Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c47891c-9543-3810-8130-96b53ea8bfca.roa
File: 7c47891c-9543-3810-8130-96b53ea8bfca.roa (raw, json)
Hash identifier: pnSprnRTxwvMzDcZX6Ixze/Opy/UdGYj/G0cDOrc3x8=
Subject key identifier: FA:B9:A1:93:A5:AC:CE:5C:0F:84:DC:4C:56:0C:77:60:29:FF:63:1E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E705551E1C2D8F3FEA52BBD80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c47891c-9543-3810-8130-96b53ea8bfca.roa
Signing time: Sat 02 Jul 2022 12:00:00 +0000
ROA not before: Sat 02 Jul 2022 12:00:00 +0000
ROA not after: Sun 07 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.60.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:70:55:51:e1:c2:d8:f3:fe:a5:2b:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 2 12:00:00 2022 GMT
Not After : Aug 7 04:00:00 2022 GMT
Subject: CN=943a8383-4168-4864-a220-d6d16946e60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:7d:7b:8e:09:4e:d4:1a:b7:7a:d1:6c:4b:
89:2d:fb:ea:ae:33:4b:a9:f5:ef:fc:40:31:5d:c1:
8a:0e:42:b3:dd:c5:96:40:fc:1d:7b:33:29:0d:fe:
25:36:7e:52:95:af:45:6b:ba:36:77:d2:fb:a8:01:
07:32:7f:19:2c:ac:1e:6f:5e:7f:88:ae:a5:bd:47:
87:c4:b8:73:e7:21:ae:bc:b3:53:84:86:41:f7:74:
f9:b7:1c:e9:40:b8:42:2e:73:2b:32:6b:3d:7c:b2:
29:f1:90:0d:cf:bb:a3:c0:2c:2e:91:b3:fe:b5:7a:
0d:29:46:ed:be:cd:6a:90:bd:c9:e6:6e:21:a4:7b:
ab:02:84:0c:1b:54:d1:f4:9f:cd:46:17:0f:f5:20:
b3:75:de:43:12:70:32:9a:e7:23:f8:88:bc:d9:73:
78:2f:46:6e:8b:3a:4c:6a:51:0d:6f:82:0e:72:cd:
87:97:c4:10:32:a8:c3:4e:dd:12:90:26:9d:db:1c:
30:89:11:d1:ba:87:80:5c:bd:db:34:a6:12:42:c0:
16:7d:c0:0f:02:fa:74:dc:b5:11:0e:2f:3a:12:ed:
6c:3e:19:1b:96:13:93:0a:71:a3:8e:58:5a:5d:53:
d1:ab:61:ef:10:18:10:c9:fc:09:6e:6b:cb:6b:46:
52:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B9:A1:93:A5:AC:CE:5C:0F:84:DC:4C:56:0C:77:60:29:FF:63:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c47891c-9543-3810-8130-96b53ea8bfca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.60.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:4d:dc:c5:5a:07:96:81:95:d4:14:84:69:88:9d:7d:58:35:
2f:bb:1f:db:4d:8c:a8:a8:85:32:69:82:29:c5:31:31:ae:3e:
cc:e2:cc:90:a5:b0:54:4f:5a:66:59:e0:09:b9:e9:bc:9c:0e:
38:fb:13:03:3a:37:87:90:d1:d7:1e:0a:40:12:2d:7e:58:82:
75:86:66:9e:c7:04:62:8b:01:7c:8d:22:20:b6:23:52:79:cd:
88:28:19:4c:d9:ea:00:99:43:b2:b1:ee:cf:5a:2a:39:43:e4:
06:04:12:09:e2:c0:48:ab:a1:51:ef:ea:84:8f:8c:81:ae:3c:
7f:70:69:fd:07:24:a9:08:3c:c6:e2:5f:28:bf:82:2f:5f:ae:
b6:40:71:a2:85:bf:f1:1f:a8:6c:c6:64:29:55:79:ae:d8:ab:
53:f5:28:00:8a:ac:dc:8a:3b:71:ca:9e:ed:a0:ac:e8:44:12:
a3:36:e9:59:d5:ca:df:20:c6:db:e0:e4:c8:92:1b:f7:af:1d:
78:53:39:7b:80:23:58:87:a7:ab:fb:59:68:d0:e7:d4:4f:15:
7a:1e:03:21:98:e8:46:c3:15:b8:a6:c4:62:0d:f9:a7:48:65:
68:72:ed:95:25:2f:0c:f1:f6:f3:08:e8:ee:fd:10:be:4f:ad:
c8:47:86:c3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5wVVHhwtjz/qUrvYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcwMjEyMDAwMFoXDTIyMDgwNzA0MDAwMFowLzEtMCsGA1UEAxMk
OTQzYTgzODMtNDE2OC00ODY0LWEyMjAtZDZkMTY5NDZlNjBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL99e44JTtQat3rRbEuJLfvqrjNLqfXv/EAx
XcGKDkKz3cWWQPwdezMpDf4lNn5Sla9Fa7o2d9L7qAEHMn8ZLKweb15/iK6lvUeH
xLhz5yGuvLNThIZB93T5txzpQLhCLnMrMms9fLIp8ZANz7ujwCwukbP+tXoNKUbt
vs1qkL3J5m4hpHurAoQMG1TR9J/NRhcP9SCzdd5DEnAymucj+Ii82XN4L0ZuizpM
alENb4IOcs2Hl8QQMqjDTt0SkCad2xwwiRHRuoeAXL3bNKYSQsAWfcAPAvp03LUR
Di86Eu1sPhkblhOTCnGjjlhaXVPRq2HvEBgQyfwJbmvLa0ZSPwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPq5oZOlrM5cD4TcTFYMd2Ap/2MeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvN2M0Nzg5MWMtOTU0My0z
ODEwLTgxMzAtOTZiNTNlYThiZmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEjwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXk3cxVoHloGV1BSEaYidfVg1L7sf202MqKiFMmmCKcUxMa4+zOLMkKWw
VE9aZlngCbnpvJwOOPsTAzo3h5DR1x4KQBItfliCdYZmnscEYosBfI0iILYjUnnN
iCgZTNnqAJlDsrHuz1oqOUPkBgQSCeLASKuhUe/qhI+Mga48f3Bp/QckqQg8xuJf
KL+CL1+utkBxooW/8R+obMZkKVV5rtirU/UoAIqs3Io7ccqe7aCs6EQSozbpWdXK
3yDG2+DkyJIb968deFM5e4AjWIenq/tZaNDn1E8Veh4DIZjoRsMVuKbEYg35p0hl
aHLtlSUvDPH28wjo7v0Qvk+tyEeGww==
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:15:57 2025 by rpki-client