Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/25e41b19-5657-3323-a7e6-9087ae474649.roa
File: 25e41b19-5657-3323-a7e6-9087ae474649.roa (raw, json)
Hash identifier: dtg+Ntdtn8t3AZO6iVxD/HS2WQRnRC+F27dHgCTmQRY=
Subject key identifier: FC:82:CB:53:4F:D4:79:54:CC:AF:FA:7D:61:3C:16:BF:48:30:AC:0A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C961DF5FC79119480F4EFEF40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/25e41b19-5657-3323-a7e6-9087ae474649.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.188.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:1d:f5:fc:79:11:94:80:f4:ef:ef:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=4a678c81-89af-4331-a85e-74969ef6e7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:18:aa:fe:90:18:4e:8d:3e:9e:ef:ca:87:07:
29:7e:dd:1c:86:f4:17:d4:8d:f2:58:b8:c3:00:c8:
38:91:03:32:5a:45:9e:4a:25:41:db:17:7f:0f:76:
cd:de:f6:97:6e:35:c8:45:e3:e7:57:aa:d4:01:21:
50:bb:98:f7:c6:07:44:7e:9c:e7:94:3b:14:93:5c:
26:09:d0:18:21:d9:66:0d:56:cd:5b:2c:1f:38:33:
a1:19:c8:f6:ff:5c:2e:a4:0d:cd:a9:dc:45:60:07:
44:ba:07:bc:08:b7:b0:58:68:de:83:5f:14:94:86:
d9:80:1c:b6:b5:a9:4a:f0:7a:ac:c4:d0:55:af:d3:
fb:d2:11:bf:be:35:8c:29:3b:ce:db:5c:23:bf:1b:
b8:9d:01:63:39:82:04:1a:5c:ba:9b:34:1c:ba:5e:
f4:ca:f4:a2:b1:81:1c:5f:6c:f7:32:fd:44:23:11:
7f:2e:09:b2:bb:73:20:1a:f9:2e:61:5e:45:ff:69:
dd:bb:ab:35:34:7d:2d:94:a0:9a:61:ef:35:5a:b6:
79:47:c5:b8:ca:68:ec:73:77:67:54:ec:6c:a1:15:
ec:be:75:16:49:94:fc:4f:c6:ac:19:0d:66:65:26:
71:03:e8:5f:e7:24:92:23:6b:2e:0c:59:44:2f:26:
73:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:82:CB:53:4F:D4:79:54:CC:AF:FA:7D:61:3C:16:BF:48:30:AC:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/25e41b19-5657-3323-a7e6-9087ae474649.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.188.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:b6:35:22:37:0e:c1:05:6d:18:21:aa:1a:36:e5:e6:17:8a:
f9:47:5e:8d:ad:b7:d6:a0:fe:5d:b8:17:0e:7b:ce:8c:79:1a:
d1:6b:2c:6d:e8:be:33:53:e9:65:5c:b4:61:47:a7:54:c9:d8:
d6:23:76:ba:84:ea:50:df:9f:e1:64:15:d0:81:35:02:b9:da:
09:5e:5c:5c:c0:e7:d3:88:e4:c0:8b:28:61:7e:89:2d:19:23:
21:08:35:b5:4c:d4:3b:07:82:db:f7:07:04:10:f0:4e:30:2a:
d4:d6:63:1f:5c:a1:f4:e0:db:33:4c:bc:cd:3d:4f:f1:0a:58:
8b:b4:9b:e2:37:18:db:36:df:63:47:28:0b:57:fa:4c:77:6a:
96:21:a1:35:10:7f:cf:c4:52:c9:5a:00:b2:07:f8:ea:a5:15:
1e:e0:68:23:6d:18:1c:09:f3:8a:20:02:33:cc:de:69:55:95:
bc:6c:2f:9f:8d:6d:41:fc:34:ee:ac:33:82:17:b8:be:88:b9:
27:60:b8:99:7b:62:5b:33:c2:f3:d6:8b:f6:44:bb:26:58:0e:
fe:58:f4:6b:9f:a3:c7:63:c0:a9:87:49:01:be:45:51:41:c8:
8d:75:f0:96:28:04:18:1f:9e:a0:77:17:54:13:e2:11:48:13:
55:80:38:c5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDyWHfX8eRGUgPTv70AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDExNDA1MDAwMFoXDTIyMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
NGE2NzhjODEtODlhZi00MzMxLWE4NWUtNzQ5NjllZjZlN2M2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxiq/pAYTo0+nu/Khwcpft0chvQX1I3yWLjD
AMg4kQMyWkWeSiVB2xd/D3bN3vaXbjXIRePnV6rUASFQu5j3xgdEfpznlDsUk1wm
CdAYIdlmDVbNWywfODOhGcj2/1wupA3NqdxFYAdEuge8CLewWGjeg18UlIbZgBy2
talK8HqsxNBVr9P70hG/vjWMKTvO21wjvxu4nQFjOYIEGly6mzQcul70yvSisYEc
X2z3Mv1EIxF/Lgmyu3MgGvkuYV5F/2ndu6s1NH0tlKCaYe81WrZ5R8W4ymjsc3dn
VOxsoRXsvnUWSZT8T8asGQ1mZSZxA+hf5ySSI2suDFlELyZzFwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPyCy1NP1HlUzK/6fWE8Fr9IMKwKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMjVlNDFiMTktNTY1Ny0z
MzIzLWE3ZTYtOTA4N2FlNDc0NjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAErwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATLY1IjcOwQVtGCGqGjbl5heK+Udeja231qD+XbgXDnvOjHka0Wssbei+
M1PpZVy0YUenVMnY1iN2uoTqUN+f4WQV0IE1ArnaCV5cXMDn04jkwIsoYX6JLRkj
IQg1tUzUOweC2/cHBBDwTjAq1NZjH1yh9ODbM0y8zT1P8QpYi7Sb4jcY2zbfY0co
C1f6THdqliGhNRB/z8RSyVoAsgf46qUVHuBoI20YHAnziiACM8zeaVWVvGwvn41t
Qfw07qwzghe4voi5J2C4mXtiWzPC89aL9kS7JlgO/lj0a5+jx2PAqYdJAb5FUUHI
jXXwligEGB+eoHcXVBPiEUgTVYA4xQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:18:17 2025 by rpki-client