Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3cea0688-5dd8-35af-98f9-19163e944a8f.roa
File: 3cea0688-5dd8-35af-98f9-19163e944a8f.roa (raw, json)
Hash identifier: lJ/yAfWw5d8xpzDT2wanJNy2OSM4BtjrzEjLpkZRvi8=
Subject key identifier: 56:DE:3D:B7:65:03:DA:02:2B:53:3D:00:F8:9D:57:20:C6:2C:33:FD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840436CFFC11DFC2B4644388380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3cea0688-5dd8-35af-98f9-19163e944a8f.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:43:6c:ff:c1:1d:fc:2b:46:44:38:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=e826bcb0-477b-489e-99dc-3671d8bbb09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:89:9e:7b:bf:c6:2b:2c:40:a1:39:82:dd:59:
0c:b3:6a:96:3d:af:cc:5c:a7:d5:b2:44:40:47:de:
a9:c6:50:1c:3b:91:b4:18:0f:9b:5d:63:64:e5:55:
5d:b5:ae:f2:d7:17:54:16:6b:0d:b5:2c:50:95:30:
b3:53:54:60:94:bb:31:e3:7c:58:21:d9:0b:5a:6e:
57:97:0a:0d:6d:2c:02:2a:01:e4:62:8f:16:0a:d3:
39:6c:19:4b:3c:9e:94:43:27:37:08:71:1b:44:7f:
0e:62:46:3f:5e:db:ac:9f:c7:88:11:72:54:8a:14:
11:87:2a:c9:cc:bc:7b:39:73:1d:59:59:d5:77:82:
46:86:37:ce:c6:a1:03:90:e1:9e:72:b8:a7:9f:1a:
bd:d1:2d:c3:fa:db:44:76:57:b2:85:e0:d3:7c:8d:
09:04:16:13:f8:05:af:62:31:a7:60:f7:e2:ff:ec:
ea:44:66:0f:1e:cf:1e:a6:93:72:e1:e4:14:09:b7:
19:c4:35:79:c8:da:e7:02:7e:c7:de:54:45:c8:6a:
ef:82:e4:95:d7:48:a0:bf:67:2e:c4:2a:6a:f4:b5:
ab:26:9a:ac:a7:6b:f6:f7:29:01:65:8c:fb:34:96:
37:ab:37:b0:3f:27:c0:a7:2f:8c:ae:60:e3:77:85:
fa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DE:3D:B7:65:03:DA:02:2B:53:3D:00:F8:9D:57:20:C6:2C:33:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3cea0688-5dd8-35af-98f9-19163e944a8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:e3:87:9b:c1:81:18:bd:80:d8:0e:c9:07:d8:1e:bd:e1:a5:
79:d4:72:98:64:84:0c:12:6c:40:fa:f9:76:e8:f0:4a:a2:36:
59:f4:74:ee:f9:61:04:bd:ca:50:97:c0:f4:17:ff:0e:09:c0:
34:a4:2e:c1:8b:6a:fb:7c:61:62:58:57:54:3d:1e:b6:d6:c4:
6d:cf:c3:87:df:24:d9:ad:15:57:e9:fa:b8:d4:db:6f:d8:2f:
b7:e7:82:1f:cf:b4:61:82:f6:ae:d7:fe:a3:9e:56:f1:f4:60:
3b:07:a3:89:97:2e:f0:ab:9e:8c:4b:17:8f:1d:b8:3a:6c:14:
3b:ae:95:7c:79:08:7b:cd:84:b9:5e:8c:bb:1f:86:d5:13:2e:
03:a1:b6:0e:78:58:d6:d6:62:cb:50:43:ec:d3:1b:96:8b:7e:
04:16:a4:fa:d1:1e:68:5d:b1:a6:15:5c:a1:90:e0:2e:33:44:
5d:4d:8a:15:0d:14:99:78:d7:af:23:d7:bd:dd:b0:a3:de:36:
91:60:a1:87:90:e5:b4:ea:23:74:5b:93:24:47:dd:73:50:dd:
12:81:83:af:7a:02:60:9d:17:48:3e:c2:7d:c9:a9:82:88:7a:
5c:f2:89:8b:d5:42:1e:f8:48:0e:45:b4:fc:70:5f:8c:44:7c:
46:49:bb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:26:13 2025 by rpki-client