Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/24e40e27-26a9-3014-b923-84750ce90f87.roa
File: 24e40e27-26a9-3014-b923-84750ce90f87.roa (raw, json)
Hash identifier: 6OdMM4k3uWFqxuDAiZxzM4pKOVowcv87C7qu3xD2YS4=
Subject key identifier: 38:18:7B:66:91:CC:DA:DE:B7:AC:D4:A3:32:07:A8:AD:74:F7:10:26
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6B54B5683A80C610B9734F40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/24e40e27-26a9-3014-b923-84750ce90f87.roa
Signing time: Thu 30 Jun 2022 12:00:00 +0000
ROA not before: Thu 30 Jun 2022 12:00:00 +0000
ROA not after: Fri 05 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.131.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6b:54:b5:68:3a:80:c6:10:b9:73:4f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 30 12:00:00 2022 GMT
Not After : Aug 5 04:00:00 2022 GMT
Subject: CN=9b62263f-2602-4e02-ba89-de07ca08a19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ee:bc:b8:19:d0:cb:e3:a3:ff:1c:c6:46:d9:
29:b0:a2:d8:01:00:ae:e7:9d:ac:2c:7e:c0:4e:e2:
d1:12:ab:d2:3e:98:57:91:4f:7c:4d:89:5c:19:38:
e0:f3:86:8a:fe:d6:b5:18:11:cf:43:dc:4d:78:dc:
e4:42:63:0d:01:9c:eb:57:ff:09:88:a0:d1:d0:d5:
40:d7:c6:2f:15:49:a6:90:a3:13:f2:4d:16:29:b2:
7e:ae:82:52:a9:fb:c2:22:4d:02:eb:65:e7:6a:1d:
2c:00:3b:98:65:a6:94:a7:df:96:df:72:2c:eb:47:
73:70:73:20:05:9d:c9:2c:43:ad:71:22:0a:0a:ab:
a5:83:d2:bf:c7:fd:c5:f7:7b:52:97:46:b8:71:00:
7b:08:18:b1:b3:63:36:e0:f1:2f:c7:3c:17:53:29:
bb:52:d7:1c:52:a8:ee:1e:ae:eb:a2:5e:fe:8d:e9:
7e:60:e2:0b:13:72:45:fe:b5:94:46:e2:54:0a:a7:
b9:6a:93:3f:9d:b2:2a:1b:24:7c:61:7f:26:64:3d:
f0:a7:4d:15:b7:8d:07:ff:96:0c:52:a8:e8:53:01:
d1:23:44:f8:e6:7d:03:8d:0a:f1:88:5b:3c:52:0d:
68:24:d6:5c:86:ce:a8:5a:91:1e:79:eb:ad:cb:53:
c7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:18:7B:66:91:CC:DA:DE:B7:AC:D4:A3:32:07:A8:AD:74:F7:10:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/24e40e27-26a9-3014-b923-84750ce90f87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.131.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:f2:8b:9f:68:3b:16:e5:ef:19:5c:dd:a7:54:ab:96:8f:c3:
74:c2:06:70:db:f3:01:45:43:68:8f:aa:3b:21:d7:bd:c4:eb:
d3:45:22:f7:23:96:b7:c2:cf:a1:70:35:4c:1b:38:7a:ed:8e:
30:95:47:bc:c8:0f:9d:4d:a7:35:8e:c2:0f:01:72:d6:93:ec:
de:88:02:f2:0c:ae:ff:8b:b2:f4:d6:97:ea:86:68:4d:88:6d:
32:b8:3e:73:c4:83:70:75:82:bb:92:10:9a:dd:64:3c:c6:6f:
88:73:a2:40:fc:18:b2:a1:14:35:87:6b:54:ea:6f:c7:58:04:
da:d9:5c:81:d5:3a:02:cc:c2:c3:0c:3e:d8:ea:75:ec:27:ca:
00:7d:5b:d4:06:3b:22:f5:13:16:48:e0:b3:92:7a:52:fc:b4:
55:6d:f9:3d:2b:96:1d:44:d1:4e:24:8f:a0:23:f8:21:8e:d2:
70:62:4d:ef:d8:af:d1:59:87:67:48:d9:d9:ae:e9:16:bf:47:
3f:c7:9d:c0:f1:78:2f:dc:02:3f:3f:25:df:fc:46:b1:c4:a6:
eb:6a:db:fa:70:4c:d0:71:e8:71:6d:fb:d2:74:64:78:f9:89:
5b:6c:23:2b:48:4e:ca:e9:9b:e1:af:bc:4c:9c:f0:62:94:14:
36:3d:c7:15
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5rVLVoOoDGELlzT0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYzMDEyMDAwMFoXDTIyMDgwNTA0MDAwMFowLzEtMCsGA1UEAxMk
OWI2MjI2M2YtMjYwMi00ZTAyLWJhODktZGUwN2NhMDhhMTljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe68uBnQy+Oj/xzGRtkpsKLYAQCu552sLH7A
TuLREqvSPphXkU98TYlcGTjg84aK/ta1GBHPQ9xNeNzkQmMNAZzrV/8JiKDR0NVA
18YvFUmmkKMT8k0WKbJ+roJSqfvCIk0C62Xnah0sADuYZaaUp9+W33Is60dzcHMg
BZ3JLEOtcSIKCqulg9K/x/3F93tSl0a4cQB7CBixs2M24PEvxzwXUym7UtccUqju
Hq7rol7+jel+YOILE3JF/rWURuJUCqe5apM/nbIqGyR8YX8mZD3wp00Vt40H/5YM
UqjoUwHRI0T45n0DjQrxiFs8Ug1oJNZchs6oWpEeeeuty1PHsQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDgYe2aRzNret6zUozIHqK109xAmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMjRlNDBlMjctMjZhOS0z
MDE0LWI5MjMtODQ3NTBjZTkwZjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEoMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAs/KLn2g7FuXvGVzdp1Srlo/DdMIGcNvzAUVDaI+qOyHXvcTr00Ui9yOW
t8LPoXA1TBs4eu2OMJVHvMgPnU2nNY7CDwFy1pPs3ogC8gyu/4uy9NaX6oZoTYht
Mrg+c8SDcHWCu5IQmt1kPMZviHOiQPwYsqEUNYdrVOpvx1gE2tlcgdU6AszCwww+
2Op17CfKAH1b1AY7IvUTFkjgs5J6Uvy0VW35PSuWHUTRTiSPoCP4IY7ScGJN79iv
0VmHZ0jZ2a7pFr9HP8edwPF4L9wCPz8l3/xGscSm62rb+nBM0HHocW370nRkePmJ
W2wjK0hOyumb4a+8TJzwYpQUNj3HFQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:16:23 2025 by rpki-client