Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/638ad376-2844-3384-9be9-ee347ea1d8a0.roa
File: 638ad376-2844-3384-9be9-ee347ea1d8a0.roa (raw, json)
Hash identifier: HMlgbvPLbDziwhLHWITCp+qtQTHE7YlSK3Fjaou9R/Y=
Subject key identifier: D4:41:4E:95:CD:33:CD:EE:9A:C1:E5:0B:46:DD:7A:AF:D6:50:59:75
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E1D22540ACADAF5182C578640
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/638ad376-2844-3384-9be9-ee347ea1d8a0.roa
Signing time: Thu 02 Jun 2022 12:00:00 +0000
ROA not before: Thu 02 Jun 2022 12:00:00 +0000
ROA not after: Fri 08 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.112.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1d:22:54:0a:ca:da:f5:18:2c:57:86:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 2 12:00:00 2022 GMT
Not After : Jul 8 04:00:00 2022 GMT
Subject: CN=d81d3808-1947-4b49-9513-f06491565a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:5a:ed:ad:f9:2f:4c:dc:13:21:33:dc:69:
a2:04:b3:3f:df:60:7e:22:67:1b:66:bc:a2:db:cd:
7c:00:1c:21:38:4f:d6:fd:c1:01:1f:0e:c9:62:db:
e8:19:67:77:95:44:b5:af:33:ba:1e:8e:1c:10:9f:
35:94:4b:a4:66:ed:14:8a:53:8b:af:58:c1:cb:82:
ef:ca:74:62:0e:31:c7:30:1f:1b:a8:51:87:24:11:
80:8b:6b:2b:4b:50:4d:12:a9:bf:33:a5:0f:e0:70:
5c:82:d9:88:8d:e0:70:85:53:f5:de:fc:82:38:2c:
75:2b:26:3e:01:ab:e0:15:7a:b6:39:9b:35:17:34:
a5:28:8c:10:7b:e2:8e:a1:21:46:aa:6c:c4:9a:73:
e1:7d:7f:89:47:61:55:a0:b0:f1:87:80:5c:23:2d:
cb:89:15:b3:2d:65:ee:84:fd:6e:36:92:c2:66:50:
17:7b:61:a9:17:43:0c:b8:b0:aa:b0:43:7f:a3:5f:
e3:56:c6:65:18:68:1a:f0:58:b3:cd:67:55:5e:1c:
f7:57:e9:41:78:7b:f6:d0:81:d3:e5:c6:f0:3b:45:
64:fb:9d:1f:85:1c:8a:0b:94:1a:5a:7f:ae:25:f6:
97:3d:ff:e2:0f:8d:d5:27:70:a6:ee:bd:9c:d0:12:
b6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:41:4E:95:CD:33:CD:EE:9A:C1:E5:0B:46:DD:7A:AF:D6:50:59:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/638ad376-2844-3384-9be9-ee347ea1d8a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.112.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:6c:10:03:1c:3d:b8:8c:15:bb:36:21:ea:75:73:ea:9b:67:
cb:e6:0b:ca:48:26:85:eb:1b:b4:65:74:c8:a7:a9:87:9d:8a:
28:56:b1:13:fe:7b:89:34:ae:35:4d:e9:63:5a:66:db:f5:1d:
bc:ce:27:d5:f0:0c:89:96:b5:c4:a1:cd:cc:95:46:99:8b:de:
e5:d2:c6:99:4a:de:16:ea:4b:03:95:22:66:c8:7a:60:b2:8f:
00:5b:a1:f2:ea:fd:2f:d0:4c:5b:62:2e:1a:3f:1d:c0:db:f1:
7d:4d:bd:5c:3c:97:b0:88:d1:4c:ca:3f:02:57:fb:9e:0c:8d:
0e:83:e4:55:e0:93:24:02:09:47:83:44:13:73:4c:de:d1:52:
97:14:9a:8e:e2:0d:da:14:88:13:eb:b7:6f:94:30:2f:3c:ef:
f1:c2:36:d3:fc:3f:71:6d:5e:36:d2:b2:60:ef:49:4f:61:fe:
7c:32:3c:fd:82:79:57:46:00:5f:e4:f2:61:53:5f:cc:eb:b1:
df:81:c2:44:e2:46:ee:e5:03:7a:4b:4a:f1:03:64:ff:37:dd:
cb:d3:dc:8e:2c:bc:a8:f1:18:8d:e2:ac:3d:74:9c:c9:7d:57:
72:e9:3a:1d:df:25:f0:98:8a:74:5b:9a:2e:76:03:20:da:05:
68:55:06:1d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4dIlQKytr1GCxXhkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYwMjEyMDAwMFoXDTIyMDcwODA0MDAwMFowLzEtMCsGA1UEAxMk
ZDgxZDM4MDgtMTk0Ny00YjQ5LTk1MTMtZjA2NDkxNTY1YTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz9a7a35L0zcEyEz3GmiBLM/32B+ImcbZryi
2818ABwhOE/W/cEBHw7JYtvoGWd3lUS1rzO6Ho4cEJ81lEukZu0UilOLr1jBy4Lv
ynRiDjHHMB8bqFGHJBGAi2srS1BNEqm/M6UP4HBcgtmIjeBwhVP13vyCOCx1KyY+
AavgFXq2OZs1FzSlKIwQe+KOoSFGqmzEmnPhfX+JR2FVoLDxh4BcIy3LiRWzLWXu
hP1uNpLCZlAXe2GpF0MMuLCqsEN/o1/jVsZlGGga8FizzWdVXhz3V+lBeHv20IHT
5cbwO0Vk+50fhRyKC5QaWn+uJfaXPf/iD43VJ3Cm7r2c0BK23QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNRBTpXNM83umsHlC0bdeq/WUFl1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNjM4YWQzNzYtMjg0NC0z
Mzg0LTliZTktZWUzNDdlYTFkOGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEnAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMGwQAxw9uIwVuzYh6nVz6ptny+YLykgmhesbtGV0yKeph52KKFaxE/57
iTSuNU3pY1pm2/UdvM4n1fAMiZa1xKHNzJVGmYve5dLGmUreFupLA5UiZsh6YLKP
AFuh8ur9L9BMW2IuGj8dwNvxfU29XDyXsIjRTMo/Alf7ngyNDoPkVeCTJAIJR4NE
E3NM3tFSlxSajuIN2hSIE+u3b5QwLzzv8cI20/w/cW1eNtKyYO9JT2H+fDI8/YJ5
V0YAX+TyYVNfzOux34HCROJG7uUDektK8QNk/zfdy9Pcjiy8qPEYjeKsPXScyX1X
cuk6Hd8l8JiKdFuaLnYDINoFaFUGHQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:20:04 2025 by rpki-client