Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/775857ff-23b0-39a3-b6f8-acac7b38b64a.roa
File: 775857ff-23b0-39a3-b6f8-acac7b38b64a.roa (raw, json)
Hash identifier: nz5Whi+SkzDkLMRUSlx5c7vKtXvJNGaER/3mvSB5drw=
Subject key identifier: 07:11:55:6D:14:E1:D3:19:31:1B:72:92:03:11:37:95:99:5C:82:03
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE43AB3584C8B6EC4AAB43840
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/775857ff-23b0-39a3-b6f8-acac7b38b64a.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.111.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:3a:b3:58:4c:8b:6e:c4:aa:b4:38:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=cac562cb-0d11-413f-9aee-37aada1b5469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:08:94:f7:3d:54:40:fb:af:dc:27:25:ed:13:
b2:26:59:8d:b8:64:9b:c4:16:4e:e6:94:c3:60:1c:
63:90:35:42:44:0f:fb:5d:e6:8d:4c:39:8f:7c:b9:
05:39:c8:d1:01:e7:d1:26:99:02:c8:e6:0a:6d:8c:
ff:54:14:6d:d2:0a:7a:58:c2:9d:0c:e9:00:bc:65:
77:7c:5d:32:73:0a:d5:cd:b7:21:5c:cb:68:19:d4:
1b:94:f5:d3:15:91:8c:e2:74:e1:15:5b:86:31:f3:
ca:ee:6b:58:3d:0b:17:ff:f8:f7:94:cf:9a:62:5d:
6d:44:9f:f9:e1:1d:77:7f:68:25:9c:a8:26:27:aa:
07:e5:5d:6f:38:79:e9:42:fb:68:4a:33:99:af:bf:
72:ca:59:75:8f:58:b9:54:2e:39:ba:67:7d:af:3f:
04:4a:fa:a3:e7:78:20:a4:71:1f:2f:66:ab:c1:a1:
fe:d8:d6:6e:a4:d0:c1:53:41:d9:ca:a1:b2:29:45:
88:49:d0:df:1e:95:79:e6:f7:f3:c4:f4:57:8c:45:
97:a2:ca:d6:1f:b4:85:c5:96:4d:ea:fd:96:25:79:
66:6a:38:9c:c7:b5:05:59:0d:37:c4:85:d7:b9:d6:
ff:36:6a:3c:da:63:7f:5b:f8:3c:f3:fb:b4:2d:d5:
2b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:11:55:6D:14:E1:D3:19:31:1B:72:92:03:11:37:95:99:5C:82:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/775857ff-23b0-39a3-b6f8-acac7b38b64a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.111.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:d6:b3:2a:b5:38:9a:df:14:cf:24:a6:39:1f:a9:19:75:09:
ce:ca:19:d9:12:fc:b6:7d:9c:f2:23:b6:e1:69:d8:fd:6c:bb:
b2:8e:c9:be:41:12:f3:f1:f3:c2:71:f7:8c:34:4b:c9:f7:62:
f2:da:e4:10:cc:90:da:6a:1f:9d:91:1b:8a:41:99:1d:87:5b:
4a:7f:c8:0a:ef:22:a0:50:c1:82:3e:61:93:72:28:cc:e9:07:
80:98:72:0d:13:6f:c3:14:be:35:7c:1e:37:11:cb:4a:e7:62:
4a:c2:af:bb:86:d7:13:b0:96:e1:b5:b5:4b:37:49:1d:1f:22:
c3:5a:db:26:de:a7:a2:1e:da:b7:54:f3:09:7b:42:9b:93:c0:
9c:0f:3d:e1:b6:70:61:9a:64:56:48:61:6d:45:4f:64:d0:a8:
02:a6:d0:49:39:0e:36:5d:54:fd:ca:74:7b:3d:cf:df:9b:40:
2a:4b:e9:97:36:c1:05:34:81:a3:1e:55:d1:ec:af:4b:6c:80:
cb:60:20:2d:f4:23:28:94:79:c4:1e:d8:07:ce:15:5b:fa:fd:
29:06:08:6a:c6:76:d1:86:a7:3d:5f:f9:db:c7:6d:de:e4:37:
22:f8:b2:a5:5c:49:b3:a6:fb:d0:ac:4e:e7:79:e0:a7:49:39:
37:52:0f:50
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzkOrNYTItuxKq0OEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIxMTA1MDAwMFoXDTIyMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
Y2FjNTYyY2ItMGQxMS00MTNmLTlhZWUtMzdhYWRhMWI1NDY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgiU9z1UQPuv3Ccl7ROyJlmNuGSbxBZO5pTD
YBxjkDVCRA/7XeaNTDmPfLkFOcjRAefRJpkCyOYKbYz/VBRt0gp6WMKdDOkAvGV3
fF0ycwrVzbchXMtoGdQblPXTFZGM4nThFVuGMfPK7mtYPQsX//j3lM+aYl1tRJ/5
4R13f2glnKgmJ6oH5V1vOHnpQvtoSjOZr79yyll1j1i5VC45umd9rz8ESvqj53gg
pHEfL2arwaH+2NZupNDBU0HZyqGyKUWISdDfHpV55vfzxPRXjEWXosrWH7SFxZZN
6v2WJXlmajicx7UFWQ03xIXXudb/Nmo82mN/W/g88/u0LdUrOwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAcRVW0U4dMZMRtykgMRN5WZXIIDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNzc1ODU3ZmYtMjNiMC0z
OWEzLWI2ZjgtYWNhYzdiMzhiNjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEm8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAa9azKrU4mt8UzySmOR+pGXUJzsoZ2RL8tn2c8iO24WnY/Wy7so7JvkES
8/HzwnH3jDRLyfdi8trkEMyQ2mofnZEbikGZHYdbSn/ICu8ioFDBgj5hk3IozOkH
gJhyDRNvwxS+NXweNxHLSudiSsKvu4bXE7CW4bW1SzdJHR8iw1rbJt6noh7at1Tz
CXtCm5PAnA894bZwYZpkVkhhbUVPZNCoAqbQSTkONl1U/cp0ez3P35tAKkvplzbB
BTSBox5V0eyvS2yAy2AgLfQjKJR5xB7YB84VW/r9KQYIasZ20YanPV/528dt3uQ3
IviypVxJs6b70KxO53ngp0k5N1IPUA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:03:40 2025 by rpki-client