Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8736a2ad-fd6e-3f24-9314-4641e3c8ee71.roa
File: 8736a2ad-fd6e-3f24-9314-4641e3c8ee71.roa (raw, json)
Hash identifier: KlOwrQ2Hxg6W3rKLsUiMFC7xl1xCrtYMavag3Jlba6U=
Subject key identifier: 08:BA:EC:E7:C6:47:44:87:16:1B:07:D3:16:5F:10:D9:B0:0B:2E:A1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401F0458334EAD1F9C15BA1D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8736a2ad-fd6e-3f24-9314-4641e3c8ee71.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1f:04:58:33:4e:ad:1f:9c:15:ba:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=7f16c3d3-08df-40f1-974f-31901d4a6d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:dc:d3:87:a9:35:34:f3:2d:5a:06:3a:7c:
49:91:57:a7:1f:3c:db:3f:b4:46:24:35:14:fb:6f:
6b:4f:a2:bb:74:5a:df:cc:8d:92:4a:58:c3:4f:d9:
30:49:a8:ca:e6:02:07:71:23:65:21:43:a6:21:bd:
39:cd:c0:67:b3:ab:8a:a6:0a:29:47:dd:f7:57:1d:
a7:a7:50:73:5f:72:72:a1:8a:f1:fe:57:ed:61:1f:
e8:20:1e:34:73:41:42:27:4e:02:09:4e:67:0f:c6:
47:52:d8:b6:e7:b8:c7:3f:62:13:07:7c:64:07:f2:
7f:a3:4a:cb:93:43:3c:8a:55:09:7b:26:fa:ff:a5:
f1:11:ae:93:d2:d9:07:53:cd:5a:f6:49:e1:07:15:
aa:4f:3a:7f:d5:fd:b0:07:20:df:82:88:d9:37:6e:
81:78:52:ed:af:57:2c:36:0c:af:24:d0:b5:81:ce:
60:60:9e:15:8f:6d:be:6b:5a:35:4e:01:8f:65:36:
3e:cd:1c:03:87:a9:14:28:d7:54:90:9d:57:de:d4:
fd:74:56:dd:88:2a:83:61:e5:76:a1:c9:12:78:3c:
07:7b:b2:00:27:56:22:60:b3:45:a9:cb:58:43:d4:
75:dc:36:69:36:72:90:8c:41:ed:40:8b:f3:4e:ff:
21:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BA:EC:E7:C6:47:44:87:16:1B:07:D3:16:5F:10:D9:B0:0B:2E:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8736a2ad-fd6e-3f24-9314-4641e3c8ee71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:c7:85:6d:31:f8:cd:44:cd:ac:ff:3b:fe:9e:8b:f7:3d:3b:
ab:fb:3b:44:7d:0d:64:74:d6:7c:61:6c:40:97:d9:82:29:10:
92:37:53:34:a0:f7:3f:df:b9:e7:61:2e:4b:3f:28:b3:02:3a:
53:8d:36:6b:92:69:3c:51:e4:aa:10:7e:4f:fa:84:46:18:37:
2c:3d:7a:63:e6:c7:74:b4:67:b1:f1:01:4d:ad:59:45:ec:d9:
cf:1b:8b:93:c3:97:58:20:c4:82:6d:38:f9:f1:fa:80:40:82:
64:c9:1b:13:19:df:24:30:d9:e0:bf:45:79:48:24:c7:3b:df:
35:6f:94:6b:4f:2e:1b:22:f9:92:ed:af:31:17:f2:05:aa:3d:
ca:fb:69:59:1e:67:ba:1d:69:f6:ee:07:45:61:e0:91:40:70:
73:2d:14:89:3f:2e:47:0f:a1:56:59:4c:d2:bb:e9:ee:4a:74:
d0:ef:9f:18:9d:b4:d0:46:79:bf:65:b9:ee:16:b3:e3:d9:11:
bc:26:ff:fd:54:1e:2c:a5:d4:3d:56:0f:a6:1e:e8:a5:2e:f7:
8b:2e:97:e1:eb:c0:16:ef:bc:a7:af:7e:a1:66:04:30:42:24:
78:b7:14:c7:7f:87:4f:f7:df:9c:18:18:7c:4e:09:f7:a6:21:
b7:90:8a:2b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAfBFgzTq0fnBW6HQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIwMzEyMDAwMFoXDTIzMDEwODA1MDAwMFowLzEtMCsGA1UEAxMk
N2YxNmMzZDMtMDhkZi00MGYxLTk3NGYtMzE5MDFkNGE2ZDNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLHc04epNTTzLVoGOnxJkVenHzzbP7RGJDUU
+29rT6K7dFrfzI2SSljDT9kwSajK5gIHcSNlIUOmIb05zcBns6uKpgopR933Vx2n
p1BzX3JyoYrx/lftYR/oIB40c0FCJ04CCU5nD8ZHUti257jHP2ITB3xkB/J/o0rL
k0M8ilUJeyb6/6XxEa6T0tkHU81a9knhBxWqTzp/1f2wByDfgojZN26BeFLtr1cs
NgyvJNC1gc5gYJ4Vj22+a1o1TgGPZTY+zRwDh6kUKNdUkJ1X3tT9dFbdiCqDYeV2
ockSeDwHe7IAJ1YiYLNFqctYQ9R13DZpNnKQjEHtQIvzTv8hEQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAi67OfGR0SHFhsH0xZfENmwCy6hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvODczNmEyYWQtZmQ2ZS0z
ZjI0LTkzMTQtNDY0MWUzYzhlZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEoIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEANMeFbTH4zUTNrP87/p6L9z07q/s7RH0NZHTWfGFsQJfZgikQkjdTNKD3
P9+552EuSz8oswI6U402a5JpPFHkqhB+T/qERhg3LD16Y+bHdLRnsfEBTa1ZRezZ
zxuLk8OXWCDEgm04+fH6gECCZMkbExnfJDDZ4L9FeUgkxzvfNW+Ua08uGyL5ku2v
MRfyBao9yvtpWR5nuh1p9u4HRWHgkUBwcy0UiT8uRw+hVllM0rvp7kp00O+fGJ20
0EZ5v2W57haz49kRvCb//VQeLKXUPVYPph7opS73iy6X4evAFu+8p69+oWYEMEIk
eLcUx3+HT/ffnBgYfE4J96Yht5CKKw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:51:37 2025 by rpki-client