Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/23a4c37e-8d7b-3bc7-af5e-ccff8a8471df.roa
File: 23a4c37e-8d7b-3bc7-af5e-ccff8a8471df.roa (raw, json)
Hash identifier: RHLX/tRjrQbBU+XKssCwbRIP+IpM4vHlTVuoe60xoOs=
Subject key identifier: A0:79:F4:3B:1B:54:E9:F4:E5:D5:23:47:FE:70:F1:5B:F4:77:64:77
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E2240A3DEBF49518143731A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/23a4c37e-8d7b-3bc7-af5e-ccff8a8471df.roa
Signing time: Sat 04 Jun 2022 12:00:00 +0000
ROA not before: Sat 04 Jun 2022 12:00:00 +0000
ROA not after: Sun 10 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.85.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:22:40:a3:de:bf:49:51:81:43:73:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 4 12:00:00 2022 GMT
Not After : Jul 10 04:00:00 2022 GMT
Subject: CN=b2ff1ddb-5189-4402-92a1-d2e4d48767d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:2f:7e:35:df:67:34:79:02:b9:a2:3e:3f:
0e:a3:5c:a6:a6:3d:b2:59:15:b9:6a:da:27:34:8d:
10:fe:4c:0a:f0:a8:aa:2e:f2:70:3b:99:92:a8:97:
bb:fc:99:2a:96:d7:e3:28:83:ba:3d:f9:34:0d:7f:
18:42:af:a7:3b:06:6b:b2:a3:ab:a3:26:64:7d:f5:
56:08:d8:02:e7:83:0c:90:98:fe:ce:f4:1a:ce:b6:
9b:de:ea:59:de:f1:f7:72:f4:83:98:db:b4:01:d4:
d4:b7:a7:ed:1e:5b:0e:4a:a1:14:b7:d4:64:42:d6:
a5:1b:41:75:09:fc:7a:a0:eb:7c:04:40:e1:84:b1:
38:39:3a:3b:1a:69:da:9a:d2:34:b5:b5:b8:8c:a5:
24:0b:a9:cb:64:41:c2:06:64:69:90:ca:f3:ff:a6:
2f:47:fc:fb:4b:12:cc:ed:70:3d:e1:d7:93:25:c5:
ba:3a:02:21:06:a3:7f:ea:54:91:5a:d3:ae:a4:d9:
49:ad:f1:87:72:41:d7:cd:c1:d1:51:cd:fa:a6:70:
c0:9a:04:7b:05:90:9e:cf:d5:32:3e:69:03:6f:a8:
f6:57:43:e9:2a:a0:21:71:c6:01:a6:6a:6e:dc:10:
f7:53:bd:26:2a:f5:85:8f:8f:17:df:33:c6:cd:72:
fd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:79:F4:3B:1B:54:E9:F4:E5:D5:23:47:FE:70:F1:5B:F4:77:64:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/23a4c37e-8d7b-3bc7-af5e-ccff8a8471df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.85.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:7a:84:49:a8:d8:9d:61:16:80:18:be:86:ab:e6:b8:be:74:
65:70:d4:6d:e4:1b:81:62:c9:37:ca:d1:6d:41:20:5f:8c:68:
f5:b2:9c:66:11:bc:15:f0:da:ee:39:7b:98:49:78:16:9f:fb:
29:33:8d:9f:f7:88:5b:4e:e1:03:1f:42:d3:20:dd:69:19:a2:
b4:e3:4e:dd:16:b1:27:37:9a:21:2d:db:ab:55:91:75:88:c1:
50:2a:d6:56:97:12:64:16:8f:fc:44:3c:4f:e4:a8:8a:e9:91:
a7:5c:3d:c4:e7:a2:ba:70:03:af:25:62:19:a2:e2:1e:16:7a:
d2:92:57:62:f2:fa:9f:7d:22:b9:2d:27:5d:76:ae:68:5e:25:
4c:04:23:cf:a9:b9:ac:fc:84:6c:5a:85:7d:06:e5:ab:8d:d5:
f4:95:58:3b:c4:72:fc:d7:3b:8e:ad:d7:4c:6a:0b:c7:35:27:
2e:36:09:0b:08:b7:d5:89:90:2f:53:bf:8a:60:8b:e3:56:e0:
69:8c:95:03:ce:9e:57:70:af:25:46:67:ee:96:97:c0:b5:7d:
e3:a9:bc:1a:d2:58:82:e2:ba:3e:30:c9:e3:ca:35:69:ba:40:
d8:1c:31:6b:9b:d5:4f:8a:c6:e7:e2:d5:36:0c:86:ae:b6:91:
b7:b9:e8:40
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4iQKPev0lRgUNzGoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYwNDEyMDAwMFoXDTIyMDcxMDA0MDAwMFowLzEtMCsGA1UEAxMk
YjJmZjFkZGItNTE4OS00NDAyLTkyYTEtZDJlNGQ0ODc2N2QyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu4vfjXfZzR5ArmiPj8Oo1ympj2yWRW5aton
NI0Q/kwK8KiqLvJwO5mSqJe7/JkqltfjKIO6Pfk0DX8YQq+nOwZrsqOroyZkffVW
CNgC54MMkJj+zvQazrab3upZ3vH3cvSDmNu0AdTUt6ftHlsOSqEUt9RkQtalG0F1
Cfx6oOt8BEDhhLE4OTo7GmnamtI0tbW4jKUkC6nLZEHCBmRpkMrz/6YvR/z7SxLM
7XA94deTJcW6OgIhBqN/6lSRWtOupNlJrfGHckHXzcHRUc36pnDAmgR7BZCez9Uy
PmkDb6j2V0PpKqAhccYBpmpu3BD3U70mKvWFj48X3zPGzXL9YwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKB59DsbVOn05dUjR/5w8Vv0d2R3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMjNhNGMzN2UtOGQ3Yi0z
YmM3LWFmNWUtY2NmZjhhODQ3MWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAElUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbnqESajYnWEWgBi+hqvmuL50ZXDUbeQbgWLJN8rRbUEgX4xo9bKcZhG8
FfDa7jl7mEl4Fp/7KTONn/eIW07hAx9C0yDdaRmitONO3RaxJzeaIS3bq1WRdYjB
UCrWVpcSZBaP/EQ8T+SoiumRp1w9xOeiunADryViGaLiHhZ60pJXYvL6n30iuS0n
XXauaF4lTAQjz6m5rPyEbFqFfQblq43V9JVYO8Ry/Nc7jq3XTGoLxzUnLjYJCwi3
1YmQL1O/imCL41bgaYyVA86eV3CvJUZn7paXwLV946m8GtJYguK6PjDJ48o1abpA
2Bwxa5vVT4rG5+LVNgyGrraRt7noQA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:22:02 2025 by rpki-client