Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2eb19305-4b6b-3dd8-b640-36fa23c8e99c.roa
File: 2eb19305-4b6b-3dd8-b640-36fa23c8e99c.roa (raw, json)
Hash identifier: XkOu+t4/p/xgsYwNYQuwU+mSlg+H0BBzQCy1btLDOq4=
Subject key identifier: E7:33:AD:E7:5A:31:E1:87:28:F7:1A:90:B6:69:85:9F:6E:3B:21:E5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F2ED6F302F43DDDA929BA6900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2eb19305-4b6b-3dd8-b640-36fa23c8e99c.roa
Signing time: Thu 08 Sep 2022 12:00:00 +0000
ROA not before: Thu 08 Sep 2022 12:00:00 +0000
ROA not after: Fri 14 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.69.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2e:d6:f3:02:f4:3d:dd:a9:29:ba:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 8 12:00:00 2022 GMT
Not After : Oct 14 04:00:00 2022 GMT
Subject: CN=be13693b-959a-4516-adb7-1c6ddfd51808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:23:4e:84:e9:99:ec:ce:34:2d:03:50:c7:
c4:05:11:cb:f5:0c:9b:cc:7d:7f:b1:56:42:d7:f1:
bd:48:5e:af:3a:5f:15:11:65:80:9c:41:e8:7a:52:
1d:b1:8c:27:ca:ef:e6:e6:8c:5d:5f:67:45:f2:e4:
ea:c6:7e:c4:57:59:8f:a3:42:18:ec:52:c1:07:04:
7e:d3:ef:44:fd:be:33:93:88:3e:81:f9:68:22:80:
ec:32:e6:68:bb:96:bd:74:bf:f8:af:42:8d:b3:64:
e6:db:2c:78:46:0f:04:66:3c:65:6f:e1:05:4b:b8:
9a:84:0c:29:f0:d9:28:0d:68:d2:6c:81:a4:5a:40:
eb:48:39:00:d7:aa:4f:4c:99:75:be:bc:fd:85:d6:
4a:e4:d6:b7:66:75:6f:60:9f:95:7c:73:65:a6:f4:
eb:04:f5:7b:0c:83:f8:d8:4b:8a:61:c3:db:93:6d:
4e:62:50:f5:86:24:b6:62:bf:0a:54:2f:e3:97:4d:
9f:7b:da:f7:a3:17:0f:98:e5:56:66:a3:1a:cf:0f:
d7:c3:92:92:3c:6e:91:26:91:c9:1c:be:a0:c0:6d:
31:c6:10:16:68:bf:1e:0c:54:39:c4:14:3c:09:c3:
91:fc:e8:d0:d3:39:27:9c:e0:8d:7e:5d:9b:b0:d2:
3b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:33:AD:E7:5A:31:E1:87:28:F7:1A:90:B6:69:85:9F:6E:3B:21:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2eb19305-4b6b-3dd8-b640-36fa23c8e99c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.69.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:2f:a5:28:4b:1d:a5:29:b9:d6:d2:9a:73:6d:21:a5:9b:c4:
77:8c:85:f6:33:3c:9f:b4:39:2a:e3:76:c1:21:69:1c:97:60:
ff:68:52:99:3a:7d:e9:d6:a2:4f:3e:f1:90:8e:d7:9a:00:8b:
cf:63:50:bc:5d:4f:cf:52:0b:cd:21:63:21:72:74:8f:98:c8:
56:36:21:41:73:a6:50:da:36:9b:16:8b:ff:17:f2:2b:70:a1:
0b:69:ae:ab:06:ee:ce:db:81:e0:77:ce:74:f7:e4:32:17:f1:
20:d2:46:dd:58:2d:e2:84:ee:e2:76:b3:3a:a9:a9:de:db:0c:
64:f0:e5:51:ec:b9:f5:1c:7e:b2:bb:8c:63:00:7a:43:5e:1a:
f7:d4:06:45:07:d5:51:0d:e5:92:a1:eb:47:92:f0:49:17:be:
55:c8:6c:15:f6:1c:32:e6:77:6b:e9:ad:8d:ae:d7:85:3a:14:
3f:45:49:aa:3b:f5:24:5f:23:ae:7a:39:4a:4b:05:96:6f:76:
cf:44:7d:d2:bf:3a:ab:1c:b6:d2:b7:4a:4d:b7:a2:84:ba:f8:
64:c8:d7:ff:53:55:d4:6d:a9:19:d3:3c:2e:d1:6d:08:8a:b4:
73:e5:26:2c:8f:20:d3:3a:c4:eb:70:80:95:0d:26:83:16:68:
40:b6:27:7b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8u1vMC9D3dqSm6aQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkwODEyMDAwMFoXDTIyMTAxNDA0MDAwMFowLzEtMCsGA1UEAxMk
YmUxMzY5M2ItOTU5YS00NTE2LWFkYjctMWM2ZGRmZDUxODA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp04jToTpmezONC0DUMfEBRHL9QybzH1/sVZC
1/G9SF6vOl8VEWWAnEHoelIdsYwnyu/m5oxdX2dF8uTqxn7EV1mPo0IY7FLBBwR+
0+9E/b4zk4g+gfloIoDsMuZou5a9dL/4r0KNs2Tm2yx4Rg8EZjxlb+EFS7iahAwp
8NkoDWjSbIGkWkDrSDkA16pPTJl1vrz9hdZK5Na3ZnVvYJ+VfHNlpvTrBPV7DIP4
2EuKYcPbk21OYlD1hiS2Yr8KVC/jl02fe9r3oxcPmOVWZqMazw/Xw5KSPG6RJpHJ
HL6gwG0xxhAWaL8eDFQ5xBQ8CcOR/OjQ0zknnOCNfl2bsNI7PwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOczredaMeGHKPcakLZphZ9uOyHlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMmViMTkzMDUtNGI2Yi0z
ZGQ4LWI2NDAtMzZmYTIzYzhlOTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEkUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAri+lKEsdpSm51tKac20hpZvEd4yF9jM8n7Q5KuN2wSFpHJdg/2hSmTp9
6daiTz7xkI7XmgCLz2NQvF1Pz1ILzSFjIXJ0j5jIVjYhQXOmUNo2mxaL/xfyK3Ch
C2muqwbuztuB4HfOdPfkMhfxINJG3Vgt4oTu4nazOqmp3tsMZPDlUey59Rx+sruM
YwB6Q14a99QGRQfVUQ3lkqHrR5LwSRe+VchsFfYcMuZ3a+mtja7XhToUP0VJqjv1
JF8jrno5SksFlm92z0R90r86qxy20rdKTbeihLr4ZMjX/1NV1G2pGdM8LtFtCIq0
c+UmLI8g0zrE63CAlQ0mgxZoQLYnew==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:15:48 2025 by rpki-client