Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b5d19d3-e5b2-3db4-a1a5-eddf097be84a.roa
File: 0b5d19d3-e5b2-3db4-a1a5-eddf097be84a.roa (raw, json)
Hash identifier: Rx+gBILXkxPEQeeOqt05hKVidmQs2XFKlFH8o3+1rF8=
Subject key identifier: 39:EF:A0:F5:2F:5D:B8:24:0E:2F:80:E4:BA:7F:51:61:4B:89:0D:D9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D80A7DF92C9F140F0C41C43DC
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b5d19d3-e5b2-3db4-a1a5-eddf097be84a.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.120.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:a7:df:92:c9:f1:40:f0:c4:1c:43:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=20c17940-a905-4bad-9460-b0f8dbe379c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6f:45:c1:d8:64:e9:90:c7:4b:80:f9:18:50:
ac:2e:bc:a0:cb:43:5d:bf:45:3f:8f:8f:50:07:9a:
25:10:09:81:ab:08:0a:3a:a9:bd:6b:24:33:a8:6a:
9c:38:85:7f:36:63:f7:04:6f:5f:ba:d7:96:35:2b:
0d:09:b7:8a:f0:9c:4c:56:e7:a3:5f:b1:af:26:9e:
de:8b:41:09:c7:4d:16:09:0b:74:e8:e3:ae:66:46:
b1:78:e9:cd:78:a3:9e:b1:7b:d9:c7:19:62:3f:5b:
ea:30:c7:76:cd:06:0a:d0:47:09:f9:ce:51:05:84:
23:8c:4e:08:e4:3f:b9:45:f5:ed:b4:c9:fe:0f:25:
8c:75:53:03:f9:c0:92:32:67:1f:30:09:a5:38:83:
2a:f0:41:4c:ba:94:87:e4:30:29:b8:77:50:d4:79:
d2:f0:cf:e9:ea:39:7f:3b:b6:d1:30:e0:f5:6f:00:
93:ff:91:3f:d8:78:2a:29:ac:31:36:6d:51:54:15:
95:d3:30:1f:ae:d3:70:c5:9f:3c:ee:96:23:19:80:
a6:f6:50:5c:c8:ae:e5:f5:70:2d:4e:1b:a6:b9:d8:
6d:3a:00:11:14:87:5b:18:a9:ff:02:06:a4:09:8b:
93:86:85:23:86:b5:c9:5c:21:3c:24:c1:d9:4d:81:
29:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EF:A0:F5:2F:5D:B8:24:0E:2F:80:E4:BA:7F:51:61:4B:89:0D:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b5d19d3-e5b2-3db4-a1a5-eddf097be84a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.120.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:e0:f3:d3:31:4d:e1:f2:fb:44:94:fd:94:3a:4d:1c:a2:23:
a3:df:90:e0:53:4f:b1:a1:b3:6d:a7:2f:d3:be:21:32:cb:43:
87:29:07:61:9b:f9:f5:14:5e:55:30:08:55:7c:94:a2:7d:66:
8d:f0:fd:c7:be:38:15:be:07:d1:2f:e6:42:55:ae:76:47:4f:
44:a3:6c:22:ac:bb:98:e0:1c:79:82:e0:d8:1e:62:8b:76:0a:
d5:20:6f:57:77:e9:00:5c:63:e7:ff:98:0c:3d:84:8a:b0:d2:
1d:1f:92:c4:bf:42:7b:3e:27:28:92:3e:55:cb:cb:ff:bc:72:
7a:a9:cf:4b:a9:84:9e:b6:bd:15:75:ac:64:87:c1:9c:26:18:
6b:17:ce:24:85:fb:91:72:0c:b7:4b:0d:d9:61:8c:e5:8e:b8:
77:04:3e:d2:6c:21:0d:5d:f7:47:d8:c8:4f:54:8f:40:a3:c1:
77:04:4d:8a:52:82:44:25:37:a4:33:3d:ec:61:d2:b0:87:16:
50:d9:26:81:d3:8c:53:52:3b:ed:42:8b:83:f0:a2:a4:f7:cd:
d9:76:07:60:ae:09:26:e8:03:41:24:a5:bf:9e:97:f4:43:7a:
ed:0d:71:1f:33:65:d8:3c:16:00:63:45:39:48:d6:e1:42:47:
29:b3:e6:36
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2Ap9+SyfFA8MQcQ9wwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQwODA0MDAwMFoXDTIyMDUxMzA0MDAwMFowLzEtMCsGA1UEAxMk
MjBjMTc5NDAtYTkwNS00YmFkLTk0NjAtYjBmOGRiZTM3OWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj29Fwdhk6ZDHS4D5GFCsLrygy0Ndv0U/j49Q
B5olEAmBqwgKOqm9ayQzqGqcOIV/NmP3BG9futeWNSsNCbeK8JxMVuejX7GvJp7e
i0EJx00WCQt06OOuZkaxeOnNeKOesXvZxxliP1vqMMd2zQYK0EcJ+c5RBYQjjE4I
5D+5RfXttMn+DyWMdVMD+cCSMmcfMAmlOIMq8EFMupSH5DApuHdQ1HnS8M/p6jl/
O7bRMOD1bwCT/5E/2HgqKawxNm1RVBWV0zAfrtNwxZ887pYjGYCm9lBcyK7l9XAt
ThumudhtOgARFIdbGKn/AgakCYuThoUjhrXJXCE8JMHZTYEplwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDnvoPUvXbgkDi+A5Lp/UWFLiQ3ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMGI1ZDE5ZDMtZTViMi0z
ZGI0LWExYTUtZWRkZjA5N2JlODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEngwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAvuDz0zFN4fL7RJT9lDpNHKIjo9+Q4FNPsaGzbacv074hMstDhykHYZv5
9RReVTAIVXyUon1mjfD9x744Fb4H0S/mQlWudkdPRKNsIqy7mOAceYLg2B5ii3YK
1SBvV3fpAFxj5/+YDD2EirDSHR+SxL9Cez4nKJI+VcvL/7xyeqnPS6mEnra9FXWs
ZIfBnCYYaxfOJIX7kXIMt0sN2WGM5Y64dwQ+0mwhDV33R9jIT1SPQKPBdwRNilKC
RCU3pDM97GHSsIcWUNkmgdOMU1I77UKLg/CipPfN2XYHYK4JJugDQSSlv56X9EN6
7Q1xHzNl2DwWAGNFOUjW4UJHKbPmNg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:54:54 2025 by rpki-client