Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10d34233-b84d-378c-8f6c-38bec8619f9e.roa
File: 10d34233-b84d-378c-8f6c-38bec8619f9e.roa (raw, json)
Hash identifier: jGrcfyX50HdQeQbWNkkZ9OvRBPnw+VAjtcD1NsYkR1M=
Subject key identifier: AA:87:1E:E3:53:F5:6E:D6:E3:2B:5B:26:EE:5D:BB:6F:EE:CF:85:E5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6EB77CACEF87A2A4C01DACD0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10d34233-b84d-378c-8f6c-38bec8619f9e.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.59.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6e:b7:7c:ac:ef:87:a2:a4:c0:1d:ac:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=545f03df-ab02-4ebf-9087-6dba805add77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:9e:2c:73:57:dd:01:1a:97:f5:54:2d:a0:
9f:98:d7:d1:88:ce:ea:2b:6c:98:ba:d9:6e:55:8e:
3e:31:5f:c8:c7:35:c8:55:c2:6a:34:ef:1c:bc:d4:
2d:63:6c:a1:d0:ea:cb:b7:94:f6:f4:1b:14:b6:4f:
2d:ab:79:13:56:8e:2b:84:1e:e9:8f:d4:e9:e0:70:
7b:30:7f:d8:ff:3c:05:be:a7:17:87:ca:93:48:21:
48:3f:a0:74:3e:38:ef:36:24:a6:7e:a7:2f:fe:24:
5a:1b:a6:a4:93:1b:ef:72:9a:bd:cc:44:d7:33:0a:
49:83:8b:c7:1b:91:0d:ee:6d:ac:06:11:53:c7:3b:
98:0f:ba:50:04:68:27:44:d9:e9:dd:62:5a:8a:cc:
32:27:0d:92:cf:29:1c:b2:ec:50:f6:48:f1:ce:4e:
02:90:8c:0e:0f:58:49:bf:57:02:e6:73:1d:24:fd:
cd:d6:dc:38:68:85:12:9c:ea:72:d5:11:a5:af:fa:
e5:06:c7:94:a6:5e:8a:79:3e:36:c8:cb:c4:77:49:
80:bd:52:0d:e2:ce:5d:a3:d2:33:1e:4f:8c:86:6c:
62:33:d3:de:6c:96:04:13:bc:40:a9:5f:2f:02:2f:
44:41:31:f3:2a:02:88:53:0e:18:b3:29:a2:34:62:
04:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:87:1E:E3:53:F5:6E:D6:E3:2B:5B:26:EE:5D:BB:6F:EE:CF:85:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10d34233-b84d-378c-8f6c-38bec8619f9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.59.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:42:4b:4b:98:ac:7f:b8:30:7c:ff:a4:9b:8e:92:9e:f2:d9:
b5:52:e3:7e:89:9b:e4:47:d7:0a:9e:10:5f:77:04:27:99:fa:
77:3d:58:c8:bc:ea:bc:c9:32:f8:fe:39:e2:29:6c:79:2a:81:
10:f9:73:57:3d:8e:2b:3e:1f:94:de:5c:b8:4b:f2:3c:eb:39:
92:ac:92:20:92:31:28:b6:95:44:b6:27:82:84:a8:4a:85:61:
d9:42:85:a4:05:92:0a:f3:61:37:a1:de:4c:02:c5:dc:d8:a5:
31:86:ad:5e:d3:15:24:2b:ea:0d:c5:3f:48:3b:91:19:c4:ec:
cb:10:ff:dc:20:19:34:12:97:f1:cf:fb:93:7a:93:0b:0b:74:
3f:81:d4:8c:64:dc:71:7b:0e:25:f6:e9:f2:01:6b:50:07:77:
b2:f8:20:1d:a4:dc:90:38:75:a9:3b:2a:11:c8:b9:2f:9c:b4:
1f:dc:7a:81:e1:b3:e9:2c:06:e3:71:c9:b5:c1:61:df:33:c8:
04:10:54:90:4d:c8:f3:06:e4:21:29:30:30:4d:02:32:a7:22:
22:59:72:84:5a:1e:14:98:19:21:c6:db:db:02:11:2d:e1:bc:
f2:c6:2c:f9:c0:2b:0c:59:bf:51:20:47:53:f0:2c:e4:95:e9:
0b:4e:80:5b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDxut3ys74eipMAdrNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIxMTIzMTA1MDAwMFoXDTIyMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
NTQ1ZjAzZGYtYWIwMi00ZWJmLTkwODctNmRiYTgwNWFkZDc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiWeLHNX3QEal/VULaCfmNfRiM7qK2yYutlu
VY4+MV/IxzXIVcJqNO8cvNQtY2yh0OrLt5T29BsUtk8tq3kTVo4rhB7pj9Tp4HB7
MH/Y/zwFvqcXh8qTSCFIP6B0PjjvNiSmfqcv/iRaG6akkxvvcpq9zETXMwpJg4vH
G5EN7m2sBhFTxzuYD7pQBGgnRNnp3WJaiswyJw2SzykcsuxQ9kjxzk4CkIwOD1hJ
v1cC5nMdJP3N1tw4aIUSnOpy1RGlr/rlBseUpl6KeT42yMvEd0mAvVIN4s5do9Iz
Hk+MhmxiM9PebJYEE7xAqV8vAi9EQTHzKgKIUw4YsymiNGIEUQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKqHHuNT9W7W4ytbJu5du2/uz4XlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMTBkMzQyMzMtYjg0ZC0z
NzhjLThmNmMtMzhiZWM4NjE5ZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEjswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgkJLS5isf7gwfP+km46SnvLZtVLjfomb5EfXCp4QX3cEJ5n6dz1YyLzq
vMky+P454ilseSqBEPlzVz2OKz4flN5cuEvyPOs5kqySIJIxKLaVRLYngoSoSoVh
2UKFpAWSCvNhN6HeTALF3NilMYatXtMVJCvqDcU/SDuRGcTsyxD/3CAZNBKX8c/7
k3qTCwt0P4HUjGTccXsOJfbp8gFrUAd3svggHaTckDh1qTsqEci5L5y0H9x6geGz
6SwG43HJtcFh3zPIBBBUkE3I8wbkISkwME0CMqciIllyhFoeFJgZIcbb2wIRLeG8
8sYs+cArDFm/USBHU/As5JXpC06AWw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:38:13 2025 by rpki-client