Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9d0d645e-26e4-3d8b-8d71-b31ac94f25a8.roa
File: 9d0d645e-26e4-3d8b-8d71-b31ac94f25a8.roa (raw, json)
Hash identifier: 1pR8nIzkFlo7ajFOdkm5wfufiXbdwn9+RbWK9hy6qkA=
Subject key identifier: A3:BE:78:A5:9D:26:75:E2:BB:D2:58:B5:CB:01:8D:B4:9A:13:9A:08
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E2274B72BDCD682B6E45EA380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9d0d645e-26e4-3d8b-8d71-b31ac94f25a8.roa
Signing time: Sat 04 Jun 2022 12:00:00 +0000
ROA not before: Sat 04 Jun 2022 12:00:00 +0000
ROA not after: Sun 10 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.39.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:22:74:b7:2b:dc:d6:82:b6:e4:5e:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 4 12:00:00 2022 GMT
Not After : Jul 10 04:00:00 2022 GMT
Subject: CN=5e485605-1af7-48c4-911f-714d0ffae91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cd:23:b6:7b:c2:76:06:5e:e4:6c:15:fe:9a:
ef:60:5c:7c:25:16:53:34:9d:ba:19:9a:26:b0:b3:
69:66:87:30:94:e3:2b:d8:79:da:c4:c5:de:ce:00:
b4:dd:f8:19:b8:2e:d2:dc:2b:d1:01:27:10:70:bf:
09:b3:77:e9:71:30:06:f9:8d:48:fc:5a:b6:8a:d5:
ca:fc:ed:0e:c1:2b:9d:8a:c5:6c:dc:09:da:d6:19:
53:7a:42:a7:9c:f4:72:bd:59:0c:10:de:93:80:cf:
1b:b3:2d:54:0d:9b:25:0f:7c:0e:cd:5a:a8:2d:bf:
ac:f1:2a:bf:8f:fd:f1:bd:b0:3d:b9:c0:73:2d:d1:
63:3b:88:6d:35:d0:76:89:6c:3f:14:dd:12:51:0d:
cc:08:00:c4:09:4d:e7:eb:1f:e5:8d:02:92:0c:22:
7b:74:60:49:a0:c2:bd:86:28:f7:8e:48:4f:3f:8f:
69:53:68:ed:79:51:76:17:c4:02:bb:ef:e0:d0:00:
4a:98:a5:24:8d:a9:db:04:e5:de:0b:f6:60:e9:66:
47:7c:90:1e:bb:da:7e:36:66:fe:81:26:72:52:aa:
0c:72:99:a3:52:63:83:f3:2b:0e:a9:43:59:16:23:
d7:45:32:f4:82:55:24:dc:fa:2c:af:73:41:b3:51:
a1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BE:78:A5:9D:26:75:E2:BB:D2:58:B5:CB:01:8D:B4:9A:13:9A:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9d0d645e-26e4-3d8b-8d71-b31ac94f25a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.39.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:d4:d5:fd:4c:7f:78:c8:a0:c0:c9:e9:69:09:66:60:5a:4a:
e8:d1:3a:38:84:dc:77:bb:93:9a:60:a9:87:ff:2e:e8:39:e7:
ca:c5:ac:2f:97:b4:6b:5f:c8:f9:67:05:2b:a9:d3:f5:82:21:
51:7a:7f:ff:fa:a7:b5:fc:6e:6a:ba:f0:c2:1f:b6:87:4f:c2:
4d:ca:b5:41:47:2b:9c:b4:aa:a5:83:8f:4c:a8:32:50:17:3f:
50:66:1b:be:20:70:bf:8e:ec:48:d8:8c:da:70:ec:65:d0:4d:
63:eb:57:43:9c:8b:2f:66:fb:81:52:90:26:12:56:de:81:72:
30:a3:8a:7e:5f:f2:ad:89:39:8d:1e:c7:fe:4e:f4:ca:b8:2e:
20:d9:ec:77:22:bd:f5:ce:d7:7e:57:80:7c:34:9d:71:aa:56:
42:ef:42:86:43:75:1a:14:9a:19:9f:da:40:4e:5e:fe:33:ea:
db:5c:d6:d9:d2:fc:23:28:4b:f9:e9:3e:e6:4e:e3:70:cb:15:
cf:3c:2b:16:07:d1:24:8b:08:7b:97:10:d5:61:55:d4:a6:bf:
e2:6f:61:70:a9:02:ad:ec:92:c9:b7:5f:36:82:82:9a:bb:53:
00:46:2f:8f:66:bc:67:65:66:7a:5c:1f:6f:9c:30:33:74:8b:
b0:dc:f2:16
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4idLcr3NaCtuReo4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYwNDEyMDAwMFoXDTIyMDcxMDA0MDAwMFowLzEtMCsGA1UEAxMk
NWU0ODU2MDUtMWFmNy00OGM0LTkxMWYtNzE0ZDBmZmFlOTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc0jtnvCdgZe5GwV/prvYFx8JRZTNJ26GZom
sLNpZocwlOMr2HnaxMXezgC03fgZuC7S3CvRAScQcL8Js3fpcTAG+Y1I/Fq2itXK
/O0OwSudisVs3Ana1hlTekKnnPRyvVkMEN6TgM8bsy1UDZslD3wOzVqoLb+s8Sq/
j/3xvbA9ucBzLdFjO4htNdB2iWw/FN0SUQ3MCADECU3n6x/ljQKSDCJ7dGBJoMK9
hij3jkhPP49pU2jteVF2F8QCu+/g0ABKmKUkjanbBOXeC/Zg6WZHfJAeu9p+Nmb+
gSZyUqoMcpmjUmOD8ysOqUNZFiPXRTL0glUk3Posr3NBs1GhtwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKO+eKWdJnXiu9JYtcsBjbSaE5oIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOWQwZDY0NWUtMjZlNC0z
ZDhiLThkNzEtYjMxYWM5NGYyNWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEicwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGdTV/Ux/eMigwMnpaQlmYFpK6NE6OITcd7uTmmCph/8u6DnnysWsL5e0
a1/I+WcFK6nT9YIhUXp///qntfxuarrwwh+2h0/CTcq1QUcrnLSqpYOPTKgyUBc/
UGYbviBwv47sSNiM2nDsZdBNY+tXQ5yLL2b7gVKQJhJW3oFyMKOKfl/yrYk5jR7H
/k70yrguINnsdyK99c7XfleAfDSdcapWQu9ChkN1GhSaGZ/aQE5e/jPq21zW2dL8
IyhL+ek+5k7jcMsVzzwrFgfRJIsIe5cQ1WFV1Ka/4m9hcKkCreySybdfNoKCmrtT
AEYvj2a8Z2Vmelwfb5wwM3SLsNzyFg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:00:16 2025 by rpki-client