Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0f18056e-3be2-3835-a510-027af6d8b19e.roa
File: 0f18056e-3be2-3835-a510-027af6d8b19e.roa (raw, json)
Hash identifier: eq0HtjqtgsPvrZgPHFhVAtIekRxhdlFtckL2hH8cl9g=
Subject key identifier: 1C:16:43:ED:E1:0D:86:28:A4:C3:C4:C4:40:A8:AA:59:75:8E:37:86
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840419F2ED6AAAEA91FFB400400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0f18056e-3be2-3835-a510-027af6d8b19e.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.208.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:41:9f:2e:d6:aa:ae:a9:1f:fb:40:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=e0038e07-a72f-4454-b826-5beb42e4f6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:fa:fb:23:93:f7:32:b1:3d:90:04:0e:ad:
62:03:a6:8e:81:c5:e4:b3:66:ce:df:12:e2:0d:70:
d9:26:2d:5c:9a:0a:1c:c5:61:14:aa:33:1e:1c:e1:
00:0b:95:b5:90:4c:0f:8a:94:26:5c:8f:b4:76:62:
a9:81:77:9a:48:b1:d3:c1:97:1b:73:a6:36:72:cf:
b6:5a:d7:f6:03:9e:da:0b:51:f5:e8:3c:97:e6:ed:
74:17:d9:16:68:8c:ee:25:be:af:5a:54:38:b2:6a:
63:d1:4b:7e:2b:b4:97:06:1f:34:59:c3:a9:30:73:
f0:c3:62:bf:bc:cd:43:7c:4c:f5:7a:5c:83:5f:e6:
57:33:18:3f:90:b7:6f:dc:1f:6f:dc:ef:53:5f:ff:
ff:71:69:06:6d:53:16:50:38:36:8d:05:82:e9:94:
93:32:69:eb:9f:f9:9c:8d:58:55:47:41:74:fb:e8:
b4:67:0e:cb:61:63:24:63:fc:85:6b:40:5a:26:10:
fe:4d:30:0e:c5:de:40:8f:f8:aa:6a:b0:43:5d:df:
a7:82:55:f2:86:30:a9:52:5b:74:1a:68:7d:c8:26:
15:18:5e:40:ac:22:70:7f:9a:1a:61:4a:00:67:75:
f4:bd:65:6e:8c:56:96:75:b8:c8:79:fd:2b:47:06:
16:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:16:43:ED:E1:0D:86:28:A4:C3:C4:C4:40:A8:AA:59:75:8E:37:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0f18056e-3be2-3835-a510-027af6d8b19e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.208.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:16:4e:30:26:0f:0c:9e:44:3a:77:2f:07:b9:b2:ae:e5:43:
92:48:52:b3:74:58:44:a7:5e:19:2e:fe:ca:16:3d:7e:99:51:
4f:69:34:63:b8:f0:92:a5:67:ab:6b:ae:02:51:0e:33:b5:ce:
27:19:90:8e:21:97:93:34:42:52:67:07:5e:c8:51:7d:15:0d:
06:89:ba:f3:31:f7:51:77:58:16:11:36:05:32:b2:eb:1e:09:
b4:b0:1b:5b:b5:83:cf:43:44:f1:d0:3a:fb:04:7b:25:76:5a:
a4:1e:06:d7:00:17:1d:1e:e8:d7:73:1b:cb:71:85:6d:9e:37:
da:8a:22:da:78:b0:9e:90:b2:b9:91:f1:96:63:24:f9:5c:e2:
07:0a:54:34:aa:f4:21:be:11:3f:f1:35:79:46:7f:75:35:2e:
8d:0b:30:95:ee:f4:b5:01:5b:c3:a8:82:73:9d:b3:42:99:4b:
33:ed:f5:e7:ae:a0:3a:54:18:dc:d8:90:d1:a0:ce:4e:81:84:
4f:ae:52:b4:46:b8:7d:b3:f0:23:04:69:d6:8c:bf:29:96:bf:
89:46:4e:48:81:4d:61:55:4b:a9:0e:00:7d:83:b7:87:71:79:
81:59:2d:90:ab:41:fd:bb:de:30:1b:ea:86:b9:2c:d8:9e:1d:
a8:d0:23:61
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBBny7Wqq6pH/tABAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNTEyMDAwMFoXDTIzMDEyMDA1MDAwMFowLzEtMCsGA1UEAxMk
ZTAwMzhlMDctYTcyZi00NDU0LWI4MjYtNWJlYjQyZTRmNmNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYv6+yOT9zKxPZAEDq1iA6aOgcXks2bO3xLi
DXDZJi1cmgocxWEUqjMeHOEAC5W1kEwPipQmXI+0dmKpgXeaSLHTwZcbc6Y2cs+2
Wtf2A57aC1H16DyX5u10F9kWaIzuJb6vWlQ4smpj0Ut+K7SXBh80WcOpMHPww2K/
vM1DfEz1elyDX+ZXMxg/kLdv3B9v3O9TX///cWkGbVMWUDg2jQWC6ZSTMmnrn/mc
jVhVR0F0++i0Zw7LYWMkY/yFa0BaJhD+TTAOxd5Aj/iqarBDXd+nglXyhjCpUlt0
Gmh9yCYVGF5ArCJwf5oaYUoAZ3X0vWVujFaWdbjIef0rRwYW3wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBwWQ+3hDYYopMPExECoqll1jjeGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMGYxODA1NmUtM2JlMi0z
ODM1LWE1MTAtMDI3YWY2ZDhiMTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDEtAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWxZOMCYPDJ5EOncvB7myruVDkkhSs3RYRKdeGS7+yhY9fplRT2k0Y7jw
kqVnq2uuAlEOM7XOJxmQjiGXkzRCUmcHXshRfRUNBom68zH3UXdYFhE2BTKy6x4J
tLAbW7WDz0NE8dA6+wR7JXZapB4G1wAXHR7o13Mby3GFbZ432ooi2niwnpCyuZHx
lmMk+VziBwpUNKr0Ib4RP/E1eUZ/dTUujQswle70tQFbw6iCc52zQplLM+31566g
OlQY3NiQ0aDOToGET65StEa4fbPwIwRp1oy/KZa/iUZOSIFNYVVLqQ4AfYO3h3F5
gVktkKtB/bveMBvqhrks2J4dqNAjYQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:08:37 2025 by rpki-client