Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0c5b63ed-23f1-3ae0-bc9a-157bfccb11c9.roa
File: 0c5b63ed-23f1-3ae0-bc9a-157bfccb11c9.roa (raw, json)
Hash identifier: 3nWM0YENuiRtEYNokZG6c27UDQgvx9uGH+B8/i+aUN8=
Subject key identifier: 64:52:EB:A5:B6:8E:8C:83:72:34:6B:36:8B:DD:2C:41:1C:6D:59:AD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D326D82BE679DB2C328763000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0c5b63ed-23f1-3ae0-bc9a-157bfccb11c9.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.128.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:6d:82:be:67:9d:b2:c3:28:76:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=f9fb667d-f54b-4484-9ba9-89554fca2e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3c:59:36:47:71:f2:df:c6:bb:ac:fd:e5:4d:
69:35:6d:45:20:59:4f:ce:55:cf:55:54:37:88:d3:
7b:d5:96:e1:9d:58:60:74:cf:1e:66:73:2e:94:29:
35:39:c8:b9:dc:a7:2b:76:03:55:4d:2d:5a:96:66:
a8:b8:bb:9b:b3:7d:02:09:ea:8e:1f:a9:24:05:6a:
97:fc:46:3d:0b:0b:8b:78:55:d7:f3:db:30:bd:e7:
68:1f:c2:4c:fc:cd:fc:aa:e2:ca:55:36:a9:86:87:
33:07:e1:e1:0f:14:97:8f:54:51:92:f9:1a:4e:30:
18:32:b8:ea:8f:d2:12:a1:9a:61:00:af:59:6b:88:
1b:94:19:d0:7c:9f:0b:c0:d8:8f:a9:47:a4:d0:4d:
8c:57:b5:c9:40:50:97:b6:5f:36:70:0a:62:be:42:
75:82:e7:b0:3b:81:aa:78:5c:84:b0:01:2b:57:98:
bf:0c:a7:81:cc:bf:d2:1c:6c:92:9b:40:6e:76:59:
17:a0:2b:f4:15:ca:72:08:fa:38:c6:ba:3e:0d:35:
a7:93:27:03:eb:7c:43:97:8f:94:f6:3e:a8:ea:b9:
91:56:63:31:33:ed:87:5d:c0:1e:17:ed:3b:57:94:
57:49:16:6b:21:87:b0:ff:ce:85:51:5a:89:5b:b9:
54:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:52:EB:A5:B6:8E:8C:83:72:34:6B:36:8B:DD:2C:41:1C:6D:59:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0c5b63ed-23f1-3ae0-bc9a-157bfccb11c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.128.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:21:d5:fb:b0:e1:91:ab:af:c3:b6:8e:0c:a4:13:d8:91:10:
54:ca:6b:8e:68:ce:eb:af:04:d2:9b:82:74:de:aa:5b:ba:24:
b1:0a:96:46:f1:eb:c6:a3:d1:ab:8a:d0:72:d2:0e:8a:1a:3e:
0b:67:a8:92:2b:67:bc:06:2a:1e:9b:d8:95:e8:b3:20:a3:ff:
a8:b0:ea:dc:92:3f:1b:02:85:44:31:dd:32:10:93:cd:9d:21:
3a:86:47:06:77:9a:06:e5:f1:45:73:1e:cc:b9:6f:fc:d2:aa:
c0:38:04:f8:3a:7c:f2:83:7d:73:24:80:2a:a8:c2:9d:2f:26:
fd:65:0d:a2:61:f4:85:4b:24:eb:e2:bd:1b:1a:e1:56:22:62:
8d:c4:7e:5c:3b:56:a8:1b:e0:97:be:96:ff:fe:15:04:9d:7f:
52:22:a7:28:a5:47:43:01:65:da:41:ea:9f:a9:2c:ac:2e:ee:
0e:d4:af:a4:45:25:0b:b7:c3:cc:1b:79:ff:ad:c8:46:d4:be:
d5:78:cd:55:ff:a0:e4:96:f5:2d:c1:97:0c:be:78:d1:bb:82:
0c:58:4b:fe:17:b6:b7:1e:30:da:af:ae:9c:dd:6b:ec:5e:bf:
15:1a:ab:18:36:08:3f:d1:9a:b7:57:e9:2b:e5:2f:f2:22:0d:
57:6e:17:fa
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0ybYK+Z52ywyh2MAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZjlmYjY2N2QtZjU0Yi00NDg0LTliYTktODk1NTRmY2EyZTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzxZNkdx8t/Gu6z95U1pNW1FIFlPzlXPVVQ3
iNN71ZbhnVhgdM8eZnMulCk1Oci53KcrdgNVTS1almaouLubs30CCeqOH6kkBWqX
/EY9CwuLeFXX89swvedoH8JM/M38quLKVTaphoczB+HhDxSXj1RRkvkaTjAYMrjq
j9ISoZphAK9Za4gblBnQfJ8LwNiPqUek0E2MV7XJQFCXtl82cApivkJ1guewO4Gq
eFyEsAErV5i/DKeBzL/SHGySm0BudlkXoCv0FcpyCPo4xro+DTWnkycD63xDl4+U
9j6o6rmRVmMxM+2HXcAeF+07V5RXSRZrIYew/86FUVqJW7lUYQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGRS66W2joyDcjRrNovdLEEcbVmtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMGM1YjYzZWQtMjNmMS0z
YWUwLWJjOWEtMTU3YmZjY2IxMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEoAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEApSHV+7Dhkauvw7aODKQT2JEQVMprjmjO668E0puCdN6qW7oksQqWRvHr
xqPRq4rQctIOiho+C2eokitnvAYqHpvYleizIKP/qLDq3JI/GwKFRDHdMhCTzZ0h
OoZHBneaBuXxRXMezLlv/NKqwDgE+Dp88oN9cySAKqjCnS8m/WUNomH0hUsk6+K9
GxrhViJijcR+XDtWqBvgl76W//4VBJ1/UiKnKKVHQwFl2kHqn6ksrC7uDtSvpEUl
C7fDzBt5/63IRtS+1XjNVf+g5Jb1LcGXDL540buCDFhL/he2tx4w2q+unN1r7F6/
FRqrGDYIP9Gat1fpK+Uv8iINV24X+g==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:04:52 2025 by rpki-client