Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d6009baf-efbc-38a0-8bc1-9c2a0194f42c.roa
File: d6009baf-efbc-38a0-8bc1-9c2a0194f42c.roa (raw, json)
Hash identifier: 2aX0P8tmMaa9Z9oSgMq2EzAWDTn/d7YdipIh4I+yUhQ=
Subject key identifier: 4F:6D:3A:58:4E:47:88:A4:70:47:1E:05:87:41:B4:CF:11:79:32:D7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD32EAA20B15A8FA52190F500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d6009baf-efbc-38a0-8bc1-9c2a0194f42c.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.196.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d3:2e:aa:20:b1:5a:8f:a5:21:90:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=e959823a-b3e5-49b3-ba2e-90786834cb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e7:ba:0c:0a:48:8a:39:17:d8:d8:da:31:cb:
c1:e6:c0:d5:10:4c:48:88:b0:44:d0:29:fc:a1:97:
2d:32:d7:74:f4:f1:e8:7f:69:c7:f5:23:60:ab:09:
73:bb:83:11:ca:ca:b4:03:d4:b7:cc:98:f9:3f:f4:
a9:84:5f:c4:03:d2:ba:84:3b:9a:fc:44:df:32:6e:
b3:ab:fc:57:9b:9b:9e:07:7f:12:0c:39:c6:c1:fa:
50:01:ef:d8:2e:80:41:db:b0:3d:61:bd:be:fd:4c:
af:f8:98:0a:30:71:86:25:3b:df:6c:e7:2c:05:15:
83:7f:5c:09:47:a0:36:0b:11:cd:cc:c8:b3:bd:54:
e2:97:f3:db:a5:9f:5c:f5:1e:a1:82:68:d4:ba:d0:
15:96:42:77:a1:03:52:a4:c5:d6:65:28:e7:91:23:
b6:eb:fd:24:4c:d8:94:82:30:e6:c4:b5:b7:31:eb:
c3:f5:df:cc:90:16:06:bb:d3:db:73:70:79:ca:35:
f3:a8:2d:63:88:95:f8:73:1b:7f:fc:ac:14:d2:85:
24:85:6e:d5:5a:80:90:ce:52:0e:fc:ac:ba:c4:75:
dd:f8:e5:6d:0c:96:40:4d:76:bb:fa:77:a9:af:a0:
32:96:14:09:47:a8:01:aa:c1:42:cc:84:f5:ff:5d:
2e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6D:3A:58:4E:47:88:A4:70:47:1E:05:87:41:B4:CF:11:79:32:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d6009baf-efbc-38a0-8bc1-9c2a0194f42c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.196.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:d6:d7:f7:2c:71:66:6d:3e:17:b9:5a:5d:f9:5c:c3:b0:f0:
de:92:81:20:a2:49:02:a9:21:41:4d:4d:ee:f0:de:a2:29:76:
5a:79:10:a4:32:88:84:26:6a:62:c8:62:d1:94:42:3d:40:3c:
df:bb:62:1f:aa:42:b5:3d:58:a9:e6:2a:fd:20:d0:68:80:65:
90:c4:9f:58:b3:0d:90:fa:e6:f1:18:8e:a0:32:97:e0:78:6d:
2d:0e:44:a0:af:f5:df:c0:7e:b7:4e:c1:c3:d9:b7:6c:4e:bf:
c3:36:f9:c4:e0:5e:55:0b:4e:3f:b7:54:a9:5f:e9:c0:50:9f:
bb:f8:4b:e5:4b:99:62:ef:a8:58:4c:83:1a:90:9b:78:d6:f3:
0f:a9:8e:64:c2:f1:7a:6f:d6:4c:c1:e0:95:1f:ca:65:f8:32:
1b:ef:07:75:a2:79:e3:03:1c:e9:19:76:e8:94:19:01:a1:84:
f9:87:a0:b7:9c:b1:88:ff:31:d0:6b:7b:4d:df:92:2a:6b:52:
bc:6e:b5:ee:a1:24:d1:60:bf:08:db:81:3d:45:d6:60:c8:2b:
95:15:1d:e1:2f:e6:b3:bd:b4:78:5f:54:9c:d3:18:10:10:43:
f2:b5:45:06:8a:84:eb:c0:da:9d:70:83:4d:cb:dc:92:cf:00:
fe:d1:b1:48
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3TLqogsVqPpSGQ9QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUwNjEyMDAwMFoXDTIyMDYxMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZTk1OTgyM2EtYjNlNS00OWIzLWJhMmUtOTA3ODY4MzRjYjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ee6DApIijkX2NjaMcvB5sDVEExIiLBE0Cn8
oZctMtd09PHof2nH9SNgqwlzu4MRysq0A9S3zJj5P/SphF/EA9K6hDua/ETfMm6z
q/xXm5ueB38SDDnGwfpQAe/YLoBB27A9Yb2+/Uyv+JgKMHGGJTvfbOcsBRWDf1wJ
R6A2CxHNzMizvVTil/PbpZ9c9R6hgmjUutAVlkJ3oQNSpMXWZSjnkSO26/0kTNiU
gjDmxLW3MevD9d/MkBYGu9Pbc3B5yjXzqC1jiJX4cxt//KwU0oUkhW7VWoCQzlIO
/Ky6xHXd+OVtDJZATXa7+nepr6AylhQJR6gBqsFCzIT1/10ugQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFE9tOlhOR4ikcEceBYdBtM8ReTLXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDYwMDliYWYtZWZiYy0z
OGEwLThiYzEtOWMyYTAxOTRmNDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEsQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAdNbX9yxxZm0+F7laXflcw7Dw3pKBIKJJAqkhQU1N7vDeoil2WnkQpDKI
hCZqYshi0ZRCPUA837tiH6pCtT1YqeYq/SDQaIBlkMSfWLMNkPrm8RiOoDKX4Hht
LQ5EoK/138B+t07Bw9m3bE6/wzb5xOBeVQtOP7dUqV/pwFCfu/hL5UuZYu+oWEyD
GpCbeNbzD6mOZMLxem/WTMHglR/KZfgyG+8HdaJ54wMc6Rl26JQZAaGE+Yegt5yx
iP8x0Gt7Td+SKmtSvG617qEk0WC/CNuBPUXWYMgrlRUd4S/ms720eF9UnNMYEBBD
8rVFBoqE68DanXCDTcvcks8A/tGxSA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 18:43:15 2025 by rpki-client