Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e6e6b279-71eb-314b-9bc8-5a771f93c549.roa
File: e6e6b279-71eb-314b-9bc8-5a771f93c549.roa (raw, json)
Hash identifier: QVJcX9cdBF3XS3XhNIg+RxQhDsQavBh8jydCa7Igg5g=
Subject key identifier: CC:17:92:D1:9C:00:87:92:02:D2:2A:AB:2E:E9:15:6A:5B:7F:3B:CA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F81144A47F84E601EDD183F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e6e6b279-71eb-314b-9bc8-5a771f93c549.roa
Signing time: Fri 07 Oct 2022 12:00:00 +0000
ROA not before: Fri 07 Oct 2022 12:00:00 +0000
ROA not after: Sat 12 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:81:14:4a:47:f8:4e:60:1e:dd:18:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 7 12:00:00 2022 GMT
Not After : Nov 12 05:00:00 2022 GMT
Subject: CN=dae33f14-08c8-4513-8c59-f431e25c4c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1a:6a:c0:3a:4b:f7:d6:10:86:27:cd:c6:3e:
14:ba:99:c2:37:ae:ae:92:0d:7b:03:e3:46:95:50:
59:92:ec:81:d6:f6:ba:02:69:0d:6c:bb:0c:58:70:
2e:d6:12:ba:a1:9f:16:bc:4a:35:17:d6:ac:9e:f4:
68:89:e8:e1:7e:2d:9b:a2:1f:b0:bb:a7:55:c1:62:
09:35:8c:33:e0:45:2e:08:02:f8:95:6e:86:ed:f1:
32:6d:a4:d7:26:43:c0:65:1b:d8:74:26:6c:b9:7b:
3a:1b:c0:f2:21:60:8f:22:5d:26:11:6a:6e:e8:32:
60:ab:8f:f9:d0:8a:85:b4:96:72:9f:96:79:79:62:
c7:cc:ce:74:6c:a3:09:ad:e8:ff:f8:67:d1:80:40:
2f:86:56:cb:3f:00:a1:27:e0:bb:5d:e7:a1:9c:79:
23:84:82:f5:cd:a6:f7:7a:d8:29:7d:a3:95:49:cb:
47:3c:ab:7d:f6:40:19:3b:e8:b3:76:76:4c:f8:35:
7e:c9:5a:70:04:70:8b:0c:fe:85:1c:1d:4a:94:13:
90:ca:c8:69:5b:a4:dc:78:72:40:86:33:53:eb:be:
45:4b:ac:77:04:50:1b:16:b4:5a:0a:68:61:5f:b4:
2c:79:00:7c:67:35:a9:1e:c0:19:ca:03:c4:2b:4d:
a8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:17:92:D1:9C:00:87:92:02:D2:2A:AB:2E:E9:15:6A:5B:7F:3B:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e6e6b279-71eb-314b-9bc8-5a771f93c549.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:1e:aa:92:71:e0:ff:6b:21:66:cb:27:8c:c9:6d:2d:de:c6:
77:91:33:58:81:1f:a2:d4:6b:6f:6d:61:0e:f3:56:83:c1:ff:
26:52:1f:2d:f6:06:96:b2:21:1c:d0:03:5e:6e:cd:82:4f:c2:
c0:35:5c:d4:95:21:ab:7e:83:32:d3:a5:63:ff:fe:7f:d3:ac:
ad:f6:59:92:85:67:53:d4:54:56:b9:b3:13:15:f7:9a:24:a1:
ba:f3:37:81:4e:a5:ec:68:c3:59:62:36:e2:89:2e:fb:20:34:
fd:a8:cf:fa:4a:78:78:42:95:d8:c1:6e:9f:50:55:b3:cf:8c:
52:62:fb:20:14:e8:68:0f:88:06:ac:2b:ed:c5:ba:b6:0d:a9:
63:d5:41:a6:53:99:8e:0c:60:de:b5:e2:82:a7:a4:66:e2:95:
ac:61:7c:f5:06:9f:f8:50:d3:52:51:d9:18:c7:dd:3b:c5:32:
bd:20:f8:d2:f1:dc:f1:96:73:32:19:1c:6a:01:f8:1a:0f:34:
25:17:e6:0b:7f:22:45:88:62:0d:53:87:c3:e8:fa:75:3a:48:
d2:3d:20:c6:6d:7d:da:e6:f7:2b:ae:de:ec:ce:d7:03:9d:13:
61:e1:99:d3:5d:a9:da:94:ba:9b:8a:39:87:a7:e9:3a:78:9f:
42:ed:99:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:41:10 2025 by rpki-client