Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/355fbd7c-952f-3ba9-93a2-2b9373595022.roa
File: 355fbd7c-952f-3ba9-93a2-2b9373595022.roa (raw, json)
Hash identifier: 3TFnLYQAxb/8Z57mJ+K9cBNFuo+BGMs2Tkvydaajp5Y=
Subject key identifier: 3F:DF:B6:B1:66:3B:67:F6:53:1F:35:B4:92:62:54:CE:FC:5C:23:D5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401F8A1B4A48457CB666A446F0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/355fbd7c-952f-3ba9-93a2-2b9373595022.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.40.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1f:8a:1b:4a:48:45:7c:b6:66:a4:46:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=1f074acc-05bc-4170-9279-b222652018fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d1:2c:13:eb:e2:09:23:b4:dd:9e:b4:3b:ef:
fe:99:61:20:23:ac:68:91:9f:cd:fc:57:2d:98:1c:
53:99:5e:ff:80:2f:24:72:6c:06:82:03:96:07:c3:
27:5b:a9:e8:08:de:ed:6a:4a:97:3a:51:7f:2e:67:
8c:94:61:fb:f2:fa:c4:c6:d4:bd:18:50:e6:23:74:
3b:f1:a4:24:08:7e:68:e6:13:a2:2b:7d:da:39:16:
a2:16:3e:30:f8:07:92:54:87:ec:7a:29:6a:bd:18:
9b:9e:94:d7:da:d6:22:48:b0:0a:80:69:f5:1b:a8:
36:fa:81:95:9c:db:94:bf:61:ce:de:fd:9e:6c:c2:
9a:c5:e1:1c:b9:22:9c:32:08:eb:fc:c3:ea:dc:49:
55:8d:7e:e3:94:6e:9b:b8:88:45:3e:0c:51:b0:de:
96:cf:67:4c:0c:c7:da:b6:46:46:31:84:58:a9:c0:
4e:2b:3f:cd:61:51:bc:ad:92:f3:e0:06:38:d9:93:
ea:92:e1:66:ec:52:2d:cb:c7:da:64:69:6c:51:71:
a7:cb:4d:ab:77:47:b6:8a:92:8b:0e:1d:4e:2a:49:
ed:34:0b:2a:8e:be:b5:9e:a5:c6:f3:8b:23:52:90:
9c:67:a1:93:59:b2:a6:85:cb:0a:52:f8:92:36:0b:
56:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DF:B6:B1:66:3B:67:F6:53:1F:35:B4:92:62:54:CE:FC:5C:23:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/355fbd7c-952f-3ba9-93a2-2b9373595022.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.40.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:f4:2b:21:9d:ef:e8:fd:35:a1:37:b8:87:1a:db:fa:96:5b:
66:dd:dd:32:71:12:22:39:05:06:3c:f1:e7:8d:f4:8e:1b:ad:
c1:48:d0:d2:82:47:07:c7:79:9a:ee:3b:8b:50:a2:27:3f:0c:
a0:75:1e:4e:9c:55:34:2f:cf:26:74:19:fa:6c:54:e5:13:9a:
3b:1f:cf:f4:20:52:07:10:43:32:50:71:98:f0:92:6e:40:d7:
18:52:56:51:ba:ea:0b:6e:54:c0:7b:a2:a5:7b:1d:15:7e:c8:
c5:2d:20:57:ff:c9:7d:59:6d:57:d9:82:c4:2c:16:f8:39:26:
e6:c4:7d:bf:3b:2b:02:45:4a:f8:ff:c3:df:80:0d:eb:16:88:
cf:8f:9a:fa:b5:d0:19:92:c1:7d:be:d0:76:39:a5:b7:e0:c9:
b2:69:f8:65:5c:d1:1b:e8:e2:3a:73:fe:68:1c:b7:4a:f3:35:
a3:e8:f9:33:a1:82:9a:e5:d3:36:a9:69:fb:4a:60:ea:70:b4:
58:e0:ce:ea:02:9c:fd:aa:3e:57:f0:72:87:2d:f0:af:0e:43:
7f:02:f3:89:34:11:3c:f6:46:c1:7f:0c:aa:ed:6d:d1:13:d8:
2c:5e:23:3b:7f:19:74:0d:f6:ab:2f:4d:4f:ab:bd:4d:ea:12:
2f:00:f6:ea
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAfihtKSEV8tmakRvAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIwMzEyMDAwMFoXDTIzMDEwODA1MDAwMFowLzEtMCsGA1UEAxMk
MWYwNzRhY2MtMDViYy00MTcwLTkyNzktYjIyMjY1MjAxOGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNEsE+viCSO03Z60O+/+mWEgI6xokZ/N/Fct
mBxTmV7/gC8kcmwGggOWB8MnW6noCN7takqXOlF/LmeMlGH78vrExtS9GFDmI3Q7
8aQkCH5o5hOiK33aORaiFj4w+AeSVIfseilqvRibnpTX2tYiSLAKgGn1G6g2+oGV
nNuUv2HO3v2ebMKaxeEcuSKcMgjr/MPq3ElVjX7jlG6buIhFPgxRsN6Wz2dMDMfa
tkZGMYRYqcBOKz/NYVG8rZLz4AY42ZPqkuFm7FIty8faZGlsUXGny02rd0e2ipKL
Dh1OKkntNAsqjr61nqXG84sjUpCcZ6GTWbKmhcsKUviSNgtWcwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFD/ftrFmO2f2Ux81tJJiVM78XCPVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMzU1ZmJkN2MtOTUyZi0z
YmE5LTkzYTItMmI5MzczNTk1MDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEigwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmvQrIZ3v6P01oTe4hxrb+pZbZt3dMnESIjkFBjzx5430jhutwUjQ0oJH
B8d5mu47i1CiJz8MoHUeTpxVNC/PJnQZ+mxU5ROaOx/P9CBSBxBDMlBxmPCSbkDX
GFJWUbrqC25UwHuipXsdFX7IxS0gV//JfVltV9mCxCwW+Dkm5sR9vzsrAkVK+P/D
34AN6xaIz4+a+rXQGZLBfb7Qdjmlt+DJsmn4ZVzRG+jiOnP+aBy3SvM1o+j5M6GC
muXTNqlp+0pg6nC0WODO6gKc/ao+V/Byhy3wrw5DfwLziTQRPPZGwX8Mqu1t0RPY
LF4jO38ZdA32qy9NT6u9TeoSLwD26g==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:41:59 2025 by rpki-client