Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/230ee2a8-c0bc-389f-a124-cb08d622133f.roa
File: 230ee2a8-c0bc-389f-a124-cb08d622133f.roa (raw, json)
Hash identifier: NiRMTngFxV55aS4b7Lfnd38GjekuBZPHAcOlcJD833w=
Subject key identifier: 63:8D:40:27:DF:5C:F7:9A:28:F0:29:EC:68:CD:1A:66:F2:C5:F8:11
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D596D281CCFD533D5A7AA5910
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/230ee2a8-c0bc-389f-a124-cb08d622133f.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.76.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:6d:28:1c:cf:d5:33:d5:a7:aa:59:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=7c7eec0c-d558-45f0-ad32-6a758b86591a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:82:67:05:e7:f8:4f:62:77:ff:db:10:ed:
b5:ea:16:da:3d:cf:b5:5a:05:56:cd:87:c3:29:46:
d2:eb:7d:32:c6:42:73:99:43:3c:ca:97:4c:f8:20:
68:5a:95:7b:4c:c7:c8:ff:f5:d0:0d:eb:df:53:0b:
a6:80:58:a8:3a:96:e6:0d:27:db:10:df:8a:84:4f:
c7:7d:26:ac:bc:72:10:0b:44:a2:9c:a2:ad:ba:23:
8f:d8:d5:8c:2a:fe:f2:90:09:a8:fa:fd:f1:fb:55:
84:11:b6:e1:b7:4a:df:dd:28:85:d6:5a:f4:87:f0:
3d:51:e9:b5:92:d4:6c:13:de:d9:b9:dc:42:3e:a0:
f1:ac:ba:66:67:a1:1b:7e:92:0a:25:cb:6f:47:f2:
af:68:2e:20:a5:76:c7:b7:19:56:19:62:4b:d7:96:
da:57:d0:a6:1e:15:1c:af:13:43:68:86:ee:37:64:
bc:27:96:b9:42:fa:c7:fa:be:6d:9b:42:d6:8e:df:
fb:93:c9:28:c3:37:be:c6:65:19:bd:93:0f:8c:59:
aa:38:ad:6f:5f:40:cb:89:f7:ed:6a:f8:b7:03:49:
b3:12:4a:9b:62:66:07:6a:03:91:3b:4d:60:6d:be:
64:33:7f:e5:61:95:e1:22:39:dd:9e:74:fa:15:a7:
9c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8D:40:27:DF:5C:F7:9A:28:F0:29:EC:68:CD:1A:66:F2:C5:F8:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/230ee2a8-c0bc-389f-a124-cb08d622133f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.76.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:c3:74:f6:f3:7b:5c:31:97:e6:81:7f:44:4c:cd:3a:86:67:
2d:6a:55:ab:56:f7:f4:58:74:f6:06:be:eb:23:de:ab:97:2a:
4e:22:b4:76:a4:1f:82:1c:9e:ac:ae:e9:92:99:14:d0:f8:5d:
a6:52:4e:7e:88:10:a1:c2:65:69:41:74:0d:51:5b:c0:7d:ad:
43:89:c8:dd:b7:ac:2d:d0:4b:ff:18:ae:8b:57:53:b0:97:98:
96:d1:04:ed:bd:4a:01:42:2f:5c:24:d6:cf:72:5a:28:3e:8c:
8d:74:6a:2d:17:4b:d4:f1:95:97:4f:38:f6:51:9f:7e:84:a4:
7f:69:96:c9:ee:64:e7:fa:af:97:9f:1d:73:aa:4c:66:06:58:
a6:96:97:cd:ff:e2:f3:80:a2:93:0f:44:22:a0:62:d4:cc:52:
40:b7:50:ce:90:97:b8:b6:e4:58:f7:ed:90:d0:c0:9f:83:46:
36:aa:0c:d3:37:91:11:0e:74:5a:46:a1:09:50:31:79:b0:29:
56:69:29:47:18:c8:d3:7f:10:31:e8:bc:d1:9a:43:a1:38:b8:
1d:96:83:76:39:78:b5:41:28:e7:1b:7c:57:e8:a9:b3:f2:c1:
6e:a4:9b:95:d8:8a:a1:4c:ec:01:fb:70:58:ce:b8:2a:65:68:
a3:24:70:67
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1ZbSgcz9Uz1aeqWRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMyNTA0MDAwMFoXDTIyMDQyOTA0MDAwMFowLzEtMCsGA1UEAxMk
N2M3ZWVjMGMtZDU1OC00NWYwLWFkMzItNmE3NThiODY1OTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzSCZwXn+E9id//bEO216hbaPc+1WgVWzYfD
KUbS630yxkJzmUM8ypdM+CBoWpV7TMfI//XQDevfUwumgFioOpbmDSfbEN+KhE/H
fSasvHIQC0SinKKtuiOP2NWMKv7ykAmo+v3x+1WEEbbht0rf3SiF1lr0h/A9Uem1
ktRsE97ZudxCPqDxrLpmZ6EbfpIKJctvR/KvaC4gpXbHtxlWGWJL15baV9CmHhUc
rxNDaIbuN2S8J5a5QvrH+r5tm0LWjt/7k8kowze+xmUZvZMPjFmqOK1vX0DLifft
avi3A0mzEkqbYmYHagORO01gbb5kM3/lYZXhIjndnnT6Faec9wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGONQCffXPeaKPAp7GjNGmbyxfgRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMjMwZWUyYTgtYzBiYy0z
ODlmLWExMjQtY2IwOGQ2MjIxMzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEkwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEApcN09vN7XDGX5oF/REzNOoZnLWpVq1b39Fh09ga+6yPeq5cqTiK0dqQf
ghyerK7pkpkU0PhdplJOfogQocJlaUF0DVFbwH2tQ4nI3besLdBL/xiui1dTsJeY
ltEE7b1KAUIvXCTWz3JaKD6MjXRqLRdL1PGVl0849lGffoSkf2mWye5k5/qvl58d
c6pMZgZYppaXzf/i84Cikw9EIqBi1MxSQLdQzpCXuLbkWPftkNDAn4NGNqoM0zeR
EQ50WkahCVAxebApVmkpRxjI038QMei80ZpDoTi4HZaDdjl4tUEo5xt8V+ips/LB
bqSbldiKoUzsAftwWM64KmVooyRwZw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:41:40 2025 by rpki-client