Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/158ce097-983f-3012-8c55-998241670c29.roa
File: 158ce097-983f-3012-8c55-998241670c29.roa (raw, json)
Hash identifier: xoJC8sPpP9I3MNF5qGHH/Vu61qZ70tFa1QW958Oa6aQ=
Subject key identifier: 4F:3F:5E:D0:C8:32:E4:E8:E5:A0:50:07:35:59:29:39:45:51:91:61
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E225E41508EEE39204565DB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/158ce097-983f-3012-8c55-998241670c29.roa
Signing time: Sat 04 Jun 2022 12:00:00 +0000
ROA not before: Sat 04 Jun 2022 12:00:00 +0000
ROA not after: Sun 10 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.57.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:22:5e:41:50:8e:ee:39:20:45:65:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 4 12:00:00 2022 GMT
Not After : Jul 10 04:00:00 2022 GMT
Subject: CN=d62d47b9-2b41-4605-a992-14837ee7a795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:8d:7f:25:7e:28:1c:5c:2c:81:2f:2b:e0:
71:ad:9c:08:60:b9:b3:d5:d6:8d:dd:f2:3e:73:fd:
3d:38:ab:46:1e:db:c8:53:ea:25:33:9b:41:ac:70:
7b:5c:01:25:e2:45:be:91:6a:f7:f7:91:bf:ee:57:
95:34:ab:0a:84:92:5f:9a:5f:85:63:d3:5e:43:9c:
c0:bf:9a:5a:df:b3:38:bb:67:de:7a:e3:1a:12:3b:
a6:a7:80:db:66:86:a5:ef:8d:c8:72:bf:2d:f6:18:
5d:02:21:0b:73:31:e4:81:77:b3:2b:55:8a:f0:d0:
2d:f4:95:02:53:fb:2d:be:74:92:2c:fc:94:7a:f8:
2b:6e:ae:52:c5:af:5a:e5:10:09:70:bf:6f:39:e3:
cf:8b:b3:04:91:c0:0c:fe:6c:5a:c3:e5:1a:30:25:
70:ea:e9:98:95:0f:d7:ab:48:40:24:5a:23:94:a9:
f5:ca:89:c1:e5:0c:c6:d0:de:c0:16:3f:e2:2a:7f:
15:a1:be:22:49:05:4c:b4:fd:4b:b9:2c:93:7d:0c:
76:c2:b7:ee:44:ae:37:3f:db:05:8b:b9:f7:2d:0c:
a2:d6:88:d7:8d:81:21:92:54:f0:08:f9:18:22:81:
89:e2:b8:38:a0:b1:6d:a5:76:d6:62:99:3c:95:f2:
79:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3F:5E:D0:C8:32:E4:E8:E5:A0:50:07:35:59:29:39:45:51:91:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/158ce097-983f-3012-8c55-998241670c29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.57.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:82:7d:8c:b1:8b:22:bb:e4:e7:90:54:40:06:dc:ab:e4:04:
85:50:0b:f0:7b:9a:94:4a:89:cb:78:79:0a:64:a3:8b:0e:06:
5d:f8:c1:76:4d:43:ad:17:63:85:2e:41:c7:b1:68:f8:b1:f1:
39:3c:00:90:12:8c:47:8c:29:33:0f:5a:97:8e:5e:60:75:f7:
63:98:91:8b:8c:0d:ff:14:20:40:eb:15:6c:ff:ed:7a:61:5d:
53:60:8d:dd:7c:12:fb:a4:b6:d6:5a:7d:cf:40:65:1c:5c:f6:
40:d5:5a:7b:eb:1b:04:8c:fa:1c:2c:6d:dc:cc:a3:a2:21:a9:
c7:f6:14:71:ab:20:29:ac:64:83:d8:99:88:74:f0:ae:7d:10:
53:7b:d5:88:32:87:fa:cb:99:79:c8:0e:35:d4:f6:08:2f:65:
ca:29:b0:fe:dc:a8:b3:d2:2e:a6:39:8f:fd:8b:0d:70:7c:f4:
6e:ef:72:b4:1a:e6:3e:f8:f2:ab:d9:d9:bd:e7:a8:79:42:f7:
02:44:8b:b1:4a:b6:66:8b:d5:ce:ef:19:4b:6a:7c:2e:90:ef:
39:05:5d:7f:bd:f1:b6:87:ee:a1:60:1a:a1:0c:a0:55:86:6f:
d0:6d:f6:24:d1:07:f6:74:10:fa:d1:34:11:9e:fd:f2:8e:7a:
f6:11:e0:32
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4iXkFQju45IEVl24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYwNDEyMDAwMFoXDTIyMDcxMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZDYyZDQ3YjktMmI0MS00NjA1LWE5OTItMTQ4MzdlZTdhNzk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9SNfyV+KBxcLIEvK+BxrZwIYLmz1daN3fI+
c/09OKtGHtvIU+olM5tBrHB7XAEl4kW+kWr395G/7leVNKsKhJJfml+FY9NeQ5zA
v5pa37M4u2feeuMaEjump4DbZoal743Icr8t9hhdAiELczHkgXezK1WK8NAt9JUC
U/stvnSSLPyUevgrbq5Sxa9a5RAJcL9vOePPi7MEkcAM/mxaw+UaMCVw6umYlQ/X
q0hAJFojlKn1yonB5QzG0N7AFj/iKn8Vob4iSQVMtP1LuSyTfQx2wrfuRK43P9sF
i7n3LQyi1ojXjYEhklTwCPkYIoGJ4rg4oLFtpXbWYpk8lfJ5LwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFE8/XtDIMuTo5aBQBzVZKTlFUZFhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMTU4Y2UwOTctOTgzZi0z
MDEyLThjNTUtOTk4MjQxNjcwYzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEjkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJ4J9jLGLIrvk55BUQAbcq+QEhVAL8HualEqJy3h5CmSjiw4GXfjBdk1D
rRdjhS5Bx7Fo+LHxOTwAkBKMR4wpMw9al45eYHX3Y5iRi4wN/xQgQOsVbP/temFd
U2CN3XwS+6S21lp9z0BlHFz2QNVae+sbBIz6HCxt3MyjoiGpx/YUcasgKaxkg9iZ
iHTwrn0QU3vViDKH+suZecgONdT2CC9lyimw/tyos9IupjmP/YsNcHz0bu9ytBrm
Pvjyq9nZveeoeUL3AkSLsUq2ZovVzu8ZS2p8LpDvOQVdf73xtofuoWAaoQygVYZv
0G32JNEH9nQQ+tE0EZ798o569hHgMg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:33:38 2025 by rpki-client