Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/15f7e8cd-8c0b-3db9-9fe0-b930451af5af.roa
File: 15f7e8cd-8c0b-3db9-9fe0-b930451af5af.roa (raw, json)
Hash identifier: fCO02hZSrVXNL+VmaKbYtx6Wr6OCrJZRhY2/jtK96r8=
Subject key identifier: 6D:9F:8B:BF:AB:7E:35:62:26:FC:6B:24:CA:97:2E:BF:03:14:76:E8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E2213B8141AB48C269EDB4E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/15f7e8cd-8c0b-3db9-9fe0-b930451af5af.roa
Signing time: Sat 04 Jun 2022 12:00:00 +0000
ROA not before: Sat 04 Jun 2022 12:00:00 +0000
ROA not after: Sun 10 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.92.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:22:13:b8:14:1a:b4:8c:26:9e:db:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 4 12:00:00 2022 GMT
Not After : Jul 10 04:00:00 2022 GMT
Subject: CN=168017e0-653f-4ec7-8629-447b25cee8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:70:bf:68:51:ed:f5:1e:5f:67:5d:3a:25:
bc:e3:64:c6:61:12:e2:cf:e6:d9:ba:68:fa:3f:0f:
0c:cc:39:c7:48:c2:1f:09:60:89:69:87:fc:3d:c1:
e8:d7:95:09:1a:0f:d3:39:39:f1:15:1a:2b:52:9b:
a3:36:9a:7d:0f:94:37:cc:70:d9:22:9c:43:65:c5:
43:8c:1d:90:8f:1a:85:79:45:e8:5b:fa:0c:2c:6c:
84:26:01:ec:b0:ec:cd:78:98:56:10:9a:19:69:07:
4b:d2:58:31:d7:f0:b8:e4:60:aa:c2:a4:22:c5:42:
07:b0:fa:49:21:92:46:b0:a3:96:0c:90:97:46:44:
71:97:a2:4c:af:a7:a9:6b:53:ad:09:b4:61:10:fd:
50:af:aa:97:5e:62:2c:d8:e6:3b:9c:be:79:ba:5d:
78:f8:6d:90:c9:f4:4b:c0:81:5d:d2:fa:1b:ee:48:
f4:b9:53:c4:cb:d9:01:00:fb:06:fd:47:c7:6b:12:
fd:88:73:0a:76:32:17:59:dc:9e:66:4c:bd:bd:f9:
6d:c7:4f:f5:74:b3:fb:6f:36:19:f7:8b:2d:73:fc:
9d:a3:82:b8:33:6c:49:ab:72:e0:aa:08:dd:f4:47:
3a:6b:7b:df:5c:60:d6:08:c7:0e:e2:45:d2:0c:85:
26:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9F:8B:BF:AB:7E:35:62:26:FC:6B:24:CA:97:2E:BF:03:14:76:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/15f7e8cd-8c0b-3db9-9fe0-b930451af5af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.92.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:b2:7e:33:d3:74:df:14:15:cd:20:5e:75:f3:94:c0:da:fc:
ec:b8:94:ee:fe:9b:c8:36:94:13:ed:82:ed:48:6c:88:eb:35:
c1:e5:f3:62:84:2e:5a:51:ba:71:9c:59:a1:06:65:ab:36:a6:
44:5e:ce:3d:4a:2a:58:cb:37:47:8a:d4:9c:38:2f:cf:a7:82:
2c:c2:d4:c0:85:3d:a8:ff:ba:b7:bc:ae:2e:e7:cf:a4:d5:0d:
ac:02:eb:b7:30:17:e2:2b:b2:af:a8:63:6b:4d:34:23:5d:45:
ef:a8:0b:86:21:b7:8a:13:4b:3e:2e:55:41:5e:31:eb:30:34:
ee:87:6c:64:b7:7f:0d:a5:16:26:4c:3e:26:b1:be:6e:02:38:
e9:e0:76:d0:1f:73:6c:b5:f2:b4:01:2b:da:a4:3f:48:a9:64:
ef:47:29:84:bf:fd:18:78:68:12:95:9f:5a:20:68:a3:95:49:
bb:89:23:dc:41:4d:af:38:37:3f:7f:23:de:81:fb:e9:79:5c:
eb:b7:b3:e9:1c:60:d6:09:56:50:60:81:c2:f7:ea:8c:63:a1:
1d:c6:f8:7c:4b:dc:01:f8:6d:c4:06:18:b4:bd:7b:b8:73:5b:
ae:aa:69:4c:9a:d4:1c:da:a4:54:6c:33:2e:98:65:a0:40:c1:
50:f6:72:0b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4iE7gUGrSMJp7bToAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYwNDEyMDAwMFoXDTIyMDcxMDA0MDAwMFowLzEtMCsGA1UEAxMk
MTY4MDE3ZTAtNjUzZi00ZWM3LTg2MjktNDQ3YjI1Y2VlOGQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU9wv2hR7fUeX2ddOiW842TGYRLiz+bZumj6
Pw8MzDnHSMIfCWCJaYf8PcHo15UJGg/TOTnxFRorUpujNpp9D5Q3zHDZIpxDZcVD
jB2QjxqFeUXoW/oMLGyEJgHssOzNeJhWEJoZaQdL0lgx1/C45GCqwqQixUIHsPpJ
IZJGsKOWDJCXRkRxl6JMr6epa1OtCbRhEP1Qr6qXXmIs2OY7nL55ul14+G2QyfRL
wIFd0vob7kj0uVPEy9kBAPsG/UfHaxL9iHMKdjIXWdyeZky9vfltx0/1dLP7bzYZ
94stc/ydo4K4M2xJq3Lgqgjd9Ec6a3vfXGDWCMcO4kXSDIUmAwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFG2fi7+rfjViJvxrJMqXLr8DFHboMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMTVmN2U4Y2QtOGMwYi0z
ZGI5LTlmZTAtYjkzMDQ1MWFmNWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAElwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmLJ+M9N03xQVzSBedfOUwNr87LiU7v6byDaUE+2C7UhsiOs1weXzYoQu
WlG6cZxZoQZlqzamRF7OPUoqWMs3R4rUnDgvz6eCLMLUwIU9qP+6t7yuLufPpNUN
rALrtzAX4iuyr6hja000I11F76gLhiG3ihNLPi5VQV4x6zA07odsZLd/DaUWJkw+
JrG+bgI46eB20B9zbLXytAEr2qQ/SKlk70cphL/9GHhoEpWfWiBoo5VJu4kj3EFN
rzg3P38j3oH76Xlc67ez6Rxg1glWUGCBwvfqjGOhHcb4fEvcAfhtxAYYtL17uHNb
rqppTJrUHNqkVGwzLphloEDBUPZyCw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:46:04 2025 by rpki-client