Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0f87fb39-607f-3bcf-bb96-35b298c63b8d.roa
File: 0f87fb39-607f-3bcf-bb96-35b298c63b8d.roa (raw, json)
Hash identifier: CBHqXAAbK1ko42ZfwHkYgtvW7I1Z7pZrR/COF7hsD2c=
Subject key identifier: 85:C6:2F:D7:2E:9E:5B:CD:05:56:C4:EE:38:56:43:21:41:67:81:BB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE52DA5654FC16425FB0C76B0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0f87fb39-607f-3bcf-bb96-35b298c63b8d.roa
Signing time: Fri 12 Aug 2022 12:00:00 +0000
ROA not before: Fri 12 Aug 2022 12:00:00 +0000
ROA not after: Sat 17 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.164.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e5:2d:a5:65:4f:c1:64:25:fb:0c:76:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 12 12:00:00 2022 GMT
Not After : Sep 17 04:00:00 2022 GMT
Subject: CN=ae14bf9c-2d70-4c3f-94fe-0db5634e448a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e4:b3:e2:f8:48:b3:7f:29:56:0b:c2:c7:71:
6b:62:5c:c2:ec:ea:e8:cb:9c:48:6a:39:0f:b9:a4:
52:31:03:2b:77:cd:2b:5d:db:ce:a2:da:f8:8b:9b:
fc:9a:ad:22:5e:60:8e:1e:9a:ca:54:2a:fb:ce:19:
51:c7:04:96:dd:ca:cc:ee:c0:d0:5b:0c:fb:2b:5a:
8d:4a:3a:5e:9d:2d:ee:a1:0e:18:5f:65:39:be:1f:
15:5d:5a:df:46:e9:5a:b6:89:64:e1:cf:01:b5:0b:
2f:93:3d:87:84:dd:47:73:e5:0b:e3:4f:b8:1d:1c:
d8:77:48:98:55:81:c1:aa:34:8f:04:60:8c:c9:b9:
92:cc:2a:df:a6:e0:23:b5:75:23:a8:c8:b7:2e:9b:
fd:15:a9:e9:cf:6a:63:df:b1:24:3f:3b:8c:8e:ca:
62:59:b9:c4:d5:cf:5a:9c:5b:5f:d1:c9:01:1b:3d:
da:a8:46:43:37:e4:f2:ac:38:9f:cc:b1:89:4a:3d:
11:ee:8e:30:08:79:ae:50:e1:b0:14:98:bf:71:e0:
b3:a3:ab:17:05:ed:0b:fd:97:60:15:b8:35:30:ff:
39:a2:e2:14:c8:80:d1:f5:1f:ad:18:c3:75:16:a9:
d1:dd:c7:0b:34:85:7b:44:d3:9c:52:aa:e3:75:c6:
cf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C6:2F:D7:2E:9E:5B:CD:05:56:C4:EE:38:56:43:21:41:67:81:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0f87fb39-607f-3bcf-bb96-35b298c63b8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.164.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:b5:29:96:19:d8:26:7b:21:78:e3:d9:e9:dd:98:49:fc:90:
7c:ae:35:b5:19:27:0c:83:74:9e:57:de:b8:82:e7:67:55:71:
ab:ab:54:c7:12:8e:b7:a5:a7:5f:4a:7d:9f:4f:ea:8a:4d:bc:
f7:99:35:5f:34:5c:b8:cc:0b:34:76:26:68:03:f5:3a:3a:21:
96:e1:f8:d6:e7:35:31:54:2d:bd:f4:1d:9e:00:58:d7:ec:76:
c6:4f:0d:9f:67:d0:1c:b5:90:5b:1d:df:ae:5f:30:b3:cf:86:
8f:19:7e:17:99:8f:72:4d:8d:65:07:60:b8:94:68:49:5c:51:
2a:2d:74:87:0a:2a:a5:41:bc:fb:85:e1:a3:5e:cf:19:3d:9f:
c2:4a:cf:c7:a8:c8:1c:ad:ed:79:48:f6:0f:7f:2f:b0:86:be:
a1:b7:5c:85:01:d1:8d:a9:00:96:1a:f9:aa:a6:16:75:58:26:
d0:c6:fd:94:c6:06:05:46:46:07:6d:22:76:be:ec:75:ba:89:
d7:96:d2:f9:8f:ce:4f:4b:a4:d5:19:e1:af:54:06:fc:a5:81:
c4:22:e5:93:a1:04:76:12:35:ce:fc:90:6a:46:97:7e:e0:b4:
15:f9:17:fb:5f:57:05:c5:0f:03:72:a1:5f:be:3f:47:aa:f4:
49:31:5f:69
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD7lLaVlT8FkJfsMdrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgxMjEyMDAwMFoXDTIyMDkxNzA0MDAwMFowLzEtMCsGA1UEAxMk
YWUxNGJmOWMtMmQ3MC00YzNmLTk0ZmUtMGRiNTYzNGU0NDhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOSz4vhIs38pVgvCx3FrYlzC7Oroy5xIajkP
uaRSMQMrd80rXdvOotr4i5v8mq0iXmCOHprKVCr7zhlRxwSW3crM7sDQWwz7K1qN
SjpenS3uoQ4YX2U5vh8VXVrfRulatolk4c8BtQsvkz2HhN1Hc+UL40+4HRzYd0iY
VYHBqjSPBGCMybmSzCrfpuAjtXUjqMi3Lpv9Fanpz2pj37EkPzuMjspiWbnE1c9a
nFtf0ckBGz3aqEZDN+TyrDifzLGJSj0R7o4wCHmuUOGwFJi/ceCzo6sXBe0L/Zdg
Fbg1MP85ouIUyIDR9R+tGMN1FqnR3ccLNIV7RNOcUqrjdcbPFwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIXGL9cunlvNBVbE7jhWQyFBZ4G7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMGY4N2ZiMzktNjA3Zi0z
YmNmLWJiOTYtMzViMjk4YzYzYjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEqQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAjrUplhnYJnsheOPZ6d2YSfyQfK41tRknDIN0nlfeuILnZ1Vxq6tUxxKO
t6WnX0p9n0/qik2895k1XzRcuMwLNHYmaAP1OjohluH41uc1MVQtvfQdngBY1+x2
xk8Nn2fQHLWQWx3frl8ws8+Gjxl+F5mPck2NZQdguJRoSVxRKi10hwoqpUG8+4Xh
o17PGT2fwkrPx6jIHK3teUj2D38vsIa+obdchQHRjakAlhr5qqYWdVgm0Mb9lMYG
BUZGB20idr7sdbqJ15bS+Y/OT0uk1Rnhr1QG/KWBxCLlk6EEdhI1zvyQakaXfuC0
FfkX+19XBcUPA3KhX74/R6r0STFfaQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 11:53:35 2025 by rpki-client