Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a0f93b42-3471-3783-89a9-8c2220141167.roa
File: a0f93b42-3471-3783-89a9-8c2220141167.roa (raw, json)
Hash identifier: POFgViwOmvvXdWVEq/CRj7XjOdc9AcLYH4X5iUirmYo=
Subject key identifier: BC:7B:CC:63:8E:DA:0C:69:1E:5E:F4:C6:7F:0A:86:7A:F3:7E:CC:22
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401C7C5EEFC516DDE55A5199C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a0f93b42-3471-3783-89a9-8c2220141167.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.153.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:7c:5e:ef:c5:16:dd:e5:5a:51:99:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=00702146-8587-4e29-aa27-a8d33b8bdbf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5d:af:b6:01:24:23:1b:0a:5f:70:51:51:80:
6a:8a:a7:d9:41:d2:09:c5:88:e4:fd:e2:66:3a:d6:
a0:35:f5:9d:1f:ff:ec:bf:08:ef:77:2b:fc:02:70:
ec:eb:b6:da:11:a2:97:c1:13:ee:24:1f:a8:a6:a8:
93:93:fa:1a:c8:4f:7e:4e:b9:04:fd:5b:e9:7f:b0:
38:8e:9b:58:30:0e:90:a8:aa:8e:ad:6f:58:e8:24:
b4:59:0a:37:99:99:13:0f:c0:9b:fc:fd:d7:13:98:
de:be:7b:1a:86:fe:05:e4:84:ae:56:9a:74:a2:2b:
fe:91:49:c2:48:2c:c3:34:69:a3:fd:e5:34:86:3c:
d6:4f:9d:c9:6e:33:d4:69:8e:4d:99:b7:d8:ea:3d:
2a:69:1d:f2:f5:0c:24:6e:5d:9d:ad:4e:8a:3f:73:
af:03:dc:7a:6d:d2:6d:8f:11:83:5a:ff:d0:b7:bc:
f6:7c:03:15:4d:01:73:86:57:83:54:03:8d:10:bb:
39:9f:ee:5d:c8:8d:af:61:2e:dc:6a:ae:c2:e0:d8:
09:ec:62:17:13:2a:f1:1f:7a:bb:14:e4:3c:ed:f9:
9e:82:60:48:37:63:50:a6:ea:f6:35:31:f4:b9:1c:
2f:f8:6e:13:0f:c6:f5:09:86:3a:cc:11:50:13:be:
66:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7B:CC:63:8E:DA:0C:69:1E:5E:F4:C6:7F:0A:86:7A:F3:7E:CC:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a0f93b42-3471-3783-89a9-8c2220141167.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.153.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:a7:99:77:56:36:1e:cd:22:7b:9a:a2:af:b3:40:ae:c1:f5:
a9:ad:96:b6:f1:63:0f:99:a5:e9:f2:05:09:71:b7:04:e9:df:
07:91:a7:48:6d:b6:00:36:e2:4e:18:b6:e7:ea:84:0d:1e:3e:
db:1b:42:ab:cf:e1:bc:43:ed:52:07:da:5f:5f:77:7c:38:ce:
69:f5:1f:7d:6a:01:ff:46:e4:0c:22:12:a0:d7:1e:68:99:90:
8b:19:a1:24:b4:55:a3:68:1a:7f:90:e7:11:b4:01:63:65:21:
41:be:29:76:f9:f6:19:26:d1:90:2d:ea:30:88:54:78:67:39:
5b:56:7e:dc:85:3f:da:f9:2b:ce:6b:98:f4:00:3d:6b:76:b6:
3c:37:d5:bc:1c:03:b8:7c:45:54:67:5a:31:65:f8:21:21:d0:
29:d9:23:76:5a:aa:44:ad:78:0e:88:ef:5c:25:b4:64:c6:92:
5b:d5:be:e4:16:a6:0a:69:f2:f4:31:ea:42:c7:17:93:e4:14:
aa:4a:ee:a9:c6:3c:5d:df:59:b1:00:11:6d:56:d5:6f:3b:a6:
73:6f:7e:9e:d0:35:4f:b1:a0:7b:45:73:9a:60:08:6d:79:4d:
bf:de:cf:4a:0a:e3:83:57:3a:7c:8b:34:63:15:f2:2b:ef:17:
65:7e:90:a3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAcfF7vxRbd5VpRmcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIwMjEyMDAwMFoXDTIzMDEwNzA1MDAwMFowLzEtMCsGA1UEAxMk
MDA3MDIxNDYtODU4Ny00ZTI5LWFhMjctYThkMzNiOGJkYmY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl2vtgEkIxsKX3BRUYBqiqfZQdIJxYjk/eJm
OtagNfWdH//svwjvdyv8AnDs67baEaKXwRPuJB+opqiTk/oayE9+TrkE/Vvpf7A4
jptYMA6QqKqOrW9Y6CS0WQo3mZkTD8Cb/P3XE5jevnsahv4F5ISuVpp0oiv+kUnC
SCzDNGmj/eU0hjzWT53JbjPUaY5NmbfY6j0qaR3y9Qwkbl2drU6KP3OvA9x6bdJt
jxGDWv/Qt7z2fAMVTQFzhleDVAONELs5n+5dyI2vYS7caq7C4NgJ7GIXEyrxH3q7
FOQ87fmegmBIN2NQpur2NTH0uRwv+G4TD8b1CYY6zBFQE75m5QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLx7zGOO2gxpHl70xn8KhnrzfswiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYTBmOTNiNDItMzQ3MS0z
NzgzLTg5YTktOGMyMjIwMTQxMTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEpkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAY6eZd1Y2Hs0ie5qir7NArsH1qa2WtvFjD5ml6fIFCXG3BOnfB5GnSG22
ADbiThi25+qEDR4+2xtCq8/hvEPtUgfaX193fDjOafUffWoB/0bkDCISoNceaJmQ
ixmhJLRVo2gaf5DnEbQBY2UhQb4pdvn2GSbRkC3qMIhUeGc5W1Z+3IU/2vkrzmuY
9AA9a3a2PDfVvBwDuHxFVGdaMWX4ISHQKdkjdlqqRK14DojvXCW0ZMaSW9W+5Bam
Cmny9DHqQscXk+QUqkruqcY8Xd9ZsQARbVbVbzumc29+ntA1T7Gge0VzmmAIbXlN
v97PSgrjg1c6fIs0YxXyK+8XZX6Qow==
-----END CERTIFICATE-----
Generated at Sun Jun 15 18:01:56 2025 by rpki-client