Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b2cf73e3-1a3b-34a0-9005-fc4f8db84d8b.roa
File: b2cf73e3-1a3b-34a0-9005-fc4f8db84d8b.roa (raw, json)
Hash identifier: V0xaWYxOOnhE8a/j8wnJpzPkOdTvG+7TaiNiQg+dsxM=
Subject key identifier: 13:EB:E5:37:B8:7D:1E:AE:AF:09:A2:C7:19:51:11:31:B8:2C:2F:B2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD36A32946284E4922728E0C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b2cf73e3-1a3b-34a0-9005-fc4f8db84d8b.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.168.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d3:6a:32:94:62:84:e4:92:27:28:e0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=1207d4dc-d581-4550-9d90-a387d71f96ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:69:1e:2a:0b:e1:5d:fc:ca:09:70:04:ef:
3a:1f:7f:1b:3e:f4:c3:20:bb:43:78:12:98:86:04:
a3:8c:e0:47:e2:c0:dc:62:57:9e:a4:c0:a4:b8:2d:
4f:5d:ed:c4:50:3c:5f:c0:bb:78:7b:32:4a:95:d0:
fe:ad:ce:4c:e6:dc:7b:8f:f6:c0:e2:6c:55:1c:55:
4f:70:bc:20:bf:24:0a:59:97:e0:ca:b8:bd:75:1a:
b7:f3:be:1c:d1:fb:11:57:a6:e4:41:ac:58:2c:17:
75:cb:b3:bd:fc:bf:5b:c2:9e:0b:69:49:c4:a3:b6:
c6:56:b2:f2:ea:30:db:c2:fa:5e:6d:b3:54:ff:69:
5f:53:86:02:6d:b7:33:2e:a7:e8:cf:59:3f:e4:d5:
c7:84:96:e3:a9:11:1f:98:b4:22:ba:dd:59:bb:c1:
81:d6:df:e5:33:13:d3:74:51:c1:fe:21:64:3c:c1:
98:df:75:1c:47:52:9b:c3:73:a1:f0:4d:f1:7d:96:
c2:1d:ac:f8:92:a2:1b:7d:10:23:e7:0d:df:c5:af:
df:b3:94:2d:f7:f7:ca:34:d2:2d:9b:83:a7:79:28:
55:69:f5:36:09:40:58:5b:5a:64:54:77:9c:b5:7b:
bd:0c:e3:2f:d1:79:c0:89:90:1b:e3:27:21:13:20:
0f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EB:E5:37:B8:7D:1E:AE:AF:09:A2:C7:19:51:11:31:B8:2C:2F:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b2cf73e3-1a3b-34a0-9005-fc4f8db84d8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.168.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:a6:4b:31:62:09:5e:fe:76:fa:2b:8b:26:01:0f:df:6b:30:
32:84:d3:d9:7c:f4:33:da:8e:49:80:e4:cd:ca:78:5e:8c:30:
ed:96:0a:85:60:00:e2:60:3a:9f:82:67:cf:71:2d:5e:80:46:
0e:f2:34:f2:d2:90:b3:6e:8a:e1:9a:1c:a4:c2:96:19:b7:75:
a7:6d:e1:69:7f:04:b5:a2:71:ce:b4:5d:a2:7a:01:27:62:e1:
93:0d:ed:98:b7:31:83:ec:76:55:97:24:20:37:98:cf:1a:27:
51:31:d4:76:6c:19:d8:98:cb:f0:42:a5:0e:16:4a:ca:73:cb:
92:e9:d8:55:f9:e3:3c:70:e4:7f:46:37:f6:b9:cb:57:bc:50:
50:64:60:4b:3f:ac:68:2f:f7:1e:eb:0d:42:c6:05:f7:e9:c3:
a2:54:ef:d1:e9:30:2d:92:90:9c:c8:c9:6c:b1:17:d9:6d:f4:
2f:8d:98:dc:5a:1b:d5:4b:3c:a7:21:d6:7b:8a:55:62:e3:b3:
66:b6:47:95:e3:9d:0e:27:a3:37:5c:93:da:99:59:9c:f9:5a:
df:c3:6b:cf:ae:9d:21:cc:f5:9a:29:2e:fd:ab:82:3b:6d:5d:
94:87:32:e2:3a:40:23:20:d7:a5:bc:fc:2c:7f:90:59:a5:c4:
57:2a:a6:eb
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3TajKUYoTkkico4MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUwNjEyMDAwMFoXDTIyMDYxMTA0MDAwMFowLzEtMCsGA1UEAxMk
MTIwN2Q0ZGMtZDU4MS00NTUwLTlkOTAtYTM4N2Q3MWY5NmFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+dpHioL4V38yglwBO86H38bPvTDILtDeBKY
hgSjjOBH4sDcYleepMCkuC1PXe3EUDxfwLt4ezJKldD+rc5M5tx7j/bA4mxVHFVP
cLwgvyQKWZfgyri9dRq3874c0fsRV6bkQaxYLBd1y7O9/L9bwp4LaUnEo7bGVrLy
6jDbwvpebbNU/2lfU4YCbbczLqfoz1k/5NXHhJbjqREfmLQiut1Zu8GB1t/lMxPT
dFHB/iFkPMGY33UcR1Kbw3Oh8E3xfZbCHaz4kqIbfRAj5w3fxa/fs5Qt9/fKNNIt
m4OneShVafU2CUBYW1pkVHectXu9DOMv0XnAiZAb4ychEyAPiwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBPr5Te4fR6urwmixxlRETG4LC+yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYjJjZjczZTMtMWEzYi0z
NGEwLTkwMDUtZmM0ZjhkYjg0ZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEqgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWaZLMWIJXv52+iuLJgEP32swMoTT2Xz0M9qOSYDkzcp4Xoww7ZYKhWAA
4mA6n4Jnz3EtXoBGDvI08tKQs26K4ZocpMKWGbd1p23haX8EtaJxzrRdonoBJ2Lh
kw3tmLcxg+x2VZckIDeYzxonUTHUdmwZ2JjL8EKlDhZKynPLkunYVfnjPHDkf0Y3
9rnLV7xQUGRgSz+saC/3HusNQsYF9+nDolTv0ekwLZKQnMjJbLEX2W30L42Y3Fob
1Us8pyHWe4pVYuOzZrZHleOdDiejN1yT2plZnPla38Nrz66dIcz1miku/auCO21d
lIcy4jpAIyDXpbz8LH+QWaXEVyqm6w==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:23:40 2025 by rpki-client