Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/15e0bf04-80f9-3051-afb9-dda55f75c413.roa
File: 15e0bf04-80f9-3051-afb9-dda55f75c413.roa (raw, json)
Hash identifier: w3oFbUftv2ntRwV7HflZX+GvbW9OFQikjt2umDQ4jec=
Subject key identifier: 0C:59:B0:EA:BC:AB:17:82:6F:BC:12:B4:39:8D:F7:13:0C:41:3A:8B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D32A14ACBF131785153761100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/15e0bf04-80f9-3051-afb9-dda55f75c413.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:a1:4a:cb:f1:31:78:51:53:76:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=51b80ab9-365c-4f1b-83b2-fecf10f09444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:ee:cb:32:20:3c:e7:01:ed:0c:ac:9c:83:
46:ac:d6:ac:65:d1:ab:97:11:1f:79:ba:ec:be:5c:
7d:90:7c:81:7c:11:d2:60:11:15:89:d0:af:57:53:
58:0b:96:eb:f3:34:51:f3:62:2b:79:a3:2b:ab:0d:
c4:d8:93:85:22:e7:26:5c:c6:d9:d3:a6:51:54:b6:
91:39:76:d6:35:88:7e:7c:49:c7:37:95:b9:ce:47:
f4:2c:d8:fc:45:08:60:dc:23:36:e3:02:af:8e:ca:
d7:09:dd:df:3d:0e:73:92:3c:4a:35:92:1e:db:90:
54:3d:fd:92:00:16:9d:e6:51:1f:ab:2d:0c:e3:f9:
48:8f:f3:97:16:1e:37:76:eb:0e:b9:56:67:fd:a0:
57:88:c6:3b:71:4f:52:a6:5e:3e:23:a0:dd:bc:dc:
83:40:5b:99:5f:1c:2e:7c:27:60:bd:0b:bd:e2:a8:
ba:85:e9:bd:46:94:64:6a:09:00:a1:03:ec:3f:48:
f3:d1:b0:63:0a:59:4f:17:3d:67:6d:9a:aa:09:38:
00:d2:60:c4:8e:cc:da:c8:c9:e2:0f:98:33:21:db:
5b:4b:18:d9:6a:97:c8:0c:6a:92:9f:0e:41:1a:ac:
73:b3:60:d2:5e:8f:b4:75:67:29:bc:da:3b:b2:9e:
12:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:59:B0:EA:BC:AB:17:82:6F:BC:12:B4:39:8D:F7:13:0C:41:3A:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/15e0bf04-80f9-3051-afb9-dda55f75c413.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:1c:0a:58:89:f0:38:6d:dc:a0:74:80:4f:69:c9:f8:e1:26:
f5:28:a4:07:81:71:c1:4d:54:58:d6:cd:f2:41:4b:ec:17:aa:
cb:35:83:32:78:13:be:8f:79:8e:e7:de:84:5b:65:e7:c1:63:
13:98:2a:9b:f9:91:45:93:99:45:33:97:d1:78:7c:bb:cf:53:
f8:82:ae:ac:40:a0:cc:fe:9d:50:c3:94:11:ef:62:f6:7a:0c:
f9:44:ad:1d:84:7c:c6:01:85:8e:7c:19:fe:ac:df:d7:6a:76:
3d:0e:34:e2:81:ba:29:4c:93:b2:11:f1:6c:ca:c7:a9:76:25:
0a:5b:ee:4c:8f:92:53:b6:3f:f2:d3:5b:23:ab:b8:33:d7:ed:
e5:ed:93:ee:66:a4:27:4f:71:6a:d9:84:81:7a:0b:b1:f2:15:
ee:61:97:3c:2f:f1:ff:fd:0b:1d:1a:b4:6d:46:4e:33:6b:47:
12:c6:48:63:66:96:33:f4:73:82:ae:6a:08:48:a9:08:a6:15:
5f:f2:f3:87:79:6d:0c:bd:72:c8:e4:d6:ab:ef:04:d5:ad:d9:
da:06:cc:72:0d:e3:c7:a4:35:e5:09:45:92:e9:71:dc:0b:49:
cb:aa:d9:76:c0:f3:ea:8b:05:64:5f:a4:ec:3f:b2:d9:12:59:
a7:5d:ff:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:26:47 2025 by rpki-client