Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b98a888-1f41-32e4-8178-12ff75d3f3a1.roa
File: 1b98a888-1f41-32e4-8178-12ff75d3f3a1.roa (raw, json)
Hash identifier: jc8N6tmZgz8SebP7Iy4vBvF0bFwq8j7bpZfleeGL54M=
Subject key identifier: 99:AD:F9:9C:7B:70:CD:D4:07:DF:F0:53:22:CE:F8:FD:E8:97:B5:39
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584045C058BDB247B74F45516800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b98a888-1f41-32e4-8178-12ff75d3f3a1.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.46.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:45:c0:58:bd:b2:47:b7:4f:45:51:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=e353d128-d648-44e8-85bd-9908f667a360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fc:35:34:d5:c7:0b:3e:0e:cf:ef:c2:9b:d3:
62:6d:78:f5:56:56:01:5d:ae:f1:97:db:16:c3:89:
1a:72:d6:d7:18:f5:7e:64:e7:41:ca:53:8b:40:61:
2c:74:9b:07:94:87:1a:47:bf:c5:29:1e:20:9c:9d:
36:5a:29:1c:d6:2e:fe:32:b1:77:0b:5f:09:c6:0e:
a0:d4:eb:f6:f2:9b:77:6e:56:a7:a2:e0:ce:de:b4:
ef:92:ed:ac:61:59:e1:02:92:1f:a2:ca:d4:7a:d0:
1c:12:55:d1:ff:4b:17:0a:05:64:db:47:a8:49:61:
20:ff:85:ad:84:46:c4:1a:95:b7:b0:4e:6a:a2:e0:
e4:5e:84:00:83:8f:6c:bf:63:bb:03:97:40:50:4f:
56:b3:47:7e:89:d3:53:6f:c9:b8:4d:84:0c:84:e4:
58:13:60:73:73:3b:f7:6d:2b:c3:49:eb:af:43:e7:
66:79:78:99:42:c3:38:c4:74:bf:7d:bf:22:51:ff:
69:98:4e:21:2d:1e:71:ae:dd:b6:8b:22:67:b4:67:
59:cb:e4:21:e7:3a:e1:e8:4d:e7:44:f5:8c:7a:f6:
2a:27:c6:54:81:b2:01:4a:39:79:5a:19:62:af:c4:
3b:32:9b:ce:b4:d4:4a:3c:1d:85:98:8b:e2:2f:f9:
12:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AD:F9:9C:7B:70:CD:D4:07:DF:F0:53:22:CE:F8:FD:E8:97:B5:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b98a888-1f41-32e4-8178-12ff75d3f3a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.46.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:95:f3:8e:a2:9d:32:25:80:91:ba:6e:29:6b:62:ed:79:80:
69:c5:cb:d5:d0:66:a6:7b:1f:a6:0a:0f:bd:f8:63:66:62:21:
ca:3e:b9:7e:7f:f6:91:4b:c7:67:25:3f:bf:5e:89:69:ee:15:
77:d5:74:23:64:6f:ca:23:48:99:c6:81:35:1f:3f:af:6c:2d:
1e:b4:62:f7:f5:c3:19:7e:bf:7f:e0:75:96:c8:52:82:bc:ac:
32:35:ed:a4:34:a0:fe:cd:6c:53:ae:f3:e5:76:7b:59:d0:e1:
58:5e:de:b7:47:6a:61:56:b2:f4:e8:4a:47:2d:23:42:6f:fd:
18:47:71:4b:39:2d:87:21:e6:37:b6:82:18:b8:f7:d0:7d:e8:
2d:28:cc:78:7d:fa:8c:de:de:89:07:75:79:a1:38:9c:f0:77:
cb:16:bc:0c:3c:e9:ea:7f:b0:1d:82:fe:02:ee:82:a9:2d:68:
48:fe:9b:1d:30:04:f4:09:06:d3:70:96:c7:97:4d:77:31:bd:
64:11:4a:37:70:6b:4d:c6:89:0c:b9:b7:d5:92:60:85:10:d4:
b6:28:5e:94:b6:b0:05:8a:fd:66:16:8b:87:39:8e:aa:a2:8a:
f3:4c:7d:81:c2:98:d2:ee:0e:3a:4e:9f:88:0c:9f:d9:be:99:
9e:74:5a:e4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBFwFi9ske3T0VRaAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNzEyMDAwMFoXDTIzMDEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
ZTM1M2QxMjgtZDY0OC00NGU4LTg1YmQtOTkwOGY2NjdhMzYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfw1NNXHCz4Oz+/Cm9NibXj1VlYBXa7xl9sW
w4kactbXGPV+ZOdBylOLQGEsdJsHlIcaR7/FKR4gnJ02Wikc1i7+MrF3C18Jxg6g
1Ov28pt3blanouDO3rTvku2sYVnhApIfosrUetAcElXR/0sXCgVk20eoSWEg/4Wt
hEbEGpW3sE5qouDkXoQAg49sv2O7A5dAUE9Ws0d+idNTb8m4TYQMhORYE2Bzczv3
bSvDSeuvQ+dmeXiZQsM4xHS/fb8iUf9pmE4hLR5xrt22iyJntGdZy+Qh5zrh6E3n
RPWMevYqJ8ZUgbIBSjl5Whlir8Q7MpvOtNRKPB2FmIviL/kSLwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJmt+Zx7cM3UB9/wUyLO+P3ol7U5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMWI5OGE4ODgtMWY0MS0z
MmU0LTgxNzgtMTJmZjc1ZDNmM2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEi4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAEZXzjqKdMiWAkbpuKWti7XmAacXL1dBmpnsfpgoPvfhjZmIhyj65fn/2
kUvHZyU/v16Jae4Vd9V0I2RvyiNImcaBNR8/r2wtHrRi9/XDGX6/f+B1lshSgrys
MjXtpDSg/s1sU67z5XZ7WdDhWF7et0dqYVay9OhKRy0jQm/9GEdxSzkthyHmN7aC
GLj30H3oLSjMeH36jN7eiQd1eaE4nPB3yxa8DDzp6n+wHYL+Au6CqS1oSP6bHTAE
9AkG03CWx5dNdzG9ZBFKN3BrTcaJDLm31ZJghRDUtihelLawBYr9ZhaLhzmOqqKK
80x9gcKY0u4OOk6fiAyf2b6ZnnRa5A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:05:12 2025 by rpki-client