Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/16365021-1c82-3877-b013-25c6dc5816c6.roa
File: 16365021-1c82-3877-b013-25c6dc5816c6.roa (raw, json)
Hash identifier: 7X+iNcOVoy+JuQ1EQ2qIPRfMMDNHaumdKScpllESu2w=
Subject key identifier: 44:4D:64:67:69:94:2F:4B:64:D4:91:E7:0C:7C:91:BD:DB:05:D5:98
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B83F84E797478CB10C1F380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/16365021-1c82-3877-b013-25c6dc5816c6.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.204.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:83:f8:4e:79:74:78:cb:10:c1:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=fa53b9b9-5925-49da-af43-42d86685a9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ba:9b:2f:de:23:a7:83:88:d6:f3:9d:6c:ab:
29:8c:4e:b9:a7:be:4b:0b:a8:43:9f:cb:10:b7:70:
d5:7b:df:cd:ec:00:a7:54:24:a1:67:d5:72:d2:ca:
b1:b5:5b:66:fb:fc:7f:70:cd:22:26:c9:48:f9:bf:
a3:2d:1f:a3:77:d4:f2:ce:36:6d:49:07:72:25:a8:
dc:6d:de:2f:e1:c1:dd:eb:75:b0:91:eb:99:31:96:
94:59:00:2f:1b:cd:ad:77:f1:d4:07:54:fc:d7:0f:
a6:4f:aa:d9:bc:ad:be:4e:f6:5d:da:eb:fb:7e:e8:
cb:c3:9d:f9:ca:86:1f:65:84:6b:a1:9c:d9:75:cb:
bd:b8:e1:da:e3:51:b5:8c:8d:ae:ad:87:53:a4:a5:
57:99:64:bf:0c:e1:06:80:0e:73:85:f5:4c:8a:76:
b8:03:b5:20:46:65:8e:14:81:aa:d0:c9:4f:97:98:
33:54:72:64:0b:45:11:cf:4c:a8:c4:98:0a:77:cd:
69:c2:1a:f0:ab:50:6c:40:44:47:03:55:86:a7:96:
46:63:ab:5e:20:78:6c:18:11:f6:55:9b:81:c4:a0:
df:5e:0b:3e:03:c3:95:1f:b0:ba:8c:2b:e6:56:70:
ae:5e:6e:9f:52:a5:12:d1:a5:b5:b9:21:c8:8c:96:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4D:64:67:69:94:2F:4B:64:D4:91:E7:0C:7C:91:BD:DB:05:D5:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/16365021-1c82-3877-b013-25c6dc5816c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.204.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:21:d6:51:a4:3c:d9:bf:45:72:ee:4b:05:08:76:6f:a6:44:
48:09:04:31:5c:b9:b1:53:55:fe:4d:53:56:8e:0a:39:30:d1:
02:06:7d:c5:e1:11:34:ea:db:39:d3:cf:de:84:ce:1f:fc:36:
ca:93:94:68:8b:92:e4:85:08:94:e1:e5:ac:03:48:6b:18:ac:
7d:3e:15:eb:65:fd:9c:d8:bd:a1:de:74:4c:d1:08:71:6f:b6:
23:54:21:a5:c4:94:6d:c4:3e:b2:2e:4e:c9:b0:41:72:97:d2:
70:26:f3:a8:d8:6e:f9:32:1e:72:a2:8b:48:a7:69:82:da:e7:
91:bc:e2:be:95:50:d5:c6:d1:e9:d5:0e:33:3a:75:1b:9b:a2:
b3:55:c2:90:68:1c:cb:3e:bf:0b:e6:1c:f8:73:8e:7f:62:58:
4e:2f:41:3c:70:3a:d9:69:45:1e:fc:73:d2:82:bc:2b:8b:25:
52:7f:a5:5e:b9:c2:4d:f8:07:a9:48:60:57:14:94:12:6a:fe:
82:7a:36:7a:23:84:f0:c7:4a:81:04:98:2c:b1:77:e0:2d:75:
e9:be:2e:1f:6b:84:37:27:bf:46:0b:8a:c1:53:b7:cb:d3:95:
d8:b8:7c:6f:c9:95:3a:36:2e:da:e8:7b:70:63:ae:69:18:03:
d8:c8:bc:5f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0Lg/hOeXR4yxDB84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIyNTA1MDAwMFoXDTIyMDQwMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZmE1M2I5YjktNTkyNS00OWRhLWFmNDMtNDJkODY2ODVhOWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLqbL94jp4OI1vOdbKspjE65p75LC6hDn8sQ
t3DVe9/N7ACnVCShZ9Vy0sqxtVtm+/x/cM0iJslI+b+jLR+jd9TyzjZtSQdyJajc
bd4v4cHd63WwkeuZMZaUWQAvG82td/HUB1T81w+mT6rZvK2+TvZd2uv7fujLw535
yoYfZYRroZzZdcu9uOHa41G1jI2urYdTpKVXmWS/DOEGgA5zhfVMina4A7UgRmWO
FIGq0MlPl5gzVHJkC0URz0yoxJgKd81pwhrwq1BsQERHA1WGp5ZGY6teIHhsGBH2
VZuBxKDfXgs+A8OVH7C6jCvmVnCuXm6fUqUS0aW1uSHIjJaGhwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFERNZGdplC9LZNSR5wx8kb3bBdWYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMTYzNjUwMjEtMWM4Mi0z
ODc3LWIwMTMtMjVjNmRjNTgxNmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEswwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEARiHWUaQ82b9Fcu5LBQh2b6ZESAkEMVy5sVNV/k1TVo4KOTDRAgZ9xeER
NOrbOdPP3oTOH/w2ypOUaIuS5IUIlOHlrANIaxisfT4V62X9nNi9od50TNEIcW+2
I1QhpcSUbcQ+si5OybBBcpfScCbzqNhu+TIecqKLSKdpgtrnkbzivpVQ1cbR6dUO
Mzp1G5uis1XCkGgcyz6/C+Yc+HOOf2JYTi9BPHA62WlFHvxz0oK8K4slUn+lXrnC
TfgHqUhgVxSUEmr+gno2eiOE8MdKgQSYLLF34C116b4uH2uENye/RguKwVO3y9OV
2Lh8b8mVOjYu2uh7cGOuaRgD2Mi8Xw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:17:35 2025 by rpki-client