Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ff0c35a-b787-3a2d-8d5a-9e02c86fa7d1.roa
File: 5ff0c35a-b787-3a2d-8d5a-9e02c86fa7d1.roa (raw, json)
Hash identifier: 7Pq1fbPEsFtQcqlSAWT2On9U8cJiWPO0d6pLUSOY2Ig=
Subject key identifier: 34:F9:6C:25:FD:06:30:D8:E6:91:4C:5B:F9:7B:6B:0A:D2:81:BE:B0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F32FFB667093F2B4550ED0240
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ff0c35a-b787-3a2d-8d5a-9e02c86fa7d1.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.253.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:32:ff:b6:67:09:3f:2b:45:50:ed:02:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=15ed552c-467d-4f8b-a851-6a7e7b7be9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:91:10:8f:07:94:d7:7e:49:b2:4e:6c:e7:b7:
7b:ca:62:43:b7:6b:a3:ae:73:6e:57:78:ce:97:ae:
91:7a:ec:67:d7:4a:bb:60:d0:3a:4b:f5:40:b4:18:
93:52:3d:15:8b:a9:ec:24:da:ff:77:75:8a:f4:bb:
5d:3d:40:8a:e5:c9:da:8c:57:ef:3e:9f:c9:da:4c:
49:ca:e4:32:44:60:6c:6a:50:72:b8:db:92:0a:b1:
c7:14:2c:7d:de:20:76:52:86:a6:85:7e:ea:56:f0:
ca:d5:0b:2b:90:34:6a:8a:a3:f8:f3:0d:f2:f8:e9:
2f:ec:de:c4:a3:c2:e9:22:e1:81:a7:43:94:26:ba:
79:8a:91:4b:16:80:f0:09:ef:aa:f9:07:ad:1f:cc:
56:09:35:9d:7d:eb:41:e5:10:ce:91:e4:ca:5e:6c:
c9:02:e6:0c:17:b0:82:31:51:4d:09:b0:7d:bd:ee:
65:45:98:09:42:04:3c:49:1a:8c:5e:1b:93:0a:75:
4b:93:e4:57:a8:22:7f:40:77:1b:3e:fe:99:bb:c8:
d6:8a:f6:7f:b2:02:ea:65:98:d6:43:9e:9a:35:e8:
37:6e:a8:31:fa:b5:e6:60:9a:a1:e0:75:c5:ba:ea:
4b:cd:1c:0f:dc:d0:92:9d:32:27:2a:ea:fd:9a:db:
25:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F9:6C:25:FD:06:30:D8:E6:91:4C:5B:F9:7B:6B:0A:D2:81:BE:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ff0c35a-b787-3a2d-8d5a-9e02c86fa7d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.253.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:60:d5:8d:56:9b:a9:e9:ed:04:77:27:0d:e0:48:72:3b:94:
43:14:86:3e:f6:00:7a:65:16:9d:77:e1:10:e2:4b:81:7b:f1:
88:3c:8f:34:75:0b:cc:bf:5b:05:b8:18:fa:67:e6:82:5b:cf:
9f:9c:44:3b:da:32:62:ca:c6:a8:0c:2b:0b:bd:6e:45:d8:06:
92:94:91:55:89:64:a5:dd:16:bb:88:3a:4c:16:74:51:a5:e0:
48:72:94:b8:fa:b2:b3:f4:dc:6a:ee:b2:3b:1a:ae:1d:92:06:
33:06:ea:20:21:c9:59:e7:ab:0f:99:08:6a:c6:f9:87:b2:dc:
05:36:95:65:4b:f2:0f:8c:db:b7:f9:d0:76:99:d1:60:4a:c6:
31:4b:fe:fe:fe:f1:54:dc:db:20:f9:27:7c:f4:63:b7:85:32:
b3:97:53:35:5b:07:cf:e9:3d:7c:da:ee:77:48:67:7d:ae:c6:
a6:f7:f2:a6:ab:17:4d:29:93:04:ca:dd:d2:76:9f:a3:ac:7f:
82:81:5a:65:37:d6:6c:4a:56:96:20:58:dc:c8:0c:f0:a1:37:
f1:77:f8:cf:9a:5a:56:f6:54:68:64:e5:57:07:44:c6:a1:21:
43:b3:a6:32:6b:47:85:81:9c:c5:ea:a9:76:f8:83:76:14:19:
b4:eb:0f:0a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8y/7ZnCT8rRVDtAkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkwOTEyMDAwMFoXDTIyMTAxNTA0MDAwMFowLzEtMCsGA1UEAxMk
MTVlZDU1MmMtNDY3ZC00ZjhiLWE4NTEtNmE3ZTdiN2JlOWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZEQjweU135Jsk5s57d7ymJDt2ujrnNuV3jO
l66Reuxn10q7YNA6S/VAtBiTUj0Vi6nsJNr/d3WK9LtdPUCK5cnajFfvPp/J2kxJ
yuQyRGBsalByuNuSCrHHFCx93iB2UoamhX7qVvDK1QsrkDRqiqP48w3y+Okv7N7E
o8LpIuGBp0OUJrp5ipFLFoDwCe+q+QetH8xWCTWdfetB5RDOkeTKXmzJAuYMF7CC
MVFNCbB9ve5lRZgJQgQ8SRqMXhuTCnVLk+RXqCJ/QHcbPv6Zu8jWivZ/sgLqZZjW
Q56aNeg3bqgx+rXmYJqh4HXFuupLzRwP3NCSnTInKur9mtslewIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDT5bCX9BjDY5pFMW/l7awrSgb6wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNWZmMGMzNWEtYjc4Ny0z
YTJkLThkNWEtOWUwMmM4NmZhN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEv0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACGDVjVabqentBHcnDeBIcjuUQxSGPvYAemUWnXfhEOJLgXvxiDyPNHUL
zL9bBbgY+mfmglvPn5xEO9oyYsrGqAwrC71uRdgGkpSRVYlkpd0Wu4g6TBZ0UaXg
SHKUuPqys/Tcau6yOxquHZIGMwbqICHJWeerD5kIasb5h7LcBTaVZUvyD4zbt/nQ
dpnRYErGMUv+/v7xVNzbIPknfPRjt4Uys5dTNVsHz+k9fNrud0hnfa7GpvfypqsX
TSmTBMrd0nafo6x/goFaZTfWbEpWliBY3MgM8KE38Xf4z5paVvZUaGTlVwdExqEh
Q7OmMmtHhYGcxeqpdviDdhQZtOsPCg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:11:24 2025 by rpki-client