Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/11bfda66-2fb2-3dec-8504-60282243b966.roa
File: 11bfda66-2fb2-3dec-8504-60282243b966.roa (raw, json)
Hash identifier: BvHOsM3/smQ31l9FJIxvXFCRsqSxKHYNcK/KOI4MH78=
Subject key identifier: F5:42:0D:A2:E1:AE:FC:2A:F6:4C:8C:9D:CC:16:B0:5D:F1:34:07:F4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D326CEC6CC6622F8D83B1C530
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/11bfda66-2fb2-3dec-8504-60282243b966.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.138.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:6c:ec:6c:c6:62:2f:8d:83:b1:c5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=9e5acc0c-901f-4ecd-8544-b1214e6d82c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f6:2c:b7:fc:7e:2e:1f:a9:38:e8:13:2a:94:
c9:ce:8b:25:3a:87:36:2f:3d:55:a5:9c:ba:81:4b:
59:97:bf:f1:2d:70:26:9a:85:b1:7e:40:06:4c:e5:
37:f9:fa:d3:d5:af:f8:8d:e9:52:5a:e5:f3:03:91:
3a:cc:57:ac:88:d0:0b:79:09:93:02:b2:cf:b9:8f:
29:d0:a5:fc:91:46:08:05:f0:80:8c:50:47:55:5a:
80:0a:34:7f:46:23:39:2b:e0:70:72:a9:58:1a:5c:
13:ca:3a:f8:e4:0d:3d:45:6d:3a:02:3a:35:1b:28:
1a:f6:42:29:7e:c9:e4:3e:24:2b:f7:f1:4d:31:5b:
fb:40:96:dc:7b:fd:cc:51:98:e6:7f:fb:8f:fc:36:
69:3a:30:aa:a6:4c:1a:86:0f:ed:4f:55:d9:bd:e8:
e0:16:fb:0d:1e:34:3f:f6:b8:2a:fc:6f:3f:65:d0:
e1:37:fc:cc:6d:35:b0:19:96:be:67:4d:35:48:22:
b5:a5:bb:92:3a:de:db:a1:db:85:13:54:8a:25:b8:
3a:c6:af:fa:02:2b:f4:6e:14:7e:8d:18:ac:ea:04:
18:15:8d:c4:9e:71:9c:a5:db:1d:e0:4e:4b:97:e6:
99:1f:a4:0d:87:84:ef:9d:5b:bf:12:ad:5f:ce:d2:
73:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:42:0D:A2:E1:AE:FC:2A:F6:4C:8C:9D:CC:16:B0:5D:F1:34:07:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/11bfda66-2fb2-3dec-8504-60282243b966.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.138.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:8d:81:57:f7:8b:67:3e:c4:3b:0e:3b:7e:ac:bf:a4:c2:87:
e7:2f:1b:f0:57:2e:3a:6b:2c:d5:35:b1:e0:37:fa:15:85:0d:
bc:fc:b6:cd:18:6a:33:7f:a0:9e:c2:fc:e8:55:ea:26:bf:4b:
73:05:45:6f:ac:88:d4:37:9e:48:44:09:0f:d0:46:a2:65:89:
27:0c:b7:30:90:9a:82:b4:63:8a:7d:b3:8b:f1:22:25:2a:b4:
fd:de:bf:5f:1f:6a:52:35:e2:88:0b:2c:01:0e:ad:8d:b7:95:
03:06:6e:8f:89:94:3e:b6:2e:32:13:82:2d:77:ec:47:51:a0:
e7:2e:d8:02:4e:f9:e3:71:21:44:90:86:36:bf:16:b6:6a:a7:
51:a1:fa:12:2b:22:4a:24:2a:18:78:5c:6c:80:4d:d2:69:70:
6d:ea:a2:e7:78:32:db:5d:51:cd:39:97:35:95:d7:b4:8c:36:
19:06:fa:15:17:4a:5c:b8:5d:ba:98:c4:77:f1:f2:60:c9:31:
f9:4e:31:a4:ad:f3:e8:28:48:87:2a:ec:3b:3d:bf:07:d8:f3:
3a:8b:26:ac:fa:83:04:ee:20:4c:2e:be:fc:91:b9:f7:39:9f:
37:91:ae:20:5a:bb:85:73:97:59:75:65:b5:a9:b0:4d:d0:aa:
b0:48:2e:a4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0ybOxsxmIvjYOxxTAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
OWU1YWNjMGMtOTAxZi00ZWNkLTg1NDQtYjEyMTRlNmQ4MmMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/Yst/x+Lh+pOOgTKpTJzoslOoc2Lz1VpZy6
gUtZl7/xLXAmmoWxfkAGTOU3+frT1a/4jelSWuXzA5E6zFesiNALeQmTArLPuY8p
0KX8kUYIBfCAjFBHVVqACjR/RiM5K+BwcqlYGlwTyjr45A09RW06Ajo1Gyga9kIp
fsnkPiQr9/FNMVv7QJbce/3MUZjmf/uP/DZpOjCqpkwahg/tT1XZvejgFvsNHjQ/
9rgq/G8/ZdDhN/zMbTWwGZa+Z001SCK1pbuSOt7boduFE1SKJbg6xq/6Aiv0bhR+
jRis6gQYFY3EnnGcpdsd4E5Ll+aZH6QNh4TvnVu/Eq1fztJzsQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPVCDaLhrvwq9kyMncwWsF3xNAf0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMTFiZmRhNjYtMmZiMi0z
ZGVjLTg1MDQtNjAyODIyNDNiOTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEoowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFo2BV/eLZz7EOw47fqy/pMKH5y8b8FcuOmss1TWx4Df6FYUNvPy2zRhq
M3+gnsL86FXqJr9LcwVFb6yI1DeeSEQJD9BGomWJJwy3MJCagrRjin2zi/EiJSq0
/d6/Xx9qUjXiiAssAQ6tjbeVAwZuj4mUPrYuMhOCLXfsR1Gg5y7YAk7543EhRJCG
Nr8WtmqnUaH6EisiSiQqGHhcbIBN0mlwbeqi53gy211RzTmXNZXXtIw2GQb6FRdK
XLhdupjEd/HyYMkx+U4xpK3z6ChIhyrsOz2/B9jzOosmrPqDBO4gTC6+/JG59zmf
N5GuIFq7hXOXWXVltamwTdCqsEgupA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:19:54 2025 by rpki-client