Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3aba7db9-5e1f-3e31-86ba-678b79e0913a.roa
File: 3aba7db9-5e1f-3e31-86ba-678b79e0913a.roa (raw, json)
Hash identifier: LupdmrHPy3H3P1iKzTkA6BduAZW507rBd5H5gB8VWxw=
Subject key identifier: F0:8E:ED:07:5A:B7:F7:F6:BA:98:82:8B:D6:88:DD:CB:E0:B0:8C:12
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F5987CF52343F39C2B721F0A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3aba7db9-5e1f-3e31-86ba-678b79e0913a.roa
Signing time: Fri 23 Sep 2022 12:00:00 +0000
ROA not before: Fri 23 Sep 2022 12:00:00 +0000
ROA not after: Sat 29 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.248.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:59:87:cf:52:34:3f:39:c2:b7:21:f0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 23 12:00:00 2022 GMT
Not After : Oct 29 04:00:00 2022 GMT
Subject: CN=a1ffca9d-3424-4b86-8ca7-84ff61019064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:ce:c3:a2:2f:c1:cd:cb:e4:25:bf:05:e0:
24:61:60:06:35:11:1b:f4:14:3c:ad:5b:4a:27:e5:
37:44:b0:5a:83:13:f6:b9:ef:c0:a5:92:bf:ca:d3:
be:f9:b3:77:28:ce:10:fd:4b:43:be:3a:39:5f:8f:
4a:97:3c:a5:d7:54:04:5b:82:9f:ed:49:10:84:eb:
9e:1e:b5:8f:d6:c1:32:56:ad:d9:ed:95:f0:f3:2a:
ce:f2:6e:db:4e:90:f7:71:17:3c:fa:63:34:58:b2:
0f:ef:05:f6:c8:d3:8a:05:a1:a3:4e:d9:d7:ad:83:
21:07:fd:d7:52:8e:38:c1:e4:cb:a9:f3:51:5d:c1:
ed:4d:4b:a7:f7:f6:cf:eb:10:3f:36:1f:85:93:60:
de:3e:ed:d8:c4:7b:2e:35:bf:5f:ed:29:92:1a:c0:
66:71:79:40:50:cb:28:56:d4:d1:86:b3:96:7a:6f:
a3:06:48:cc:a1:cd:35:0f:31:b3:4a:ab:ca:b1:ed:
95:03:24:9e:49:bd:45:1b:b1:62:df:e1:1b:53:c3:
b8:9f:72:8d:94:81:fd:bd:6a:c0:38:1f:6c:b8:25:
92:4a:2c:92:fc:03:f2:ca:8c:ad:cf:50:b0:9a:ff:
8f:b0:72:8e:98:a1:3a:13:4e:65:d6:3c:0f:e4:9c:
74:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8E:ED:07:5A:B7:F7:F6:BA:98:82:8B:D6:88:DD:CB:E0:B0:8C:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3aba7db9-5e1f-3e31-86ba-678b79e0913a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.248.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:4d:d8:fd:91:4b:e3:cd:05:dd:66:b2:38:6c:ee:be:88:1a:
a9:ac:e4:08:84:54:37:cb:3e:be:31:5e:a1:80:3c:50:c8:05:
6e:c2:85:05:7c:ba:a8:3a:b3:b0:35:80:d0:55:7f:8e:45:80:
97:a5:a3:aa:14:44:45:78:0c:5c:c6:03:88:2e:e3:d7:d3:a1:
67:9d:2e:78:30:3d:09:7f:8d:f5:94:57:4e:b6:77:8d:a3:cf:
ab:65:ae:d7:86:40:fe:dc:2e:f0:7d:64:c0:88:56:98:76:86:
66:0b:27:ae:da:63:3f:a6:17:16:fa:92:75:a3:e6:a5:d8:58:
0b:27:81:66:1c:b9:f2:95:f2:1c:c5:75:3f:2a:f0:92:56:46:
f3:e8:b4:1f:26:b0:07:cd:31:06:b2:66:10:25:30:f7:93:ee:
9d:77:df:31:05:fa:d0:8f:78:27:8c:7b:15:c9:52:ad:5d:c2:
17:80:04:7d:74:a9:1c:b2:74:c2:08:d9:1c:ea:e8:63:3e:98:
c8:49:f4:02:53:8d:a6:fd:64:d1:ee:a0:38:75:03:30:e3:70:
18:4b:3e:83:fd:4e:37:a4:37:1c:18:2c:68:c8:9a:9e:61:ad:
82:76:f4:de:a4:a3:09:5e:b2:cf:44:64:1c:ea:b5:ea:7b:30:
62:e5:d3:db
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9Zh89SND85wrch8KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkyMzEyMDAwMFoXDTIyMTAyOTA0MDAwMFowLzEtMCsGA1UEAxMk
YTFmZmNhOWQtMzQyNC00Yjg2LThjYTctODRmZjYxMDE5MDY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0DOw6Ivwc3L5CW/BeAkYWAGNREb9BQ8rVtK
J+U3RLBagxP2ue/ApZK/ytO++bN3KM4Q/UtDvjo5X49Klzyl11QEW4Kf7UkQhOue
HrWP1sEyVq3Z7ZXw8yrO8m7bTpD3cRc8+mM0WLIP7wX2yNOKBaGjTtnXrYMhB/3X
Uo44weTLqfNRXcHtTUun9/bP6xA/Nh+Fk2DePu3YxHsuNb9f7SmSGsBmcXlAUMso
VtTRhrOWem+jBkjMoc01DzGzSqvKse2VAySeSb1FG7Fi3+EbU8O4n3KNlIH9vWrA
OB9suCWSSiyS/APyyoytz1Cwmv+PsHKOmKE6E05l1jwP5Jx0CQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPCO7Qdat/f2upiCi9aI3cvgsIwSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvM2FiYTdkYjktNWUxZi0z
ZTMxLTg2YmEtNjc4Yjc5ZTA5MTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEvgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAjE3Y/ZFL480F3WayOGzuvogaqazkCIRUN8s+vjFeoYA8UMgFbsKFBXy6
qDqzsDWA0FV/jkWAl6WjqhRERXgMXMYDiC7j19OhZ50ueDA9CX+N9ZRXTrZ3jaPP
q2Wu14ZA/twu8H1kwIhWmHaGZgsnrtpjP6YXFvqSdaPmpdhYCyeBZhy58pXyHMV1
PyrwklZG8+i0HyawB80xBrJmECUw95PunXffMQX60I94J4x7FclSrV3CF4AEfXSp
HLJ0wgjZHOroYz6YyEn0AlONpv1k0e6gOHUDMONwGEs+g/1ON6Q3HBgsaMianmGt
gnb03qSjCV6yz0RkHOq16nswYuXT2w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:07:45 2025 by rpki-client