Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/96904c07-d415-3cf9-a839-d9bf2e63aa5a.roa
File: 96904c07-d415-3cf9-a839-d9bf2e63aa5a.roa (raw, json)
Hash identifier: 9mz/n6pbGrkytOXMYTagn0iGfI71aoODy7GIbnLAfwc=
Subject key identifier: 41:69:0C:20:9D:35:E5:DC:B7:65:8C:F2:6E:73:DA:A0:DE:F4:C8:37
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D80A71A850BAEB4DEE13F3640
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/96904c07-d415-3cf9-a839-d9bf2e63aa5a.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:a7:1a:85:0b:ae:b4:de:e1:3f:36:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=5c2ab042-f398-4523-8a22-5be19a0661a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:54:3e:1a:e9:e2:f1:36:af:c4:21:d8:a6:
01:2a:9a:d9:f1:3d:53:50:42:89:eb:38:12:fe:0e:
50:aa:29:2d:12:d9:38:6f:c4:3e:22:d8:fb:85:56:
72:94:7f:b3:b5:96:cf:bb:9b:56:bf:b0:22:38:7b:
ed:1e:a2:17:00:4f:59:e6:ac:38:28:96:b4:94:53:
36:5c:90:e8:6f:17:ab:32:68:f2:2a:e0:5e:03:16:
09:bd:5d:34:9a:ec:eb:03:ed:1a:2d:b9:3d:f6:47:
fc:25:68:c0:d8:1b:52:fe:c8:1c:4e:7a:04:ef:9d:
15:ed:59:8e:21:ac:bd:df:89:dc:f5:90:d9:3b:42:
6a:1c:5a:12:db:30:a2:9e:4f:13:97:3c:92:88:93:
31:b3:a4:de:0d:ec:0d:c0:1a:8d:e1:8f:03:02:46:
f4:69:6a:7d:f4:0a:77:16:30:a9:08:48:c1:f1:22:
28:e9:2c:18:82:06:9d:b8:f5:26:d9:50:e3:f2:e5:
23:60:7a:56:62:56:dd:b3:c1:7a:9e:07:09:8f:d9:
24:b1:96:1c:67:b1:79:1a:a1:86:b7:e7:e8:4e:3e:
12:ed:b2:25:27:51:7f:0a:ea:1c:f0:9b:ca:07:74:
b6:2a:8c:8a:73:73:7d:3f:ea:ab:31:2f:ce:9b:b7:
b6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:69:0C:20:9D:35:E5:DC:B7:65:8C:F2:6E:73:DA:A0:DE:F4:C8:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/96904c07-d415-3cf9-a839-d9bf2e63aa5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:8a:55:d2:67:d6:9d:15:a9:36:fe:75:5d:ae:c2:62:a0:71:
0b:99:c2:ac:76:0d:50:11:a0:dc:79:e2:f9:bf:44:f7:4f:df:
51:3b:55:70:a8:7a:33:bb:93:a8:ad:2c:2e:66:a5:69:30:6c:
53:f4:10:8d:d9:ef:2e:31:55:9b:8e:02:3e:21:64:c2:c2:0a:
d5:d8:a8:b7:af:38:ad:c9:8f:67:9f:3a:0b:98:79:0c:aa:98:
6f:d3:97:75:36:88:82:4d:4c:eb:fe:ca:9d:4f:fc:ba:04:e5:
c2:84:6e:d2:1d:0b:8b:f9:ce:b1:a0:61:f4:32:69:f9:2f:c0:
e3:47:ea:bd:12:d7:68:0a:11:06:cc:d0:8d:ed:56:c4:4c:ba:
3d:5a:51:1d:60:81:0e:d3:01:d6:f9:ed:61:64:fc:b1:d8:95:
f5:b3:c4:86:7f:72:73:c1:4b:a5:c1:d3:01:45:5b:91:ec:2a:
9c:6c:e7:9a:21:15:26:97:d2:16:b5:58:e3:38:2b:97:81:c5:
2e:d1:b2:54:bb:45:cf:e5:9c:90:d8:d9:56:41:2b:4b:95:8e:
57:e5:87:0a:3d:bc:12:33:f2:99:bc:c6:90:b5:1a:02:bf:bb:
95:c4:64:ef:0d:5c:0e:ee:ee:68:7f:52:e2:f8:fe:39:67:41:
ee:75:4a:99
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2ApxqFC6603uE/NkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQwODA0MDAwMFoXDTIyMDUxMzA0MDAwMFowLzEtMCsGA1UEAxMk
NWMyYWIwNDItZjM5OC00NTIzLThhMjItNWJlMTlhMDY2MWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2RUPhrp4vE2r8Qh2KYBKprZ8T1TUEKJ6zgS
/g5QqiktEtk4b8Q+Itj7hVZylH+ztZbPu5tWv7AiOHvtHqIXAE9Z5qw4KJa0lFM2
XJDobxerMmjyKuBeAxYJvV00muzrA+0aLbk99kf8JWjA2BtS/sgcTnoE750V7VmO
Iay934nc9ZDZO0JqHFoS2zCink8TlzySiJMxs6TeDewNwBqN4Y8DAkb0aWp99Ap3
FjCpCEjB8SIo6SwYggaduPUm2VDj8uUjYHpWYlbds8F6ngcJj9kksZYcZ7F5GqGG
t+foTj4S7bIlJ1F/Cuoc8JvKB3S2KoyKc3N9P+qrMS/Om7e2owIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEFpDCCdNeXct2WM8m5z2qDe9Mg3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOTY5MDRjMDctZDQxNS0z
Y2Y5LWE4MzktZDliZjJlNjNhYTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEnswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbYpV0mfWnRWpNv51Xa7CYqBxC5nCrHYNUBGg3Hni+b9E90/fUTtVcKh6
M7uTqK0sLmalaTBsU/QQjdnvLjFVm44CPiFkwsIK1diot684rcmPZ586C5h5DKqY
b9OXdTaIgk1M6/7KnU/8ugTlwoRu0h0Li/nOsaBh9DJp+S/A40fqvRLXaAoRBszQ
je1WxEy6PVpRHWCBDtMB1vntYWT8sdiV9bPEhn9yc8FLpcHTAUVbkewqnGznmiEV
JpfSFrVY4zgrl4HFLtGyVLtFz+WckNjZVkErS5WOV+WHCj28EjPymbzGkLUaAr+7
lcRk7w1cDu7uaH9S4vj+OWdB7nVKmQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:21:51 2025 by rpki-client