Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/014a2473-f2ea-30dd-a272-5e8ce19bebe6.roa
File: 014a2473-f2ea-30dd-a272-5e8ce19bebe6.roa (raw, json)
Hash identifier: /H/RqgUj2Arr4AYP/GLd0m9U/InIj+bO+HNnCVX7nkA=
Subject key identifier: BF:27:24:22:3C:1E:9D:B5:EE:67:F0:5C:6D:63:44:85:2E:6A:BD:FC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D3240424411DAFDEDC871B780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/014a2473-f2ea-30dd-a272-5e8ce19bebe6.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.35.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:40:42:44:11:da:fd:ed:c8:71:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=c36ffda6-3276-45e0-b951-68e7b5bf4dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:3f:db:86:e5:ff:ae:8b:0c:2f:9b:38:ce:
47:e2:e6:96:ec:f8:10:cb:f7:d9:9e:b4:41:f3:0e:
12:f4:db:88:4d:20:e9:06:39:70:85:95:98:20:1b:
ca:af:37:3b:48:1c:23:0f:e0:d2:3b:8f:31:10:8f:
85:3c:86:cf:7b:40:85:73:b4:3c:1c:25:ac:22:9f:
cc:92:0b:89:3e:87:1d:d4:7b:d0:90:eb:cb:7a:36:
5f:f4:8c:f1:b7:d2:f5:b0:d6:60:2d:b8:7d:28:45:
5f:ec:01:19:18:b2:d7:80:99:af:51:30:c3:c9:aa:
af:48:07:28:03:c1:6f:63:d4:8a:4f:64:2f:79:9b:
9f:5f:66:5f:66:f4:82:d6:06:5d:98:ef:a8:d7:31:
95:e3:ff:fb:0a:f7:c2:86:f0:15:46:23:b0:cb:9a:
06:6d:a9:c0:e9:a4:37:d9:40:ea:9f:38:2e:17:d3:
82:81:c7:35:e3:f1:17:34:5b:11:26:5b:55:ea:b8:
1a:9f:50:f3:6c:96:62:19:94:84:5b:c3:a2:cc:02:
c1:42:59:d6:0e:eb:6d:fc:e9:84:4d:6f:2d:03:2e:
c0:30:34:ac:48:38:eb:5e:ef:cf:68:1a:74:a9:c1:
cc:5f:d8:83:c1:d5:ad:63:fa:42:a3:b1:0c:f0:73:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:27:24:22:3C:1E:9D:B5:EE:67:F0:5C:6D:63:44:85:2E:6A:BD:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/014a2473-f2ea-30dd-a272-5e8ce19bebe6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.35.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:1a:fa:fa:c1:4d:66:55:cd:c3:5d:01:f4:3d:90:8d:e4:1f:
19:f1:22:9e:9e:4b:f3:6a:bf:35:c0:10:29:82:b2:92:7e:42:
1e:f4:91:2b:04:39:02:67:3d:68:1f:35:3d:81:e7:38:06:36:
2e:72:ee:60:31:cd:cf:dd:88:37:d0:2a:bd:c7:b0:93:f8:c9:
05:09:fa:d3:f5:20:74:c9:c6:e3:1f:20:d3:54:90:c5:5e:97:
fa:d2:ab:8a:e7:59:62:37:cf:4d:36:24:43:a0:20:81:ad:7e:
5d:90:8f:e1:1f:87:36:6f:88:d8:65:be:12:83:6d:81:6e:7d:
d9:9b:0b:7e:f1:89:1d:e9:4c:9f:de:a5:1b:86:30:57:db:aa:
73:65:08:7c:18:d1:bf:15:8c:bd:f1:9b:ae:4c:57:ee:9f:4e:
47:9e:06:98:dc:8d:57:db:70:3b:df:23:a5:e7:c3:1d:86:7a:
62:da:df:49:37:39:b3:55:08:f2:d1:cd:10:ca:89:8d:1f:be:
ff:0f:37:f9:8b:21:ba:5a:8b:9e:67:62:0a:93:ee:94:d1:1e:
de:80:10:64:5f:05:39:59:87:64:91:89:6e:d0:07:73:d5:78:
fc:b6:48:92:22:d8:e3:e8:87:b3:67:af:58:06:72:18:9c:80:
6a:41:c7:3b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0yQEJEEdr97chxt4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
YzM2ZmZkYTYtMzI3Ni00NWUwLWI5NTEtNjhlN2I1YmY0ZGNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4c/24bl/66LDC+bOM5H4uaW7PgQy/fZnrRB
8w4S9NuITSDpBjlwhZWYIBvKrzc7SBwjD+DSO48xEI+FPIbPe0CFc7Q8HCWsIp/M
kguJPocd1HvQkOvLejZf9Izxt9L1sNZgLbh9KEVf7AEZGLLXgJmvUTDDyaqvSAco
A8FvY9SKT2QveZufX2ZfZvSC1gZdmO+o1zGV4//7CvfChvAVRiOwy5oGbanA6aQ3
2UDqnzguF9OCgcc14/EXNFsRJltV6rgan1DzbJZiGZSEW8OizALBQlnWDutt/OmE
TW8tAy7AMDSsSDjrXu/PaBp0qcHMX9iDwdWtY/pCo7EM8HMHHwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFL8nJCI8Hp217mfwXG1jRIUuar38MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMDE0YTI0NzMtZjJlYS0z
MGRkLWEyNzItNWU4Y2UxOWJlYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEiMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEApxr6+sFNZlXNw10B9D2QjeQfGfEinp5L82q/NcAQKYKykn5CHvSRKwQ5
Amc9aB81PYHnOAY2LnLuYDHNz92IN9Aqvcewk/jJBQn60/UgdMnG4x8g01SQxV6X
+tKriudZYjfPTTYkQ6Agga1+XZCP4R+HNm+I2GW+EoNtgW592ZsLfvGJHelMn96l
G4YwV9uqc2UIfBjRvxWMvfGbrkxX7p9OR54GmNyNV9twO98jpefDHYZ6YtrfSTc5
s1UI8tHNEMqJjR++/w83+YshulqLnmdiCpPulNEe3oAQZF8FOVmHZJGJbtAHc9V4
/LZIkiLY4+iHs2evWAZyGJyAakHHOw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:56:33 2025 by rpki-client