Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/81ab71e8-571e-3255-9837-9f087b49e9f3.roa
File: 81ab71e8-571e-3255-9837-9f087b49e9f3.roa (raw, json)
Hash identifier: E5x2yiGPxOaH05fNWkaBIrkja/KtnwTcuJhzup7pvX0=
Subject key identifier: CA:87:48:5A:C8:BC:62:0D:18:3C:EF:7B:22:C3:9B:5A:E8:27:0C:F0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401C6614C1E03F9845AF818D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/81ab71e8-571e-3255-9837-9f087b49e9f3.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:66:14:c1:e0:3f:98:45:af:81:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=76008db8-abfc-4482-b9c9-8f7172520cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:d6:d9:66:26:ce:5a:f6:71:84:57:f7:6c:
d1:56:dd:6e:04:48:04:fd:d0:75:e2:d5:99:15:9c:
e1:a7:34:38:f2:15:f7:40:12:16:91:ae:fb:4d:f7:
cb:82:75:da:59:ef:22:e3:7a:c2:c1:d0:47:2f:be:
34:51:49:35:48:98:ca:e7:99:cd:99:f7:39:b4:6b:
0a:9d:3f:4a:27:e9:ca:94:c1:86:a7:66:79:7d:1c:
eb:b5:10:b8:2a:c7:ec:8a:a6:06:08:a9:b0:8d:24:
0a:62:ac:bb:81:e5:3e:e3:45:fe:ea:92:91:49:46:
d1:d7:27:8b:53:38:3c:f5:ce:1c:5a:53:b7:ba:99:
e4:c1:54:9c:2c:e4:76:80:c0:9e:84:1d:40:1a:4d:
e5:45:1f:49:5f:87:6d:2e:28:b4:34:eb:60:39:5c:
36:da:dd:e1:3a:08:6d:91:96:a8:b1:b1:56:1e:f6:
ba:00:49:e1:fb:1a:c2:ec:ae:0a:62:a8:d2:4f:0e:
c7:0d:ca:58:cf:70:ec:77:88:4b:44:45:7b:37:c3:
40:22:87:95:34:b0:91:9f:36:a1:b6:c0:93:f1:ba:
be:35:80:78:ca:e3:36:26:7d:73:c4:4d:93:66:e9:
45:e6:a9:7c:32:db:12:f8:0f:22:40:19:6d:bb:45:
cc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:87:48:5A:C8:BC:62:0D:18:3C:EF:7B:22:C3:9B:5A:E8:27:0C:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/81ab71e8-571e-3255-9837-9f087b49e9f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:40:8a:fc:87:4a:63:3c:2b:c2:f7:d5:45:05:ef:ac:1c:5b:
50:36:6b:25:0b:14:7b:dd:42:29:51:3b:ae:ad:92:47:4c:fc:
2d:11:96:35:83:ae:1a:55:7a:ca:98:b5:ef:d4:e1:20:90:18:
1b:fa:27:c5:d1:a7:01:c1:82:3b:c4:da:cc:24:88:29:e6:cf:
31:b1:ae:21:f4:41:19:3e:70:df:02:b7:94:17:8c:ce:9c:f7:
09:15:d3:79:1b:c9:be:d1:b0:49:a2:ea:f3:24:b8:29:78:0e:
57:2c:45:54:40:6e:5e:38:f6:d9:ad:10:44:69:92:1c:43:9d:
aa:36:58:9e:59:f9:0e:fb:a0:67:71:14:30:e1:41:0e:c1:70:
d9:63:b0:07:25:70:6a:d0:16:18:79:07:d8:60:29:66:ff:c0:
47:66:aa:01:9c:a7:b7:98:49:e4:f3:39:ca:20:e5:0b:16:01:
a8:83:05:d0:c7:d8:d7:a3:83:e1:8d:90:2f:21:c0:4e:2c:01:
74:2e:56:93:c5:4d:d5:d5:40:32:b0:cc:bd:b2:11:b5:71:c4:
c0:6a:56:ec:1f:39:c0:e1:21:b1:80:81:61:b3:58:e5:4e:99:
4d:6a:8d:0c:38:a5:1c:69:46:ff:dc:ad:a9:6e:64:2f:18:f7:
19:ab:09:4a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAcZhTB4D+YRa+BjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIwMjEyMDAwMFoXDTIzMDEwNzA1MDAwMFowLzEtMCsGA1UEAxMk
NzYwMDhkYjgtYWJmYy00NDgyLWI5YzktOGY3MTcyNTIwY2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojHW2WYmzlr2cYRX92zRVt1uBEgE/dB14tWZ
FZzhpzQ48hX3QBIWka77TffLgnXaWe8i43rCwdBHL740UUk1SJjK55nNmfc5tGsK
nT9KJ+nKlMGGp2Z5fRzrtRC4KsfsiqYGCKmwjSQKYqy7geU+40X+6pKRSUbR1yeL
Uzg89c4cWlO3upnkwVScLOR2gMCehB1AGk3lRR9JX4dtLii0NOtgOVw22t3hOght
kZaosbFWHva6AEnh+xrC7K4KYqjSTw7HDcpYz3Dsd4hLREV7N8NAIoeVNLCRnzah
tsCT8bq+NYB4yuM2Jn1zxE2TZulF5ql8MtsS+A8iQBltu0XMcwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMqHSFrIvGINGDzveyLDm1roJwzwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvODFhYjcxZTgtNTcxZS0z
MjU1LTk4MzctOWYwODdiNDllOWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEtgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPECK/IdKYzwrwvfVRQXvrBxbUDZrJQsUe91CKVE7rq2SR0z8LRGWNYOu
GlV6ypi179ThIJAYG/onxdGnAcGCO8TazCSIKebPMbGuIfRBGT5w3wK3lBeMzpz3
CRXTeRvJvtGwSaLq8yS4KXgOVyxFVEBuXjj22a0QRGmSHEOdqjZYnln5DvugZ3EU
MOFBDsFw2WOwByVwatAWGHkH2GApZv/AR2aqAZynt5hJ5PM5yiDlCxYBqIMF0MfY
16OD4Y2QLyHATiwBdC5Wk8VN1dVAMrDMvbIRtXHEwGpW7B85wOEhsYCBYbNY5U6Z
TWqNDDilHGlG/9ytqW5kLxj3GasJSg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:55:06 2025 by rpki-client