Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/060d1a6b-e387-3e7d-a513-ddb0c79e7168.roa
File: 060d1a6b-e387-3e7d-a513-ddb0c79e7168.roa (raw, json)
Hash identifier: CujX0ICKcfjeZyG0A9S/ind1IJXeZjoPZIeCX5kPqpc=
Subject key identifier: 04:F5:70:99:CA:D7:BF:4E:3A:93:2E:F3:8A:31:87:2D:B6:8C:E2:83
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA3E3C294476FDECC77C8DDC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/060d1a6b-e387-3e7d-a513-ddb0c79e7168.roa
Signing time: Thu 20 Oct 2022 12:00:00 +0000
ROA not before: Thu 20 Oct 2022 12:00:00 +0000
ROA not after: Fri 25 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.140.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a3:e3:c2:94:47:6f:de:cc:77:c8:dd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 20 12:00:00 2022 GMT
Not After : Nov 25 05:00:00 2022 GMT
Subject: CN=158dd3bb-ee39-40dd-b2ed-8e50ebf3c494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9b:9b:11:7d:54:24:2a:65:f1:bd:1c:e7:25:
3a:f3:93:49:c4:00:70:b1:25:22:45:cd:f8:64:cf:
04:ea:e3:71:98:e3:84:96:05:e4:8c:47:b2:a9:e9:
27:f4:01:74:8d:26:50:e3:c4:e8:ab:4b:73:dc:1b:
ef:ba:d3:61:70:d0:10:aa:ee:b0:6f:f1:11:e6:b7:
6e:09:23:15:be:00:66:56:bc:76:73:15:89:b6:de:
8d:15:80:81:40:88:41:24:8f:61:e1:90:57:7c:8f:
01:be:4d:66:48:de:8b:c2:17:65:01:33:9d:d5:c7:
ab:82:a4:a8:e0:65:a2:24:e8:14:fd:94:95:ee:9e:
31:7f:59:34:d7:56:30:e5:08:6b:87:41:4d:78:44:
db:2d:4d:ab:2a:76:73:0b:d8:92:15:9e:e9:b7:86:
fb:34:d8:31:4b:76:43:ae:e0:a7:9f:bc:1c:4c:5a:
e8:90:76:7f:07:b2:9e:32:2e:f8:c3:23:4c:c2:f9:
0e:33:dc:83:f0:d5:f6:86:37:a4:90:15:c4:11:7a:
31:f8:1a:bd:dd:d6:17:1f:49:c3:21:37:10:8a:f1:
9a:d6:ea:05:f9:bb:91:be:26:fc:7d:31:42:0d:ef:
b5:20:98:d2:7f:8a:f5:6b:51:fd:06:dd:a5:80:54:
ef:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F5:70:99:CA:D7:BF:4E:3A:93:2E:F3:8A:31:87:2D:B6:8C:E2:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/060d1a6b-e387-3e7d-a513-ddb0c79e7168.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.140.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:c1:ed:e2:ac:59:44:ed:8f:8d:ce:74:66:0d:ea:a6:d6:76:
60:4c:79:af:65:4f:24:85:cd:59:d9:f9:4c:b4:f9:bd:e0:3f:
0f:10:32:b3:35:49:f2:21:78:a0:fc:cf:d7:71:0c:19:ed:ed:
8a:25:d6:5d:8d:80:d8:7a:f9:e2:2a:7c:8e:9b:34:78:81:0a:
ca:03:42:0e:52:94:2f:34:c1:7f:8a:13:ce:58:67:e5:7f:52:
1b:65:92:2b:60:29:e4:1c:be:fe:c4:07:22:43:e0:c5:da:c4:
89:ed:66:4c:78:71:b7:fb:dc:55:45:e3:3c:07:c2:30:ff:ca:
fb:63:7d:17:91:48:99:7b:32:54:ac:28:f4:c4:ec:d3:8b:8c:
29:91:53:ed:91:1a:e4:e8:99:29:46:b9:7a:8e:03:85:bb:5d:
c4:40:3e:f1:ce:eb:ab:b6:45:28:74:20:28:1e:55:b5:95:cc:
42:fa:74:b3:67:ec:dd:5b:20:4a:a1:31:50:4f:c1:2b:1a:96:
9a:bd:0c:33:ab:1e:e6:27:1d:78:31:f1:45:b3:ae:6b:fb:71:
73:0a:de:72:99:60:93:4d:72:c3:ca:e6:35:e7:0f:ba:5c:2a:
71:b5:59:35:47:a7:24:ea:da:08:7e:10:8a:1f:ee:b5:d1:c3:
79:05:e1:e9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+j48KUR2/ezHfI3cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAyMDEyMDAwMFoXDTIyMTEyNTA1MDAwMFowLzEtMCsGA1UEAxMk
MTU4ZGQzYmItZWUzOS00MGRkLWIyZWQtOGU1MGViZjNjNDk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JubEX1UJCpl8b0c5yU685NJxABwsSUiRc34
ZM8E6uNxmOOElgXkjEeyqekn9AF0jSZQ48Toq0tz3BvvutNhcNAQqu6wb/ER5rdu
CSMVvgBmVrx2cxWJtt6NFYCBQIhBJI9h4ZBXfI8Bvk1mSN6LwhdlATOd1cergqSo
4GWiJOgU/ZSV7p4xf1k011Yw5Qhrh0FNeETbLU2rKnZzC9iSFZ7pt4b7NNgxS3ZD
ruCnn7wcTFrokHZ/B7KeMi74wyNMwvkOM9yD8NX2hjekkBXEEXox+Bq93dYXH0nD
ITcQivGa1uoF+buRvib8fTFCDe+1IJjSf4r1a1H9Bt2lgFTvJQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAT1cJnK179OOpMu84oxhy22jOKDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMDYwZDFhNmItZTM4Ny0z
ZTdkLWE1MTMtZGRiMGM3OWU3MTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEowwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAusHt4qxZRO2Pjc50Zg3qptZ2YEx5r2VPJIXNWdn5TLT5veA/DxAyszVJ
8iF4oPzP13EMGe3tiiXWXY2A2Hr54ip8jps0eIEKygNCDlKULzTBf4oTzlhn5X9S
G2WSK2Ap5By+/sQHIkPgxdrEie1mTHhxt/vcVUXjPAfCMP/K+2N9F5FImXsyVKwo
9MTs04uMKZFT7ZEa5OiZKUa5eo4DhbtdxEA+8c7rq7ZFKHQgKB5VtZXMQvp0s2fs
3VsgSqExUE/BKxqWmr0MM6se5icdeDHxRbOua/txcwrecplgk01yw8rmNecPulwq
cbVZNUenJOraCH4Qih/utdHDeQXh6Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:03:39 2025 by rpki-client