Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d57e33f7-50ec-37f3-804c-5b0492293b0e.roa
File: d57e33f7-50ec-37f3-804c-5b0492293b0e.roa (raw, json)
Hash identifier: QZuOKZEBzFYSClREJNm9doJJOc3sAMieJD0kpAXCOvs=
Subject key identifier: DA:79:81:C7:81:1B:AA:DC:45:2B:72:AB:2A:1A:FD:59:78:05:CE:78
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE467DB7C449B9B405666E600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d57e33f7-50ec-37f3-804c-5b0492293b0e.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.246.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:67:db:7c:44:9b:9b:40:56:66:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=59259f93-dccb-43da-b26e-644f45bcaca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f6:3b:3f:0b:1b:52:c5:4c:6b:c1:99:f1:bd:
2c:fe:06:74:e9:e3:dd:38:95:98:36:bb:92:15:4b:
4c:ec:48:2c:72:29:d5:36:44:02:2b:d4:79:8d:5c:
2f:e6:9c:8a:f7:91:9d:db:22:46:bb:93:b7:c0:fe:
99:a8:8c:c6:23:96:44:34:96:82:05:45:8a:c6:c4:
49:17:d2:77:c9:f2:b8:b1:f4:b6:cc:f3:f6:70:51:
9a:8f:d8:9f:0b:21:f8:e5:f1:d6:81:2f:62:b7:15:
05:67:cd:2b:a0:a5:cc:37:2d:f6:fb:dd:b5:42:80:
87:fb:78:91:72:49:37:87:48:d0:c8:4b:82:ec:86:
3e:c0:b6:b4:c6:6c:fd:32:09:8b:c3:d2:1e:a3:29:
00:33:eb:1f:08:f1:e1:6c:32:04:c4:da:98:be:5c:
3a:56:5f:13:58:1e:c3:ab:0d:e3:2f:01:5d:3b:f2:
aa:35:0f:b8:80:61:44:ee:94:88:07:b2:ff:e7:17:
d3:f6:68:e0:0e:f1:f8:2d:e0:5d:53:25:e2:18:8e:
76:9c:3c:a4:0a:cf:38:d2:c4:63:2c:9c:03:65:ad:
03:7e:51:02:82:69:28:f4:f9:91:1b:ba:0c:03:a4:
7e:20:61:4f:4e:b0:eb:b5:80:71:bf:70:f1:ba:b3:
32:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:79:81:C7:81:1B:AA:DC:45:2B:72:AB:2A:1A:FD:59:78:05:CE:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d57e33f7-50ec-37f3-804c-5b0492293b0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.246.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:2f:79:4a:d1:ba:2d:84:01:ed:fc:52:c2:96:ac:73:ff:6c:
a7:e3:87:7d:17:91:7e:bc:eb:42:b1:4b:7c:f6:5c:bd:62:69:
a5:c9:fb:cc:c5:c3:bd:0f:a7:df:93:9c:fa:53:83:86:1d:4d:
a6:f2:3f:f8:3a:9f:cd:ad:4c:99:54:0e:ee:80:b9:6b:96:42:
81:64:44:81:94:46:06:9c:b2:c5:00:05:a1:37:87:79:19:4b:
d1:89:0b:e9:db:73:a6:e3:30:05:65:94:73:35:28:3a:6f:79:
c4:5a:95:19:4e:1f:18:02:41:d8:6d:f5:a5:13:c5:16:a8:3e:
bb:4e:15:6d:c8:9e:48:22:69:51:98:f3:98:d3:ac:6e:e7:fa:
82:95:f3:61:17:9d:b1:c8:11:99:ff:b4:10:3c:9d:f9:bd:3a:
27:f1:0f:1d:4d:31:a7:cc:92:6b:d5:6b:14:b6:48:6c:2c:52:
60:ac:de:d3:94:f0:11:d7:14:09:9b:6a:e5:25:28:95:d8:88:
21:d4:33:fb:88:f4:e3:eb:7c:dc:cc:97:f7:e6:07:15:b4:24:
2b:bb:1b:02:6c:24:d6:d9:2f:b6:42:6c:2d:19:60:cd:60:f5:
dd:08:a3:0d:a7:65:cb:2b:0c:53:59:ee:6b:b3:7a:e0:b2:34:
b4:f5:dd:82
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzkZ9t8RJubQFZm5gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIxMTA1MDAwMFoXDTIyMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
NTkyNTlmOTMtZGNjYi00M2RhLWIyNmUtNjQ0ZjQ1YmNhY2EyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfY7PwsbUsVMa8GZ8b0s/gZ06ePdOJWYNruS
FUtM7EgscinVNkQCK9R5jVwv5pyK95Gd2yJGu5O3wP6ZqIzGI5ZENJaCBUWKxsRJ
F9J3yfK4sfS2zPP2cFGaj9ifCyH45fHWgS9itxUFZ80roKXMNy32+921QoCH+3iR
ckk3h0jQyEuC7IY+wLa0xmz9MgmLw9IeoykAM+sfCPHhbDIExNqYvlw6Vl8TWB7D
qw3jLwFdO/KqNQ+4gGFE7pSIB7L/5xfT9mjgDvH4LeBdUyXiGI52nDykCs840sRj
LJwDZa0DflECgmko9PmRG7oMA6R+IGFPTrDrtYBxv3DxurMyTwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNp5gceBG6rcRStyqyoa/Vl4Bc54MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDU3ZTMzZjctNTBlYy0z
N2YzLTgwNGMtNWIwNDkyMjkzYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEvYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmi95StG6LYQB7fxSwpasc/9sp+OHfReRfrzrQrFLfPZcvWJppcn7zMXD
vQ+n35Oc+lODhh1NpvI/+Dqfza1MmVQO7oC5a5ZCgWREgZRGBpyyxQAFoTeHeRlL
0YkL6dtzpuMwBWWUczUoOm95xFqVGU4fGAJB2G31pRPFFqg+u04VbcieSCJpUZjz
mNOsbuf6gpXzYRedscgRmf+0EDyd+b06J/EPHU0xp8ySa9VrFLZIbCxSYKze05Tw
EdcUCZtq5SUoldiIIdQz+4j04+t83MyX9+YHFbQkK7sbAmwk1tkvtkJsLRlgzWD1
3QijDadlyysMU1nua7N64LI0tPXdgg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:10:34 2025 by rpki-client