Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b05489c-77e9-32f6-8f6f-1da309c2219f.roa
File: 1b05489c-77e9-32f6-8f6f-1da309c2219f.roa (raw, json)
Hash identifier: IHrnuneO9b95HRacF3VopFYrE0/MNbS+0yAg8MGfln8=
Subject key identifier: E9:0A:23:F9:F8:CA:F7:07:84:1F:92:F2:3F:DA:AE:A1:25:90:F0:AD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E48FCCBC521CBFCE80235BC00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b05489c-77e9-32f6-8f6f-1da309c2219f.roa
Signing time: Fri 17 Jun 2022 12:00:00 +0000
ROA not before: Fri 17 Jun 2022 12:00:00 +0000
ROA not after: Sat 23 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:48:fc:cb:c5:21:cb:fc:e8:02:35:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 17 12:00:00 2022 GMT
Not After : Jul 23 04:00:00 2022 GMT
Subject: CN=26f75a26-f39c-4726-b758-d38b3bca2f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:df:70:b2:5f:4a:c9:4c:46:81:37:f2:de:13:
bd:80:d0:e3:30:3f:13:91:2a:f4:d6:5f:01:2c:f6:
c9:ed:6c:48:be:4c:78:9f:d4:24:91:01:eb:bd:d7:
9c:50:57:c3:dd:00:8e:01:c1:27:29:84:d4:7a:7a:
72:12:5d:f5:30:06:9a:6c:dc:03:3e:b3:72:ab:48:
aa:92:06:ca:c5:69:3a:30:b4:b2:e6:c8:78:5c:1f:
07:e1:3f:81:6f:94:ae:7c:92:f1:ec:d0:92:1d:d9:
62:5a:19:e0:e5:48:e8:ad:d1:d7:e5:95:e4:67:ac:
a8:ad:f0:de:e1:99:b9:fa:a2:00:ef:6d:65:ae:19:
86:94:40:5a:25:42:9b:3d:5b:27:59:39:40:7b:0e:
57:28:16:77:03:2d:23:7c:21:8d:db:d5:26:4d:6d:
3d:9d:a6:1d:fd:0c:13:70:3a:86:fc:e3:19:dd:c5:
e1:fa:98:ae:14:73:3c:35:eb:26:88:45:f6:5d:e5:
8c:ee:66:d1:4f:12:64:72:f6:71:14:da:3a:ec:6b:
e7:8d:49:b4:05:41:15:9f:f7:99:73:a0:5a:e0:5d:
5b:a2:e4:a0:ea:56:47:4f:32:23:32:e9:64:32:b4:
88:48:36:c4:8d:69:48:96:b3:9b:7f:9c:e8:9d:67:
9a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0A:23:F9:F8:CA:F7:07:84:1F:92:F2:3F:DA:AE:A1:25:90:F0:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b05489c-77e9-32f6-8f6f-1da309c2219f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:28:2a:eb:64:5e:42:f9:21:48:70:99:58:18:e0:eb:20:ae:
ce:d5:0a:19:c0:6f:af:1c:2a:01:b4:80:33:49:cb:3e:45:87:
68:d9:15:b7:66:f3:b0:d9:15:73:23:b6:f8:95:42:18:a0:2b:
2d:0d:fa:11:ce:3e:18:35:3d:21:82:1e:d0:15:8f:f9:cf:08:
e2:22:56:d0:cd:0f:a1:14:09:3f:31:00:48:91:9a:05:f9:bd:
5a:0a:5c:63:01:18:65:91:d3:42:8a:32:91:a4:ef:25:41:19:
21:04:1e:43:8c:21:98:cf:ab:b2:60:9b:fe:5a:68:cc:d3:a6:
f9:ea:61:97:10:63:40:d8:c5:d4:46:82:1c:2b:7f:5c:28:2e:
0b:ea:d1:be:d8:6b:df:d2:64:0c:13:58:bf:f0:f2:9a:fe:fa:
85:91:7a:d9:aa:10:44:36:64:19:98:d8:4d:12:47:17:68:9f:
11:c0:29:04:11:94:54:55:7c:17:8e:17:a0:18:5d:e0:66:72:
e8:15:45:5a:f6:49:c7:b0:2c:a4:9c:d3:39:0e:75:80:0c:f5:
d7:43:7e:c2:db:6e:c1:98:74:f5:9b:a5:98:9f:61:a0:7a:71:
2b:d1:9b:e0:cd:b9:2b:34:64:9c:6d:23:9c:19:f0:61:6b:29:
07:20:e4:7c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5I/MvFIcv86AI1vAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYxNzEyMDAwMFoXDTIyMDcyMzA0MDAwMFowLzEtMCsGA1UEAxMk
MjZmNzVhMjYtZjM5Yy00NzI2LWI3NTgtZDM4YjNiY2EyZjJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd9wsl9KyUxGgTfy3hO9gNDjMD8TkSr01l8B
LPbJ7WxIvkx4n9QkkQHrvdecUFfD3QCOAcEnKYTUenpyEl31MAaabNwDPrNyq0iq
kgbKxWk6MLSy5sh4XB8H4T+Bb5SufJLx7NCSHdliWhng5UjordHX5ZXkZ6yorfDe
4Zm5+qIA721lrhmGlEBaJUKbPVsnWTlAew5XKBZ3Ay0jfCGN29UmTW09naYd/QwT
cDqG/OMZ3cXh+piuFHM8NesmiEX2XeWM7mbRTxJkcvZxFNo67GvnjUm0BUEVn/eZ
c6Ba4F1bouSg6lZHTzIjMulkMrSISDbEjWlIlrObf5zonWeaYwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOkKI/n4yvcHhB+S8j/arqElkPCtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMWIwNTQ4OWMtNzdlOS0z
MmY2LThmNmYtMWRhMzA5YzIyMTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEnswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACygq62ReQvkhSHCZWBjg6yCuztUKGcBvrxwqAbSAM0nLPkWHaNkVt2bz
sNkVcyO2+JVCGKArLQ36Ec4+GDU9IYIe0BWP+c8I4iJW0M0PoRQJPzEASJGaBfm9
WgpcYwEYZZHTQooykaTvJUEZIQQeQ4whmM+rsmCb/lpozNOm+ephlxBjQNjF1EaC
HCt/XCguC+rRvthr39JkDBNYv/Dymv76hZF62aoQRDZkGZjYTRJHF2ifEcApBBGU
VFV8F44XoBhd4GZy6BVFWvZJx7AspJzTOQ51gAz110N+wttuwZh09ZulmJ9hoHpx
K9Gb4M25KzRknG0jnBnwYWspByDkfA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 21:33:04 2025 by rpki-client