33:6A:19:52:4F:5B:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0f7e3b3-d439-3bdb-9f0d-5180c4e52a01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:3d:f7:d7:fe:c6:c1:65:9f:3b:71:5e:c9:15:74:4d:85:70:
27:5d:27:d3:8e:0d:37:ae:f9:46:1e:7b:66:6e:ed:31:2b:9e:
4d:26:88:20:3d:ac:c9:fe:61:24:f4:5a:13:57:65:fb:94:b2:
53:c8:ee:e5:02:ad:d1:7e:d4:20:a2:99:10:e4:58:c2:33:db:
01:43:39:77:b5:70:88:80:ce:ab:65:64:3f:58:ad:b4:8b:d3:
ad:2e:a3:53:3e:cd:4b:2f:6e:88:02:54:87:00:b3:0e:04:f6:
73:28:69:c9:f0:15:0a:1a:e2:2a:57:c0:d2:ab:bb:ef:d9:9d:
f5:6e:2a:14:cc:2f:ef:cb:80:96:eb:b1:b2:20:5f:66:e6:b9:
59:f5:fa:3a:38:ae:d0:03:de:e8:f2:42:fe:ac:37:a6:49:2b:
a3:90:d6:34:d3:a2:e9:be:5c:a2:9a:e4:a4:88:cb:d7:45:1a:
ef:b7:99:6e:6a:63:5a:42:aa:2c:96:e3:a9:67:56:02:07:18:
9a:ea:f2:8a:d4:25:dc:9a:29:e4:f0:5e:9a:4d:82:d9:6e:97:
47:64:29:6c:7a:e5:29:5f:84:1c:f8:bf:5d:0b:b6:89:12:20:
27:9f:ba:94:e7:d0:a7:ae:d2:c1:3d:67:77:a6:86:bb:ce:32:
a3:43:88:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:03:45 2025 by rpki-client