Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db1f76ab-d68c-3f5f-a78b-405b79b1ebb5.roa
File: db1f76ab-d68c-3f5f-a78b-405b79b1ebb5.roa (raw, json)
Hash identifier: he0sXyzv6Po87F69jiPhgCOtZnBmr0qzAn+h+Oed8kg=
Subject key identifier: 2B:28:C6:2E:5D:16:C0:F3:68:D2:67:2C:24:8E:3E:D3:C8:E8:72:5B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0C599762DB5851DE052E4580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db1f76ab-d68c-3f5f-a78b-405b79b1ebb5.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0c:59:97:62:db:58:51:de:05:2e:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=2e361172-584e-4db2-8ec0-e872a54849e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:a4:1c:f6:0b:b3:d5:70:04:f6:6b:fe:65:
aa:7e:ae:39:14:b2:80:5c:b9:80:cf:23:6d:4a:c7:
59:86:d7:9d:4b:76:c0:e5:95:3f:7b:be:d5:cd:76:
b0:cd:fc:d5:dc:c6:fc:c8:83:19:34:24:79:13:c2:
b7:4d:bd:72:de:53:73:b6:ec:7b:10:f7:c4:1f:c3:
ec:1d:69:a1:1a:8b:1a:a1:21:30:de:c8:15:35:40:
7a:df:ef:64:13:6f:71:69:45:fe:e3:53:58:d2:c5:
18:38:3c:f1:28:b2:00:96:69:09:9b:5a:a4:0e:de:
cc:0c:08:14:88:ac:1c:b1:09:4e:90:dd:fe:c2:34:
ca:c0:e1:2b:1e:6d:a0:da:10:a8:94:bf:d4:b4:3e:
71:6b:0f:19:d1:75:9a:92:3d:8d:24:25:7b:94:e8:
bc:85:1f:8a:09:50:cf:b6:83:e2:57:cb:f7:56:78:
b5:3f:2a:ff:df:3f:3c:3b:97:14:7a:8b:56:83:a4:
9c:1d:f1:f1:88:e0:b3:35:0f:d8:ab:32:9d:0c:d6:
21:63:5c:7f:0d:0a:82:2a:96:1c:71:31:7d:d1:b6:
b9:8b:43:1e:ef:b4:18:47:20:5a:39:e9:3c:c3:e7:
e2:5e:9e:47:db:5d:66:24:67:58:b0:b3:45:47:06:
9c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:28:C6:2E:5D:16:C0:F3:68:D2:67:2C:24:8E:3E:D3:C8:E8:72:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db1f76ab-d68c-3f5f-a78b-405b79b1ebb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:de:29:35:bc:29:03:19:5d:6a:f3:e6:4d:d6:4a:43:f0:0e:
ee:7b:2a:c3:b4:d9:0c:99:70:47:2e:3b:f2:46:23:07:3a:56:
76:16:ed:07:5f:c2:3d:05:84:ba:1c:53:96:d8:2f:97:d0:a5:
28:3a:20:56:d0:bc:8b:cc:60:de:55:ba:38:c9:0f:dc:bf:3c:
e1:af:30:78:0e:ae:3f:78:08:19:86:9c:8b:73:2a:29:79:1f:
a6:cb:48:f7:92:9f:19:f5:3e:4e:35:0e:88:6e:71:15:81:ff:
a5:8a:56:12:c7:15:fc:cf:fe:eb:59:49:66:7e:65:84:65:74:
76:80:fa:9e:c0:eb:4a:c6:f9:fb:1f:ab:2d:f9:4a:8b:ca:be:
7f:8d:03:30:e4:01:34:75:b6:f8:6a:aa:96:06:a5:33:99:2d:
b7:5d:41:41:be:a6:a7:2b:8a:58:b7:de:8e:e0:a9:b5:8f:be:
62:8c:51:12:1e:cd:13:73:c2:fe:cf:8b:91:fb:c1:da:c9:87:
01:48:71:83:fa:40:e1:99:d6:be:1a:24:df:27:30:ff:05:f1:
77:97:0c:34:16:09:32:c5:46:9b:be:a0:09:10:8b:3f:a8:49:
5b:81:6c:50:5f:76:34:63:85:18:78:14:8a:00:f1:09:db:a9:
ff:6b:21:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:22:46 2025 by rpki-client