Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0738accd-5df5-393d-9095-4636d25ea436.roa
File: 0738accd-5df5-393d-9095-4636d25ea436.roa (raw, json)
Hash identifier: 7SXUQlPFtcK38lkAa0z5NOpPgWzq7CHjzjgpSwBsnEM=
Subject key identifier: 32:AE:6B:12:C8:C9:93:C8:71:CF:1D:F4:02:C5:64:BB:DA:FC:13:CE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBED9AA9F58BD1F47F23A1600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0738accd-5df5-393d-9095-4636d25ea436.roa
Signing time: Sat 30 Jul 2022 12:00:00 +0000
ROA not before: Sat 30 Jul 2022 12:00:00 +0000
ROA not after: Sun 04 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.52.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:be:d9:aa:9f:58:bd:1f:47:f2:3a:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 30 12:00:00 2022 GMT
Not After : Sep 4 04:00:00 2022 GMT
Subject: CN=e41634f3-9656-4e23-ac58-2fde45c3315b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:29:03:6e:91:9c:c7:33:90:40:ad:3b:16:8c:
f7:d8:c2:d2:5d:00:42:94:a2:76:2a:1c:fd:e5:0c:
96:2b:b9:46:d1:2f:70:09:8b:00:ae:df:b3:2e:01:
16:d9:de:c1:8b:87:fb:6f:03:04:49:a2:15:99:8b:
84:d3:f2:37:65:ee:9f:d9:9e:40:34:dc:82:21:cb:
bc:dc:1a:3c:c1:7f:84:c0:0c:2d:8c:81:9a:aa:65:
d0:4e:8d:a9:01:40:16:80:14:65:8f:6b:d7:49:fc:
35:c7:18:e0:92:25:b8:d4:43:d8:cf:88:5b:85:b2:
c0:4b:60:bc:c7:70:95:f9:4e:aa:99:a5:a9:8f:a2:
8b:6f:0f:cb:39:43:3d:bf:03:e8:6a:60:6e:87:cb:
da:7d:5a:66:cf:92:e8:33:bb:a0:a0:74:4b:8e:09:
ec:b6:4b:fb:13:aa:46:41:5c:6c:74:11:2c:ca:6a:
44:6d:5e:15:2a:35:5d:c1:a4:7a:7c:14:0e:e9:7e:
56:47:02:3d:15:52:fa:e0:29:93:1a:56:de:a8:37:
52:ef:b0:ac:46:71:19:9d:83:a9:69:b7:26:0e:23:
37:35:89:6c:8c:a9:20:c6:ca:07:b7:34:94:73:64:
b1:36:8b:b0:80:6c:15:3d:38:2a:8d:85:68:75:de:
58:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AE:6B:12:C8:C9:93:C8:71:CF:1D:F4:02:C5:64:BB:DA:FC:13:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0738accd-5df5-393d-9095-4636d25ea436.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.52.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:1d:4a:73:ec:3b:34:fd:66:97:fe:bb:52:b8:9c:a8:32:d7:
ab:0c:57:79:d0:72:a7:86:7a:11:e4:a0:71:40:60:ca:07:cd:
5b:b0:14:49:bc:00:5f:fc:7d:2a:88:a7:db:49:08:c1:f3:13:
62:cb:e3:f2:02:bd:3f:ae:8a:3a:03:c3:24:a1:d4:b9:bc:ef:
24:28:e8:ce:a1:f3:2d:51:e6:89:b6:9b:b7:bd:f7:69:0c:1f:
cb:14:0c:7e:0f:f5:85:04:eb:fb:77:11:60:92:5a:8b:8f:56:
ac:2f:28:88:af:b3:6d:2a:49:95:4f:f3:d0:37:ea:cf:db:60:
54:20:08:cb:45:c5:21:73:e5:69:65:66:6d:40:aa:39:f3:d9:
73:5d:9b:be:69:47:48:84:2f:2d:a5:1e:c9:33:16:7b:58:ee:
ea:f8:56:18:63:4b:1b:f0:32:e8:57:9f:89:37:ba:05:65:d1:
2f:1f:f6:58:0d:b1:19:02:cc:30:be:78:2c:91:ba:82:1d:20:
69:09:8a:a1:8b:9e:b9:7c:c8:f0:3f:ed:ce:cc:a0:ac:a9:90:
da:db:ce:71:cd:8b:dc:0d:bb:f2:30:6e:ae:62:a7:fd:16:b1:
88:7c:4c:90:f5:1e:01:93:2f:65:f0:71:d8:a1:c7:d0:73:f9:
ee:de:3e:5b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6+2aqfWL0fR/I6FgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDczMDEyMDAwMFoXDTIyMDkwNDA0MDAwMFowLzEtMCsGA1UEAxMk
ZTQxNjM0ZjMtOTY1Ni00ZTIzLWFjNTgtMmZkZTQ1YzMzMTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCkDbpGcxzOQQK07Foz32MLSXQBClKJ2Khz9
5QyWK7lG0S9wCYsArt+zLgEW2d7Bi4f7bwMESaIVmYuE0/I3Ze6f2Z5ANNyCIcu8
3Bo8wX+EwAwtjIGaqmXQTo2pAUAWgBRlj2vXSfw1xxjgkiW41EPYz4hbhbLAS2C8
x3CV+U6qmaWpj6KLbw/LOUM9vwPoamBuh8vafVpmz5LoM7ugoHRLjgnstkv7E6pG
QVxsdBEsympEbV4VKjVdwaR6fBQO6X5WRwI9FVL64CmTGlbeqDdS77CsRnEZnYOp
abcmDiM3NYlsjKkgxsoHtzSUc2SxNouwgGwVPTgqjYVodd5YiwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDKuaxLIyZPIcc8d9ALFZLva/BPOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMDczOGFjY2QtNWRmNS0z
OTNkLTkwOTUtNDYzNmQyNWVhNDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEjQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPh1Kc+w7NP1ml/67UricqDLXqwxXedByp4Z6EeSgcUBgygfNW7AUSbwA
X/x9Koin20kIwfMTYsvj8gK9P66KOgPDJKHUubzvJCjozqHzLVHmibabt733aQwf
yxQMfg/1hQTr+3cRYJJai49WrC8oiK+zbSpJlU/z0Dfqz9tgVCAIy0XFIXPlaWVm
bUCqOfPZc12bvmlHSIQvLaUeyTMWe1ju6vhWGGNLG/Ay6FefiTe6BWXRLx/2WA2x
GQLMML54LJG6gh0gaQmKoYueuXzI8D/tzsygrKmQ2tvOcc2L3A278jBurmKn/Rax
iHxMkPUeAZMvZfBx2KHH0HP57t4+Ww==
-----END CERTIFICATE-----
Generated at Sun Jun 15 18:06:35 2025 by rpki-client