Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2f9fa5a-4073-3444-831e-123d3e829216.roa
File: d2f9fa5a-4073-3444-831e-123d3e829216.roa (raw, json)
Hash identifier: yt4Ul/RK0UZZWDcRpDjpyZvf0U23i2558eeGWa0Omfc=
Subject key identifier: E3:67:61:01:DB:FA:27:E3:1E:16:4A:B4:EC:3E:C6:F0:DF:10:4B:3A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD33C571DE14AB24C5D23080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2f9fa5a-4073-3444-831e-123d3e829216.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.164.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:33:c5:71:de:14:ab:24:c5:d2:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=290ce70b-e5b7-4199-af79-01c93220ef73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7a:2d:49:8e:36:42:6e:b3:3d:91:fa:20:32:
af:8e:d3:11:b2:83:6b:5c:0c:6c:27:a1:f1:83:bb:
a0:0b:59:d4:5d:6f:c5:ca:ce:6b:ef:64:2b:48:93:
1d:39:b8:1b:3b:24:97:4c:18:1e:9a:a7:e8:8a:0f:
70:09:ab:4e:fd:a4:29:64:44:8c:95:cd:13:c5:5b:
ce:f6:2c:bc:17:72:a9:d8:a7:35:a1:af:a5:3c:b5:
92:96:9f:a0:94:f4:d7:e7:e2:cc:d5:08:cb:02:23:
f6:9d:37:04:38:b7:ec:9f:d7:21:35:3d:8d:0a:45:
5f:5f:b6:17:e8:5c:ff:e7:84:4e:00:d9:f5:9f:58:
8d:04:e0:3a:e8:71:8f:6e:74:0a:ba:59:18:10:26:
89:80:8a:f1:e0:60:00:d0:07:97:97:5b:9d:f8:41:
ca:f3:4f:7c:d4:e9:6a:46:74:1e:51:ad:92:03:f0:
46:0d:d0:ff:17:28:ad:27:07:3b:d7:c4:2a:d3:f9:
1f:6c:17:a9:e6:43:d6:df:59:9f:a8:e1:13:d8:95:
93:bc:27:4b:80:c5:c8:cf:d9:87:f2:4c:9d:75:16:
a4:a5:08:d8:63:2d:06:f5:69:70:23:18:a7:57:85:
f9:0b:00:cb:74:bb:df:a5:de:4d:d1:2d:28:f4:75:
ab:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:67:61:01:DB:FA:27:E3:1E:16:4A:B4:EC:3E:C6:F0:DF:10:4B:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2f9fa5a-4073-3444-831e-123d3e829216.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.164.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:2f:aa:f1:3d:2a:15:5e:bb:df:da:52:b4:94:de:09:6b:7b:
de:60:44:48:47:43:63:d3:b1:54:34:b0:84:09:a8:9d:b0:a9:
25:47:d2:0e:8c:16:fe:0a:d0:d5:87:22:93:ae:a6:84:55:f1:
32:61:9b:74:ce:db:25:db:ef:ba:7c:af:e0:04:57:84:bd:b1:
c3:c8:86:73:cf:5d:e1:29:5c:40:95:94:4e:e3:2e:e7:9d:c9:
97:12:83:60:bc:21:9c:05:b6:36:60:25:e6:fe:2a:ca:d8:fe:
49:a8:90:2a:ec:92:83:0d:53:50:0e:47:b6:be:ea:d3:32:ba:
36:d2:af:c8:1a:40:39:ab:0e:68:7a:2b:18:1e:f5:06:74:c5:
db:32:e0:d2:a6:dc:d5:4c:52:d3:11:7b:cb:e6:34:5e:0f:1c:
58:01:e4:65:f3:9c:c1:95:06:13:99:be:93:f0:4b:c9:0b:59:
0c:32:23:3c:4d:75:b4:6b:a7:e8:05:c8:c0:ea:c7:32:e1:ea:
b6:ce:4d:bc:5c:0d:73:ce:c4:4f:2e:a2:2b:34:41:1c:e7:d0:
b9:b0:a7:21:8e:f6:c9:2c:4f:fb:f4:41:8c:5d:e8:4b:54:0e:
12:7f:ab:a1:eb:a8:bb:9d:94:19:d1:ff:5c:92:b9:7b:0f:a5:
ba:11:4b:f0
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDy9M8Vx3hSrJMXSMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDEyODA1MDAwMFoXDTIyMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
MjkwY2U3MGItZTViNy00MTk5LWFmNzktMDFjOTMyMjBlZjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXotSY42Qm6zPZH6IDKvjtMRsoNrXAxsJ6Hx
g7ugC1nUXW/Fys5r72QrSJMdObgbOySXTBgemqfoig9wCatO/aQpZESMlc0TxVvO
9iy8F3Kp2Kc1oa+lPLWSlp+glPTX5+LM1QjLAiP2nTcEOLfsn9chNT2NCkVfX7YX
6Fz/54ROANn1n1iNBOA66HGPbnQKulkYECaJgIrx4GAA0AeXl1ud+EHK80981Olq
RnQeUa2SA/BGDdD/FyitJwc718Qq0/kfbBep5kPW31mfqOET2JWTvCdLgMXIz9mH
8kyddRakpQjYYy0G9WlwIxinV4X5CwDLdLvfpd5N0S0o9HWrcQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFONnYQHb+ifjHhZKtOw+xvDfEEs6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDJmOWZhNWEtNDA3My0z
NDQ0LTgzMWUtMTIzZDNlODI5MjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEqQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAly+q8T0qFV6739pStJTeCWt73mBESEdDY9OxVDSwhAmonbCpJUfSDowW
/grQ1Ycik66mhFXxMmGbdM7bJdvvunyv4ARXhL2xw8iGc89d4SlcQJWUTuMu553J
lxKDYLwhnAW2NmAl5v4qytj+SaiQKuySgw1TUA5Htr7q0zK6NtKvyBpAOasOaHor
GB71BnTF2zLg0qbc1UxS0xF7y+Y0Xg8cWAHkZfOcwZUGE5m+k/BLyQtZDDIjPE11
tGun6AXIwOrHMuHqts5NvFwNc87ETy6iKzRBHOfQubCnIY72ySxP+/RBjF3oS1QO
En+roeuou52UGdH/XJK5ew+luhFL8A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:27:21 2025 by rpki-client