Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b473c95-1046-3d55-8e69-6bae7a3075a2.roa
File: 3b473c95-1046-3d55-8e69-6bae7a3075a2.roa (raw, json)
Hash identifier: wcS53bMmCLqRirUhQqpIbPerxbUQUbRF8QJrYds0pRQ=
Subject key identifier: 2A:09:DD:5D:3E:D6:C5:07:14:4E:8B:E7:E6:F2:93:1C:58:5E:0D:A7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD40E0BA2F09740A6BD931900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b473c95-1046-3d55-8e69-6bae7a3075a2.roa
Signing time: Sat 07 May 2022 12:00:00 +0000
ROA not before: Sat 07 May 2022 12:00:00 +0000
ROA not after: Sun 12 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.76.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d4:0e:0b:a2:f0:97:40:a6:bd:93:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 7 12:00:00 2022 GMT
Not After : Jun 12 04:00:00 2022 GMT
Subject: CN=b304823b-5b8e-493e-8305-8b8037849431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:71:64:3e:98:95:4d:37:18:96:d6:3e:9e:6a:
0f:e1:8f:6e:69:61:37:bb:dc:d0:d9:6a:bc:93:62:
ac:90:bb:51:a3:db:74:b2:44:ee:08:39:c4:08:a2:
e6:f6:24:ed:39:80:6b:ea:1b:0a:61:13:9c:ce:71:
2f:41:7b:15:3f:8e:f0:41:a1:26:64:cd:32:fd:c8:
fa:91:c4:1b:f8:c0:97:32:b2:6b:8d:69:c9:1b:75:
30:a3:b5:c5:77:1e:14:f6:c8:aa:ee:78:bf:0c:c3:
07:cd:11:c2:51:42:81:62:54:19:3a:87:d3:89:2c:
0e:4f:bf:c2:34:3a:4a:79:68:ea:de:42:6d:4c:19:
fb:93:96:fb:db:b8:db:f9:ce:e7:02:c9:97:7c:8a:
dc:c5:be:42:d3:ff:ed:d3:0f:3d:61:61:b2:bf:a4:
f3:cf:29:22:97:ad:f0:49:91:ba:ea:a1:21:cf:4e:
85:73:92:9b:19:ae:9c:aa:ff:cb:85:37:3f:01:ce:
b8:ca:a2:b2:33:8e:e6:a4:26:38:8e:8d:c1:99:5d:
91:fb:ef:a0:12:d9:b2:d5:25:a6:60:f0:ae:d1:fc:
ce:8c:64:27:01:d7:89:45:9c:04:e5:29:9f:09:c0:
e1:d0:c7:14:b1:51:6c:d4:51:a8:b8:6a:bd:14:fc:
cb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:09:DD:5D:3E:D6:C5:07:14:4E:8B:E7:E6:F2:93:1C:58:5E:0D:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b473c95-1046-3d55-8e69-6bae7a3075a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.76.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:32:2d:ab:0d:03:0c:2c:25:dd:ea:4a:30:62:4a:c7:49:04:
8b:c5:44:db:7a:4b:18:e6:1a:f1:40:65:cd:64:8d:3e:36:dc:
46:d5:29:b5:09:3a:50:72:2e:85:23:65:13:e9:94:1a:a9:2f:
1a:56:6e:02:db:1d:16:2a:41:99:25:bb:a3:f1:47:1e:dc:57:
6a:70:eb:a4:9c:88:e9:1c:fb:51:ff:7d:d4:8c:ea:da:74:54:
7c:60:7e:93:40:ba:e0:83:1a:2f:0f:ed:8f:47:0d:ec:3c:4e:
e7:b1:87:6b:96:01:d0:bd:0e:78:33:79:6c:64:9b:e6:b3:a6:
75:1f:45:5d:2f:66:b9:20:5c:3c:7f:29:85:0c:5d:a5:00:88:
65:7b:8d:b0:c6:60:d2:16:e7:57:55:19:44:a2:31:69:04:50:
6d:5a:d3:9d:1a:0e:1c:bc:f3:41:f1:03:4e:7d:5d:74:13:c1:
94:5e:a0:22:39:be:ba:0e:60:1e:a3:c9:8e:a9:16:be:bf:0e:
51:83:68:ac:11:6f:af:9a:13:23:1a:02:36:e6:f0:67:f5:e1:
86:25:82:eb:b2:45:04:90:f3:55:41:b7:89:72:22:04:40:88:
5f:90:84:78:ac:dc:a6:8e:cd:77:85:e7:7e:57:fb:57:12:79:
12:46:7d:6e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3UDgui8JdApr2TGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUwNzEyMDAwMFoXDTIyMDYxMjA0MDAwMFowLzEtMCsGA1UEAxMk
YjMwNDgyM2ItNWI4ZS00OTNlLTgzMDUtOGI4MDM3ODQ5NDMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XFkPpiVTTcYltY+nmoP4Y9uaWE3u9zQ2Wq8
k2KskLtRo9t0skTuCDnECKLm9iTtOYBr6hsKYROcznEvQXsVP47wQaEmZM0y/cj6
kcQb+MCXMrJrjWnJG3Uwo7XFdx4U9siq7ni/DMMHzRHCUUKBYlQZOofTiSwOT7/C
NDpKeWjq3kJtTBn7k5b727jb+c7nAsmXfIrcxb5C0//t0w89YWGyv6Tzzykil63w
SZG66qEhz06Fc5KbGa6cqv/LhTc/Ac64yqKyM47mpCY4jo3BmV2R+++gEtmy1SWm
YPCu0fzOjGQnAdeJRZwE5SmfCcDh0McUsVFs1FGouGq9FPzLmwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCoJ3V0+1sUHFE6L5+bykxxYXg2nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvM2I0NzNjOTUtMTA0Ni0z
ZDU1LThlNjktNmJhZTdhMzA3NWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEkwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAkjItqw0DDCwl3epKMGJKx0kEi8VE23pLGOYa8UBlzWSNPjbcRtUptQk6
UHIuhSNlE+mUGqkvGlZuAtsdFipBmSW7o/FHHtxXanDrpJyI6Rz7Uf991Izq2nRU
fGB+k0C64IMaLw/tj0cN7DxO57GHa5YB0L0OeDN5bGSb5rOmdR9FXS9muSBcPH8p
hQxdpQCIZXuNsMZg0hbnV1UZRKIxaQRQbVrTnRoOHLzzQfEDTn1ddBPBlF6gIjm+
ug5gHqPJjqkWvr8OUYNorBFvr5oTIxoCNubwZ/XhhiWC67JFBJDzVUG3iXIiBECI
X5CEeKzcpo7Nd4Xnflf7VxJ5EkZ9bg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:07:42 2025 by rpki-client