Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/de9b27b2-c5ea-3278-95b1-c0bf75ff05c4.roa
File: de9b27b2-c5ea-3278-95b1-c0bf75ff05c4.roa (raw, json)
Hash identifier: 9PP7AKpxJMV2+1pZ3KUi/RNb2zeWBE81/fhq3oHLrTA=
Subject key identifier: D8:4C:38:41:77:97:6F:5E:54:4D:AE:DF:B2:C5:7E:68:A7:9B:FC:CC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840BC7CF77485502209A6ADEB00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/de9b27b2-c5ea-3278-95b1-c0bf75ff05c4.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.41.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bc:7c:f7:74:85:50:22:09:a6:ad:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=fcba2d86-cc1a-436c-95ab-5ce32409f5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:75:5f:78:2c:ca:f7:be:9b:4d:0b:11:7a:
9e:d4:cb:0a:8a:ae:d2:63:f0:3b:d5:47:3e:22:5e:
31:9a:5b:b1:ef:47:b0:6b:64:93:bd:93:34:54:77:
90:57:86:b0:2a:1f:b8:04:68:52:85:6c:0e:45:de:
d0:ee:a6:15:ea:1c:f5:98:8d:f4:e6:ce:18:b4:78:
2f:40:ab:6c:8c:fa:59:78:44:de:a1:c3:24:36:5e:
cc:40:09:a7:03:d5:1e:06:98:aa:6d:9d:ad:e7:6e:
1f:b4:80:ae:2b:26:64:48:8c:3b:a1:88:48:1d:3b:
9f:dd:cc:58:44:c0:bf:32:da:9b:ac:61:cb:93:4d:
1c:8c:c9:86:b1:b3:7d:5c:e9:6f:64:46:75:70:b8:
0c:88:86:f6:87:7c:a4:17:9c:1e:b6:3f:60:37:b3:
16:40:5b:ee:91:cf:3b:18:bb:3d:30:36:12:78:29:
ad:9e:34:59:1e:e7:ca:cd:2d:7c:32:d3:5e:ca:35:
87:66:04:b5:7b:ed:eb:4b:ba:2b:b6:bf:00:b5:4f:
60:23:0c:4f:4d:fb:0f:e0:f7:29:ce:2c:95:35:aa:
20:d2:7a:99:ee:2e:20:24:0f:07:f7:29:f8:80:1d:
97:61:8a:d0:95:97:df:1d:59:f6:70:ba:db:f9:6f:
99:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4C:38:41:77:97:6F:5E:54:4D:AE:DF:B2:C5:7E:68:A7:9B:FC:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/de9b27b2-c5ea-3278-95b1-c0bf75ff05c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.41.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:e5:cb:9b:06:0b:e4:6b:7b:1b:78:43:b4:af:20:5e:83:b8:
b4:3c:bf:aa:dc:cd:28:85:50:d9:e0:9e:8d:42:4d:0c:1e:7b:
74:69:98:55:26:fe:5a:37:1d:b1:51:25:50:d0:27:ef:91:b8:
8b:74:e2:4c:f5:f4:d5:99:9d:2f:3c:79:87:29:f0:ad:02:fb:
9a:76:57:02:65:c3:7d:b4:65:7a:f9:93:ae:2d:ba:51:ff:10:
01:0b:d8:c4:36:5c:e1:bb:f5:5a:a3:00:1b:77:62:0c:5f:7c:
cf:b1:00:ae:be:27:3c:63:dc:ef:d4:87:6b:f0:04:19:0b:11:
35:25:3d:6c:b3:cb:2f:2b:75:1f:4b:7a:55:89:f2:17:bf:39:
30:2c:97:e8:67:06:44:aa:f2:74:44:60:f5:c9:f1:3f:89:5f:
e0:95:61:76:2c:49:f0:79:34:55:a3:99:78:10:0f:3c:54:0a:
b5:f9:b6:14:01:96:4b:b1:63:77:8d:3d:77:73:41:17:f2:77:
6e:8d:dc:7d:33:2c:e4:f3:c4:a8:22:86:f6:ce:e6:a4:99:f7:
b0:10:0c:d6:99:4d:41:45:99:d5:46:22:61:88:d4:35:91:1b:
a7:d6:e1:a7:d5:1d:1d:38:04:a1:c4:19:e3:9a:c9:e8:5f:16:
fc:b5:a8:bc
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEC8fPd0hVAiCaat6wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEyODEyMDAwMFoXDTIzMDMwNTA1MDAwMFowLzEtMCsGA1UEAxMk
ZmNiYTJkODYtY2MxYS00MzZjLTk1YWItNWNlMzI0MDlmNWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn251X3gsyve+m00LEXqe1MsKiq7SY/A71Uc+
Il4xmlux70ewa2STvZM0VHeQV4awKh+4BGhShWwORd7Q7qYV6hz1mI305s4YtHgv
QKtsjPpZeETeocMkNl7MQAmnA9UeBpiqbZ2t524ftICuKyZkSIw7oYhIHTuf3cxY
RMC/MtqbrGHLk00cjMmGsbN9XOlvZEZ1cLgMiIb2h3ykF5wetj9gN7MWQFvukc87
GLs9MDYSeCmtnjRZHufKzS18MtNeyjWHZgS1e+3rS7ortr8AtU9gIwxPTfsP4Pcp
ziyVNaog0nqZ7i4gJA8H9yn4gB2XYYrQlZffHVn2cLrb+W+ZpwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNhMOEF3l29eVE2u37LFfminm/zMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZGU5YjI3YjItYzVlYS0z
Mjc4LTk1YjEtYzBiZjc1ZmYwNWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEikwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAneXLmwYL5Gt7G3hDtK8gXoO4tDy/qtzNKIVQ2eCejUJNDB57dGmYVSb+
WjcdsVElUNAn75G4i3TiTPX01ZmdLzx5hynwrQL7mnZXAmXDfbRlevmTri26Uf8Q
AQvYxDZc4bv1WqMAG3diDF98z7EArr4nPGPc79SHa/AEGQsRNSU9bLPLLyt1H0t6
VYnyF785MCyX6GcGRKrydERg9cnxP4lf4JVhdixJ8Hk0VaOZeBAPPFQKtfm2FAGW
S7Fjd409d3NBF/J3bo3cfTMs5PPEqCKG9s7mpJn3sBAM1plNQUWZ1UYiYYjUNZEb
p9bhp9UdHTgEocQZ45rJ6F8W/LWovA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:29:15 2025 by rpki-client