Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f9b4f995-075f-3135-b007-84d032f78f48.roa
File: f9b4f995-075f-3135-b007-84d032f78f48.roa (raw, json)
Hash identifier: sGGVq940ijuPJk1EQzeYT3A/uO10QhAX/wbcyYBvrTM=
Subject key identifier: 6E:7E:6E:53:97:43:20:FB:58:28:1D:DF:3A:3F:96:6C:54:7C:E2:8C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E494EB8662307A5D07E4C1820
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f9b4f995-075f-3135-b007-84d032f78f48.roa
Signing time: Sat 18 Jun 2022 12:00:00 +0000
ROA not before: Sat 18 Jun 2022 12:00:00 +0000
ROA not after: Sun 24 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.90.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:49:4e:b8:66:23:07:a5:d0:7e:4c:18:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 18 12:00:00 2022 GMT
Not After : Jul 24 04:00:00 2022 GMT
Subject: CN=997584c3-bf78-43a7-bba0-edae9f7d3fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fb:d8:40:59:69:ee:2e:07:36:48:39:cb:fc:
6e:38:ab:08:b5:9a:f2:c1:2b:57:67:1a:6c:08:bb:
41:33:73:b6:e7:2f:5f:de:cf:c1:ec:11:36:69:1d:
01:00:cd:fc:20:e5:ff:bc:c2:43:02:3c:15:73:16:
85:ce:1c:41:ee:7c:57:67:3e:04:78:a4:cd:17:1d:
b0:3d:b6:7d:99:05:ee:ac:12:e2:0a:67:b3:d2:b2:
d6:3d:00:14:e7:28:84:1b:17:81:81:67:bc:08:21:
da:bd:b8:c2:c5:63:41:5f:bf:ed:9f:de:da:ac:69:
d3:c0:3c:8c:71:50:e0:6f:39:40:4a:fa:e8:75:3a:
a8:9e:78:1a:44:20:84:d5:08:65:75:60:2a:fd:51:
b3:ff:8a:7a:c5:aa:96:5b:87:a9:35:d4:72:63:fd:
b3:fc:be:78:14:34:c5:3e:4b:85:25:f0:6b:9b:63:
55:8e:97:50:d2:f8:fa:f2:b8:2e:5a:e9:6e:55:57:
42:9f:44:63:30:40:8b:84:78:6d:00:fe:1c:6e:4f:
da:69:bd:cb:4d:0e:9d:77:c2:95:ae:54:48:41:2f:
80:17:c9:29:3e:6f:44:1a:d0:67:0b:c5:67:b4:0f:
7e:f4:ba:1a:18:60:28:87:5e:a0:7f:78:c7:e1:a7:
f1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7E:6E:53:97:43:20:FB:58:28:1D:DF:3A:3F:96:6C:54:7C:E2:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f9b4f995-075f-3135-b007-84d032f78f48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.90.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:52:80:4b:f4:27:a1:0a:5a:fa:9c:0b:36:41:eb:88:ac:5d:
c4:b0:ce:48:05:41:b7:f0:f8:4b:4c:d7:cf:e0:bf:0d:2c:af:
b2:e4:e2:f9:55:9f:99:1d:16:e1:27:93:eb:73:f6:e0:65:a0:
21:6b:fd:eb:e5:69:58:b6:a5:17:cb:cc:73:a6:b8:e2:33:73:
e2:db:45:c1:ae:7f:a4:03:f7:d1:7a:90:47:ea:13:76:7d:90:
31:1d:ea:a2:bb:48:45:c0:4b:5c:20:91:7a:93:26:ed:6f:80:
d2:41:3e:99:a8:26:1d:25:85:85:18:56:92:12:22:7c:64:0c:
ba:9e:82:68:48:8f:61:8c:a5:3e:be:28:bd:2c:80:dc:bf:50:
f3:38:1c:e6:ef:22:7b:0a:88:6e:3d:e0:75:b9:3e:5e:8d:55:
ae:4e:31:2e:72:9d:20:7c:8b:07:60:82:ef:04:6a:a3:ec:ce:
64:ab:3a:9c:3e:8c:04:dd:be:d8:8f:3c:8d:f8:0a:d1:ec:5d:
dc:cf:ab:ef:f8:1e:4c:74:72:0c:17:b5:0f:1e:d3:be:e9:b6:
fd:25:91:be:7b:04:9d:6f:37:6a:cc:84:fb:12:0d:af:be:b6:
41:d8:d3:da:3a:77:05:f0:9c:8b:b8:90:a1:84:b4:c0:2e:e2:
fc:3e:8c:1b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5JTrhmIwel0H5MGCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYxODEyMDAwMFoXDTIyMDcyNDA0MDAwMFowLzEtMCsGA1UEAxMk
OTk3NTg0YzMtYmY3OC00M2E3LWJiYTAtZWRhZTlmN2QzZmNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfvYQFlp7i4HNkg5y/xuOKsItZrywStXZxps
CLtBM3O25y9f3s/B7BE2aR0BAM38IOX/vMJDAjwVcxaFzhxB7nxXZz4EeKTNFx2w
PbZ9mQXurBLiCmez0rLWPQAU5yiEGxeBgWe8CCHavbjCxWNBX7/tn97arGnTwDyM
cVDgbzlASvrodTqonngaRCCE1QhldWAq/VGz/4p6xaqWW4epNdRyY/2z/L54FDTF
PkuFJfBrm2NVjpdQ0vj68rguWuluVVdCn0RjMECLhHhtAP4cbk/aab3LTQ6dd8KV
rlRIQS+AF8kpPm9EGtBnC8VntA9+9LoaGGAoh16gf3jH4afxhwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFG5+blOXQyD7WCgd3zo/lmxUfOKMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZjliNGY5OTUtMDc1Zi0z
MTM1LWIwMDctODRkMDMyZjc4ZjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAElowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFlKAS/QnoQpa+pwLNkHriKxdxLDOSAVBt/D4S0zXz+C/DSyvsuTi+VWf
mR0W4SeT63P24GWgIWv96+VpWLalF8vMc6a44jNz4ttFwa5/pAP30XqQR+oTdn2Q
MR3qortIRcBLXCCRepMm7W+A0kE+magmHSWFhRhWkhIifGQMup6CaEiPYYylPr4o
vSyA3L9Q8zgc5u8iewqIbj3gdbk+Xo1Vrk4xLnKdIHyLB2CC7wRqo+zOZKs6nD6M
BN2+2I88jfgK0exd3M+r7/geTHRyDBe1Dx7Tvum2/SWRvnsEnW83asyE+xINr762
QdjT2jp3BfCci7iQoYS0wC7i/D6MGw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:36:59 2025 by rpki-client