Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8bdc3e2e-5298-3062-a57a-67d8ae0b1c2b.roa
File: 8bdc3e2e-5298-3062-a57a-67d8ae0b1c2b.roa (raw, json)
Hash identifier: NR1ltCMTK4HvcTE/67WEikLy8m0T03k2A+s3XU7SPPQ=
Subject key identifier: B0:CF:B1:F5:E9:F3:3A:AF:FB:B9:45:3E:8A:22:F4:A0:6C:0F:01:DB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F3315D38E4517D27079BBD800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8bdc3e2e-5298-3062-a57a-67d8ae0b1c2b.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:33:15:d3:8e:45:17:d2:70:79:bb:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=ae6d442e-7bbc-4bba-a23f-fe42f3f62993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8b:14:52:dd:49:47:73:75:1b:8b:a3:b1:4c:
b4:9d:04:f1:0b:24:7e:40:5a:88:d1:83:ff:a2:1c:
76:7a:e5:2c:21:20:19:ba:b8:42:4c:52:cf:af:de:
6a:0b:7d:1f:73:b1:23:e7:eb:60:80:06:8c:21:52:
b7:ea:9a:ee:92:75:ce:ba:ef:c7:2b:f1:33:fe:a7:
ac:9a:90:79:41:5d:64:e2:1b:e0:fd:e2:4e:2f:03:
8e:17:84:e6:e7:6a:2f:da:83:1b:da:8a:be:8a:97:
13:ac:c1:67:1b:ad:a8:34:ff:bb:c0:d2:3b:d7:3a:
64:ae:31:62:cb:17:a3:2f:d8:12:ea:0f:b3:9b:85:
93:16:88:18:af:5a:cd:89:67:89:1c:aa:0d:3a:7b:
a3:2d:4a:64:fa:27:8d:0b:a0:6f:61:a1:45:c2:7c:
a4:4c:ac:f4:4f:e1:2d:3a:d5:16:ce:38:8e:15:69:
95:6d:43:8c:82:a0:92:db:41:38:80:80:71:c0:28:
7e:0d:2e:e7:ae:fd:c1:c5:c1:32:81:67:6f:8c:6d:
02:f0:3f:c5:d8:c4:4d:d8:68:99:69:c0:a3:ab:a7:
3e:d6:36:8c:9d:41:66:3f:71:81:48:af:b3:09:c4:
9a:76:d5:51:09:7d:df:cb:a2:28:02:fa:80:e6:56:
b9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CF:B1:F5:E9:F3:3A:AF:FB:B9:45:3E:8A:22:F4:A0:6C:0F:01:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8bdc3e2e-5298-3062-a57a-67d8ae0b1c2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:17:e5:ed:df:80:fd:01:af:d6:d5:57:e5:96:9f:d5:27:2b:
92:d9:77:33:aa:b4:83:3f:11:1a:b3:eb:cc:8e:9c:c4:0c:88:
7f:e2:8e:db:eb:45:d2:9d:72:96:d8:fc:07:8b:37:9d:77:31:
17:b3:6f:3d:8f:08:b7:76:15:5b:ac:28:b5:ba:34:91:0d:9f:
b9:72:2c:df:55:b8:70:d9:09:51:c2:e3:7a:8d:1a:8d:e7:99:
5c:aa:56:c8:c0:50:7f:ef:3d:0b:96:e0:a8:c3:77:bb:9f:c2:
3d:90:f1:13:7d:89:84:c6:ae:d0:dd:4e:d9:41:09:0c:35:3c:
43:fc:33:2f:56:69:86:e7:75:fa:c5:b1:56:db:51:98:b7:0e:
97:e1:b1:c9:7e:36:5e:d2:56:e4:75:cd:03:68:2d:88:a4:83:
21:2d:c1:6e:92:be:05:ed:d7:6c:bc:99:db:60:60:fc:09:1a:
95:fc:2e:df:1c:e6:e3:e3:d1:57:1d:c1:28:fd:67:c1:bb:63:
5b:92:c5:00:63:d2:3a:ae:ab:b0:79:94:7d:b6:6d:56:ff:66:
e7:49:e3:00:28:ee:17:1b:63:9d:74:52:18:24:a5:b2:13:d5:
40:a1:6e:ab:5c:51:42:3e:12:42:70:cb:eb:b7:b7:7d:99:bb:
79:d5:57:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:15:58 2025 by rpki-client