Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/24ffe487-baa6-3577-b5e4-2661959b8841.roa
File: 24ffe487-baa6-3577-b5e4-2661959b8841.roa (raw, json)
Hash identifier: gB4kiooqngJTFzt2dCFfLtAODCxlk4yMvOSq/zmO4SA=
Subject key identifier: 3E:76:4A:39:2E:5C:B6:0E:40:26:71:8E:E8:0C:92:73:DE:7B:48:57
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E2222915D0A37157661755300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/24ffe487-baa6-3577-b5e4-2661959b8841.roa
Signing time: Sat 04 Jun 2022 12:00:00 +0000
ROA not before: Sat 04 Jun 2022 12:00:00 +0000
ROA not after: Sun 10 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.45.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:22:22:91:5d:0a:37:15:76:61:75:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 4 12:00:00 2022 GMT
Not After : Jul 10 04:00:00 2022 GMT
Subject: CN=72baa951-7737-4d63-917b-5fa07301010c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cd:8a:1c:87:e3:e5:1e:73:c9:cb:68:9a:b5:
b1:5e:c1:b1:e2:ba:e5:92:d3:4b:9f:c7:f7:d8:f0:
3c:e6:5a:c3:b4:e2:10:b4:a0:11:a5:9e:d2:4e:91:
ae:f6:07:aa:55:5b:fa:e3:11:bb:76:67:60:12:40:
c6:92:a4:25:21:42:56:1f:14:64:60:86:0f:c5:18:
b8:56:aa:b0:38:98:d8:9e:41:32:64:c3:03:b9:a3:
b8:85:63:1c:22:a7:18:d8:e8:05:ce:0d:89:e3:19:
09:e4:7f:c0:79:a9:1f:cb:3e:df:0b:a8:e5:29:c6:
d2:d6:1b:c0:12:56:73:6d:1c:d6:5e:6b:23:48:ec:
d5:49:af:82:1c:bc:c9:98:ad:93:ef:f6:9d:67:9e:
e8:8e:e0:a6:04:f2:a5:a7:90:d8:3b:0c:9a:86:e7:
e5:01:5b:d2:aa:bf:51:f2:c1:51:a7:dc:05:51:cd:
0d:f0:5b:fa:6c:cc:d1:05:4c:70:44:0c:49:58:cb:
8b:5a:e8:04:49:cb:8f:53:98:ca:79:66:97:d7:05:
ac:d8:0b:58:4d:95:c3:6b:2e:2c:0d:08:5d:04:b9:
c7:6b:db:f5:04:b4:ac:bb:33:0b:4f:06:ec:9c:47:
15:30:7f:69:d8:fe:2e:47:09:77:30:70:2d:de:48:
c9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:76:4A:39:2E:5C:B6:0E:40:26:71:8E:E8:0C:92:73:DE:7B:48:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/24ffe487-baa6-3577-b5e4-2661959b8841.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.45.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:41:14:a9:15:fc:a4:42:ef:e3:65:5e:bc:51:2e:48:0b:03:
86:33:df:0d:86:0c:c5:dc:d3:84:88:d3:e4:c2:10:2f:02:ec:
fc:c2:97:43:f0:7f:ae:7c:75:dd:5a:a8:22:13:a7:5f:95:c5:
aa:6a:7b:21:d1:be:96:43:e7:2c:60:68:40:a9:31:af:f5:da:
2d:b7:95:51:cd:01:82:ae:69:6c:89:0a:cf:19:d9:68:95:4f:
f6:3b:f9:2e:a8:2f:b6:31:48:ff:9c:c6:79:4b:61:05:cb:2c:
db:8a:31:d5:35:54:9c:e8:1f:93:28:14:30:0b:65:53:17:bf:
f6:e4:aa:dd:0f:d5:41:b0:54:03:8e:ec:57:87:7e:9f:bf:b3:
aa:c8:bc:41:23:a3:35:af:52:e3:e9:fe:a7:1d:00:75:b7:a6:
36:a9:38:c4:51:10:cf:3a:82:4c:fc:9a:10:03:bb:0b:fd:6d:
07:92:95:87:e4:36:4e:86:d8:c2:bc:4b:4d:a3:12:44:9b:f4:
b8:50:12:f0:51:95:83:2c:dd:9b:aa:12:89:70:d9:1b:9e:53:
d3:02:cb:7a:a3:3d:35:23:7b:cd:60:21:3c:f9:b9:21:f6:18:
26:92:04:09:f8:16:a9:fd:93:98:33:36:db:43:71:d4:34:66:
fd:50:95:aa
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4iIpFdCjcVdmF1UwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYwNDEyMDAwMFoXDTIyMDcxMDA0MDAwMFowLzEtMCsGA1UEAxMk
NzJiYWE5NTEtNzczNy00ZDYzLTkxN2ItNWZhMDczMDEwMTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs2KHIfj5R5zyctomrWxXsGx4rrlktNLn8f3
2PA85lrDtOIQtKARpZ7STpGu9geqVVv64xG7dmdgEkDGkqQlIUJWHxRkYIYPxRi4
VqqwOJjYnkEyZMMDuaO4hWMcIqcY2OgFzg2J4xkJ5H/Aeakfyz7fC6jlKcbS1hvA
ElZzbRzWXmsjSOzVSa+CHLzJmK2T7/adZ57ojuCmBPKlp5DYOwyahuflAVvSqr9R
8sFRp9wFUc0N8Fv6bMzRBUxwRAxJWMuLWugEScuPU5jKeWaX1wWs2AtYTZXDay4s
DQhdBLnHa9v1BLSsuzMLTwbsnEcVMH9p2P4uRwl3MHAt3kjJpwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFD52SjkuXLYOQCZxjugMknPee0hXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMjRmZmU0ODctYmFhNi0z
NTc3LWI1ZTQtMjY2MTk1OWI4ODQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEi0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYUEUqRX8pELv42VevFEuSAsDhjPfDYYMxdzThIjT5MIQLwLs/MKXQ/B/
rnx13VqoIhOnX5XFqmp7IdG+lkPnLGBoQKkxr/XaLbeVUc0Bgq5pbIkKzxnZaJVP
9jv5LqgvtjFI/5zGeUthBcss24ox1TVUnOgfkygUMAtlUxe/9uSq3Q/VQbBUA47s
V4d+n7+zqsi8QSOjNa9S4+n+px0AdbemNqk4xFEQzzqCTPyaEAO7C/1tB5KVh+Q2
TobYwrxLTaMSRJv0uFAS8FGVgyzdm6oSiXDZG55T0wLLeqM9NSN7zWAhPPm5IfYY
JpIECfgWqf2TmDM220Nx1DRm/VCVqg==
-----END CERTIFICATE-----
Generated at Tue Jun 17 19:41:37 2025 by rpki-client