Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/228c4409-97e0-3bcf-9400-c8d4e500cddc.roa
File: 228c4409-97e0-3bcf-9400-c8d4e500cddc.roa (raw, json)
Hash identifier: kuSqV8g61j8P697akSkcVCkjlXkXaT5qCF5cdI+hU80=
Subject key identifier: 70:40:BB:8C:44:7B:3C:6D:21:EA:A7:13:E0:44:60:8D:F6:BD:B8:EC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA3EB02BC44C7865BC6B65EA0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/228c4409-97e0-3bcf-9400-c8d4e500cddc.roa
Signing time: Thu 20 Oct 2022 12:00:00 +0000
ROA not before: Thu 20 Oct 2022 12:00:00 +0000
ROA not after: Fri 25 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.113.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a3:eb:02:bc:44:c7:86:5b:c6:b6:5e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 20 12:00:00 2022 GMT
Not After : Nov 25 05:00:00 2022 GMT
Subject: CN=a8492728-d940-486c-815a-b90893b9935e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6e:bd:46:92:f5:a4:ce:66:92:9e:96:20:f8:
f4:7f:54:16:7a:93:f8:db:b6:ad:b0:f4:fa:92:01:
0b:93:46:f2:1d:4b:c1:00:79:a5:23:5c:bb:08:7f:
df:99:9a:af:8c:22:6e:0b:ef:94:46:5d:48:97:18:
1b:98:10:d7:c0:cc:36:2e:a6:43:e7:12:5a:ab:fb:
ec:07:69:96:3a:12:6d:f1:1e:d0:28:25:0c:f0:c0:
56:a1:1d:f5:c7:4f:26:93:d7:ee:d7:00:7c:23:24:
e5:a4:f4:22:83:7c:e3:fb:46:f1:fc:ec:5c:de:58:
e7:e5:c7:31:c3:0b:c8:5c:23:d7:9c:11:4b:90:55:
20:f8:d0:79:77:bb:66:fe:6b:9c:b3:e8:07:8b:95:
dc:06:1e:e6:87:43:cb:b7:d3:b7:d6:4a:a1:53:2f:
9c:f1:9a:a2:b1:31:f6:d0:df:cc:da:2c:5c:40:de:
d5:a2:6f:8f:da:c4:1f:40:5b:58:56:ec:f1:1f:c7:
2f:78:68:d1:8a:13:02:c3:ca:2a:8e:94:91:4e:45:
af:ef:9b:64:65:ec:03:0e:73:b7:35:40:07:f3:a7:
9c:ea:54:ea:b9:eb:c5:c7:a6:1d:03:6d:14:99:6a:
bc:97:7f:50:4b:b4:da:47:a2:d5:22:85:9b:d9:7a:
ef:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:40:BB:8C:44:7B:3C:6D:21:EA:A7:13:E0:44:60:8D:F6:BD:B8:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/228c4409-97e0-3bcf-9400-c8d4e500cddc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.113.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:b6:0c:dd:6f:02:8b:c8:1b:0f:34:c3:54:b2:ae:ed:cb:16:
50:5a:65:2c:00:75:81:de:f9:12:62:37:7f:f7:ce:e0:49:a0:
cb:a4:cd:17:14:7b:a2:64:bc:4c:17:7c:18:4a:b7:e4:12:b1:
bd:0f:a2:57:fd:e3:9d:46:78:fd:ae:17:6a:c0:30:f3:64:71:
d7:6b:b7:18:42:17:71:a1:e4:58:e8:ec:4c:8e:58:61:4c:49:
0c:93:6c:e7:fd:30:dc:d1:6c:24:9d:48:0a:4c:d7:f3:0f:d8:
f6:fe:61:e6:8e:c5:4a:03:5b:67:15:f0:e9:e8:30:8c:76:43:
8b:70:8c:28:6c:a3:c9:aa:b2:de:a0:41:e6:0a:a6:a6:9d:0a:
2f:94:9d:f6:ae:77:ba:2c:53:d6:e4:74:e3:e5:d2:7b:be:1d:
6c:5c:c5:24:2f:61:ec:d0:89:57:a7:13:1a:86:0c:b1:f3:b6:
3e:30:dd:f0:97:72:c7:df:5f:13:a1:75:ee:ed:ea:64:f5:44:
a8:3b:4e:9f:34:a3:60:00:55:c4:a3:87:42:e5:a3:e5:2f:ce:
1a:13:fd:50:fd:ae:ed:e2:44:1e:1a:d3:ff:fe:a6:3f:b7:ac:
4c:1d:ec:9f:4a:b8:ba:d2:55:3e:b5:55:0e:ec:52:a5:a8:2d:
ef:d5:56:21
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+j6wK8RMeGW8a2XqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAyMDEyMDAwMFoXDTIyMTEyNTA1MDAwMFowLzEtMCsGA1UEAxMk
YTg0OTI3MjgtZDk0MC00ODZjLTgxNWEtYjkwODkzYjk5MzVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG69RpL1pM5mkp6WIPj0f1QWepP427atsPT6
kgELk0byHUvBAHmlI1y7CH/fmZqvjCJuC++URl1IlxgbmBDXwMw2LqZD5xJaq/vs
B2mWOhJt8R7QKCUM8MBWoR31x08mk9fu1wB8IyTlpPQig3zj+0bx/Oxc3ljn5ccx
wwvIXCPXnBFLkFUg+NB5d7tm/mucs+gHi5XcBh7mh0PLt9O31kqhUy+c8ZqisTH2
0N/M2ixcQN7Vom+P2sQfQFtYVuzxH8cveGjRihMCw8oqjpSRTkWv75tkZewDDnO3
NUAH86ec6lTquevFx6YdA20UmWq8l39QS7TaR6LVIoWb2XrvIwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHBAu4xEezxtIeqnE+BEYI32vbjsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMjI4YzQ0MDktOTdlMC0z
YmNmLTk0MDAtYzhkNGU1MDBjZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEnEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAprYM3W8Ci8gbDzTDVLKu7csWUFplLAB1gd75EmI3f/fO4Emgy6TNFxR7
omS8TBd8GEq35BKxvQ+iV/3jnUZ4/a4XasAw82Rx12u3GEIXcaHkWOjsTI5YYUxJ
DJNs5/0w3NFsJJ1ICkzX8w/Y9v5h5o7FSgNbZxXw6egwjHZDi3CMKGyjyaqy3qBB
5gqmpp0KL5Sd9q53uixT1uR04+XSe74dbFzFJC9h7NCJV6cTGoYMsfO2PjDd8Jdy
x99fE6F17u3qZPVEqDtOnzSjYABVxKOHQuWj5S/OGhP9UP2u7eJEHhrT//6mP7es
TB3sn0q4utJVPrVVDuxSpagt79VWIQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:15:06 2025 by rpki-client