Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a7337ad6-0086-3e7d-927b-30cf043d8135.roa
File: a7337ad6-0086-3e7d-927b-30cf043d8135.roa (raw, json)
Hash identifier: v5hIT6eRXmJknXymOb4Uv+f+bRiL5QpLISsP82NEqlY=
Subject key identifier: 12:36:E0:94:BC:1F:55:2D:30:53:E7:9C:B5:41:7D:CB:D6:69:B8:08
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DCEF73DF3EC96F32CB88AABA0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a7337ad6-0086-3e7d-927b-30cf043d8135.roa
Signing time: Thu 05 May 2022 12:00:00 +0000
ROA not before: Thu 05 May 2022 12:00:00 +0000
ROA not after: Fri 10 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ce:f7:3d:f3:ec:96:f3:2c:b8:8a:ab:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 5 12:00:00 2022 GMT
Not After : Jun 10 04:00:00 2022 GMT
Subject: CN=1c0fa8b5-3beb-4772-869c-cb87b816101b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:9f:f7:cf:4d:59:d1:0c:18:c1:12:c7:74:
9f:93:63:ca:1b:5b:3f:af:9d:79:1f:4a:08:c5:82:
d2:eb:32:2f:a4:e5:e5:76:cc:7f:86:6f:23:bf:f8:
6b:a1:20:c4:38:6a:05:e5:07:b2:5b:50:c1:06:ce:
80:94:3b:44:f4:e7:f3:fe:c1:c5:13:41:4b:cf:a6:
5c:34:ef:18:e7:e8:ed:03:31:a0:49:4b:b9:1a:8e:
17:dc:df:ad:a9:48:05:d9:50:49:23:7d:c2:4f:d3:
2c:ec:a9:83:52:25:01:7e:30:a8:9a:7e:b4:6e:17:
04:f8:2f:32:43:4c:67:0f:cd:c8:ee:07:a8:30:31:
8f:f8:10:da:4d:0c:b3:56:25:61:f1:fa:33:35:e4:
24:f9:bc:29:af:4d:d5:af:cc:d0:39:5b:87:a4:fa:
1b:9c:0b:6c:dd:02:97:cc:74:b0:9b:b1:06:4a:8e:
49:b5:fd:5f:9e:d4:bb:6e:e0:77:8b:65:95:23:f3:
a6:e1:3b:0a:72:ee:ca:da:9a:e7:ac:41:fb:9e:80:
2e:c1:b6:91:ee:86:54:d3:6d:9d:84:d4:80:4a:d9:
aa:58:9e:ab:3b:7b:c3:c3:68:f9:57:9a:1a:59:70:
2b:10:8e:65:2d:71:eb:a7:8d:f6:f2:cb:8c:e5:00:
5e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:36:E0:94:BC:1F:55:2D:30:53:E7:9C:B5:41:7D:CB:D6:69:B8:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a7337ad6-0086-3e7d-927b-30cf043d8135.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:86:cf:35:1e:b4:50:06:69:13:d4:a6:97:cc:b6:2e:c7:48:
f1:a0:e3:b3:ac:d3:b3:41:64:bf:d9:d1:c0:e3:2e:33:0c:c7:
1e:d3:d8:09:64:ea:a5:d3:d7:3d:19:22:7e:f8:cd:17:2d:dc:
a0:ce:54:5c:37:26:c7:30:29:fb:fc:f4:af:20:2e:2e:a8:53:
a9:b9:7d:2e:f3:64:96:a2:4a:46:6a:d8:b7:de:be:1c:9e:00:
cc:3c:de:a5:26:e2:b7:fd:5b:2c:09:80:65:c1:c2:b5:35:7d:
2e:81:50:eb:fd:99:a1:34:59:a6:33:d3:d7:eb:63:9f:75:30:
23:96:aa:e8:22:db:ab:80:cc:b9:71:07:53:26:65:0d:86:33:
36:c3:9f:ed:6b:6b:7e:64:af:b9:2a:f6:ce:7b:ce:03:94:d7:
1e:c2:a6:16:5e:d3:dd:6c:9d:80:bd:a0:bc:73:94:d0:a5:5f:
37:3d:21:79:ce:de:50:6c:66:98:bd:c5:3e:ac:2a:f4:76:82:
ba:1a:74:b1:37:10:c3:ee:39:1e:16:aa:d9:3d:14:7d:00:fe:
32:1c:1c:1b:46:3e:5a:e2:ee:89:e3:e1:db:a7:a9:4a:3b:db:
e7:30:98:a5:72:e2:47:1b:41:d5:41:e7:1b:e8:f1:da:b6:59:
f3:83:bd:3c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3O9z3z7JbzLLiKq6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUwNTEyMDAwMFoXDTIyMDYxMDA0MDAwMFowLzEtMCsGA1UEAxMk
MWMwZmE4YjUtM2JlYi00NzcyLTg2OWMtY2I4N2I4MTYxMDFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+mf989NWdEMGMESx3Sfk2PKG1s/r515H0oI
xYLS6zIvpOXldsx/hm8jv/hroSDEOGoF5QeyW1DBBs6AlDtE9Ofz/sHFE0FLz6Zc
NO8Y5+jtAzGgSUu5Go4X3N+tqUgF2VBJI33CT9Ms7KmDUiUBfjComn60bhcE+C8y
Q0xnD83I7geoMDGP+BDaTQyzViVh8fozNeQk+bwpr03Vr8zQOVuHpPobnAts3QKX
zHSwm7EGSo5Jtf1fntS7buB3i2WVI/Om4TsKcu7K2prnrEH7noAuwbaR7oZU022d
hNSAStmqWJ6rO3vDw2j5V5oaWXArEI5lLXHrp4328suM5QBeRwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBI24JS8H1UtMFPnnLVBfcvWabgIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYTczMzdhZDYtMDA4Ni0z
ZTdkLTkyN2ItMzBjZjA0M2Q4MTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEpgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgYbPNR60UAZpE9Sml8y2LsdI8aDjs6zTs0Fkv9nRwOMuMwzHHtPYCWTq
pdPXPRkifvjNFy3coM5UXDcmxzAp+/z0ryAuLqhTqbl9LvNklqJKRmrYt96+HJ4A
zDzepSbit/1bLAmAZcHCtTV9LoFQ6/2ZoTRZpjPT1+tjn3UwI5aq6CLbq4DMuXEH
UyZlDYYzNsOf7WtrfmSvuSr2znvOA5TXHsKmFl7T3WydgL2gvHOU0KVfNz0hec7e
UGxmmL3FPqwq9HaCuhp0sTcQw+45Hhaq2T0UfQD+MhwcG0Y+WuLuiePh26epSjvb
5zCYpXLiRxtB1UHnG+jx2rZZ84O9PA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 13:25:56 2025 by rpki-client