Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b21eeb9-ae7f-3566-8f44-4f5afa251ea5.roa
File: 0b21eeb9-ae7f-3566-8f44-4f5afa251ea5.roa (raw, json)
Hash identifier: JSq29IaPOgsFgxF+40aDxYJxWFfoWxrvOPJXGGMwWp8=
Subject key identifier: 87:8D:49:7B:0D:C5:22:9B:E4:29:6C:BA:7A:C8:ED:8C:46:7B:6B:44
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCAD3E02C2331F2AF6E81F5C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b21eeb9-ae7f-3566-8f44-4f5afa251ea5.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.44.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ca:d3:e0:2c:23:31:f2:af:6e:81:f5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=70eb0392-61e2-479d-b43d-4b81c392060a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:21:04:06:29:da:a0:65:ba:55:e5:2a:70:b4:
41:45:d4:83:26:95:01:29:58:f5:bd:a5:74:58:bb:
9f:c0:e6:83:63:ca:02:61:e6:07:7c:27:c9:45:88:
83:b2:52:59:e9:51:22:69:2e:0d:5f:c6:b8:f9:99:
ef:18:99:9e:67:40:fd:78:2b:66:73:5c:96:44:0b:
a6:ad:44:4d:9e:5a:af:64:ad:ec:28:20:d5:fc:c3:
a2:38:fe:69:b8:a3:07:ca:e7:21:ae:ce:0c:1a:c6:
c4:4c:25:ce:50:64:59:0f:bf:24:fe:8d:12:9e:2d:
9f:30:41:de:0b:d7:38:d3:82:0a:2b:ca:2d:bb:08:
4b:56:32:d9:bb:08:5a:ad:ef:36:31:d0:76:25:02:
de:61:a5:99:ef:5d:dc:9c:d8:7d:17:90:8e:c2:49:
64:c2:0d:12:b9:fe:65:27:ea:93:cc:d8:a6:65:e7:
b8:ae:dc:46:69:35:cc:5e:c5:5a:8a:af:7c:8a:3a:
15:cb:cd:0b:32:62:65:17:db:ad:f8:1c:22:54:d5:
6f:91:ec:f3:95:c3:b2:82:cb:66:f2:dd:69:38:b2:
8f:99:67:4d:80:14:8e:36:e9:cc:8c:5e:6f:d1:9d:
a8:9a:c1:af:bb:6c:bf:29:7d:de:26:35:60:3b:59:
91:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8D:49:7B:0D:C5:22:9B:E4:29:6C:BA:7A:C8:ED:8C:46:7B:6B:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b21eeb9-ae7f-3566-8f44-4f5afa251ea5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.44.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:26:21:c8:91:ec:0b:1b:99:fc:05:fa:f5:c8:5d:0c:dc:99:
08:fd:f1:b5:70:2f:fd:f7:6e:96:e8:6f:06:63:86:77:49:e0:
7c:44:be:8e:45:52:51:cb:1a:8a:89:f0:35:6d:95:f5:df:79:
f7:4b:10:20:ee:e0:d8:9d:d2:07:a8:88:73:f6:9d:b7:15:8e:
76:6c:8b:5c:e3:49:21:75:29:65:5e:b1:aa:27:77:07:a4:7d:
b3:b4:c5:07:06:0e:d6:50:38:ab:47:19:7a:cc:5f:ae:ad:27:
b8:7a:6f:b9:2a:f3:69:e9:ec:ba:8c:42:ef:71:a7:53:af:97:
0a:54:fc:7d:eb:58:40:ed:c7:a2:19:e3:77:85:d7:55:bb:d3:
c5:91:d6:3c:fc:e6:28:ae:9a:ed:8d:34:b1:a6:fe:23:9f:73:
d5:98:6d:25:da:13:e5:02:fb:af:31:bc:a9:77:d2:f2:e6:3f:
18:2b:32:54:67:a0:dd:5d:37:52:d5:26:55:32:ad:ae:d3:55:
17:e7:72:96:a3:af:97:88:3e:25:5a:e5:a6:d4:f0:e9:1b:8e:
27:e2:bc:84:99:f0:c6:91:ad:ab:b5:0d:4d:ba:be:9c:8b:3b:
8b:ef:62:09:1a:cc:7e:06:53:c6:31:5a:62:56:1e:f2:9c:25:
e7:4a:c4:de
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/K0+AsIzHyr26B9cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEwMzEyMDAwMFoXDTIyMTIwOTA1MDAwMFowLzEtMCsGA1UEAxMk
NzBlYjAzOTItNjFlMi00NzlkLWI0M2QtNGI4MWMzOTIwNjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiEEBinaoGW6VeUqcLRBRdSDJpUBKVj1vaV0
WLufwOaDY8oCYeYHfCfJRYiDslJZ6VEiaS4NX8a4+ZnvGJmeZ0D9eCtmc1yWRAum
rURNnlqvZK3sKCDV/MOiOP5puKMHyuchrs4MGsbETCXOUGRZD78k/o0Sni2fMEHe
C9c404IKK8otuwhLVjLZuwhare82MdB2JQLeYaWZ713cnNh9F5COwklkwg0Suf5l
J+qTzNimZee4rtxGaTXMXsVaiq98ijoVy80LMmJlF9ut+BwiVNVvkezzlcOygstm
8t1pOLKPmWdNgBSONunMjF5v0Z2omsGvu2y/KX3eJjVgO1mRyQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIeNSXsNxSKb5ClsunrI7YxGe2tEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMGIyMWVlYjktYWU3Zi0z
NTY2LThmNDQtNGY1YWZhMjUxZWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEiwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEApyYhyJHsCxuZ/AX69chdDNyZCP3xtXAv/fduluhvBmOGd0ngfES+jkVS
UcsaionwNW2V9d9590sQIO7g2J3SB6iIc/adtxWOdmyLXONJIXUpZV6xqid3B6R9
s7TFBwYO1lA4q0cZesxfrq0nuHpvuSrzaensuoxC73GnU6+XClT8fetYQO3Hohnj
d4XXVbvTxZHWPPzmKK6a7Y00sab+I59z1ZhtJdoT5QL7rzG8qXfS8uY/GCsyVGeg
3V03UtUmVTKtrtNVF+dylqOvl4g+JVrlptTw6RuOJ+K8hJnwxpGtq7UNTbq+nIs7
i+9iCRrMfgZTxjFaYlYe8pwl50rE3g==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:27 2025 by rpki-client