Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/288e6bfb-b1de-3de5-a603-4137cbbf6267.roa
File: 288e6bfb-b1de-3de5-a603-4137cbbf6267.roa (raw, json)
Hash identifier: n2IDDYbhb1kdt188H6Sl9RSHtFwmguw3IpkdUvtarKE=
Subject key identifier: 09:BD:8A:27:4F:82:EA:A8:04:B3:81:D8:C2:3E:2D:4A:35:1B:65:02
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E97BCD7333C322B5079C0E280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/288e6bfb-b1de-3de5-a603-4137cbbf6267.roa
Signing time: Sat 16 Jul 2022 12:00:00 +0000
ROA not before: Sat 16 Jul 2022 12:00:00 +0000
ROA not after: Sun 21 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.54.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:97:bc:d7:33:3c:32:2b:50:79:c0:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 16 12:00:00 2022 GMT
Not After : Aug 21 04:00:00 2022 GMT
Subject: CN=1e7f7321-69db-4b15-b680-6ed8f5973ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dd:a6:90:12:40:20:14:7d:50:4d:ea:86:8c:
65:3c:77:b7:49:84:4e:97:f2:d2:72:2c:49:1f:03:
65:f6:54:62:bb:a9:13:8d:49:80:04:81:84:e3:f7:
ee:71:cb:21:8b:09:8a:b1:66:6b:3f:38:05:91:d9:
39:79:ab:a4:5c:36:31:df:03:f6:67:42:88:db:95:
c6:f5:35:50:7c:31:c0:be:d2:fd:c4:aa:a6:a3:8c:
aa:5c:60:96:3b:f7:d1:f6:8c:a9:fd:b2:29:d0:d2:
8f:01:58:d9:f1:b5:7a:fe:9e:59:08:53:77:a8:c7:
29:30:ee:ce:3d:eb:bc:0e:c0:ff:f6:a9:f5:31:ee:
11:14:ed:d7:6c:c8:b2:89:d0:21:33:2f:13:e7:ef:
d0:4b:27:d7:63:32:04:49:79:10:0c:53:62:33:6d:
17:24:0a:09:c6:ec:02:13:d9:3e:48:05:0e:cc:32:
07:96:5a:67:60:9b:db:f1:5e:d0:a0:89:a8:54:5b:
39:ca:34:8f:d1:1b:8e:49:54:8e:0e:51:9f:b9:d1:
db:a6:41:af:0d:4e:ee:6a:50:3e:78:42:dd:51:31:
e2:ff:2d:df:3c:b8:dd:7a:10:a4:c6:9a:ac:88:37:
3f:64:86:f5:24:8b:d4:aa:b1:57:ed:6d:0a:59:ce:
05:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BD:8A:27:4F:82:EA:A8:04:B3:81:D8:C2:3E:2D:4A:35:1B:65:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/288e6bfb-b1de-3de5-a603-4137cbbf6267.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.54.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:84:77:e0:d3:1c:44:48:bf:88:a5:32:e7:a1:cd:13:f2:ed:
28:14:20:05:15:50:fc:3b:4b:3c:f8:a5:99:c4:52:71:e7:b1:
39:5f:ee:ce:ba:6f:7f:a5:e3:c0:bc:70:1f:ce:b6:44:30:56:
59:8f:50:21:b9:81:c0:50:d3:f8:3a:05:dc:27:e7:59:49:4d:
da:e1:98:7e:af:84:d5:10:41:f8:74:b1:cb:da:0f:33:29:ac:
f4:31:10:e1:f1:89:d0:70:7d:06:03:2c:cd:c6:0b:3e:65:8d:
be:f0:25:c2:3a:bb:3e:60:2a:df:d5:a0:f2:8e:d9:d1:77:39:
d5:e4:f9:5e:b1:5f:c8:61:34:79:38:79:74:19:71:be:11:5c:
04:30:fb:b8:24:05:78:34:dc:04:9f:a6:63:bf:88:a7:33:fa:
13:d1:7e:f9:a4:55:8f:e1:b7:c5:5a:36:f2:43:5a:45:aa:98:
87:d1:db:6d:c3:2e:82:1f:27:b3:60:4b:fd:11:b0:56:4a:7c:
63:1b:84:a5:cb:a2:35:d8:93:f5:b8:02:a0:e7:28:f2:25:d3:
ca:5b:b8:86:66:8e:23:fd:1e:f9:a3:49:0b:0c:72:0e:a9:6a:
ce:3e:7e:f4:c6:a1:74:90:3a:37:63:7c:0c:fa:ae:3c:5c:4c:
2c:b5:64:da
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6XvNczPDIrUHnA4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcxNjEyMDAwMFoXDTIyMDgyMTA0MDAwMFowLzEtMCsGA1UEAxMk
MWU3ZjczMjEtNjlkYi00YjE1LWI2ODAtNmVkOGY1OTczZWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4t2mkBJAIBR9UE3qhoxlPHe3SYROl/LScixJ
HwNl9lRiu6kTjUmABIGE4/fuccshiwmKsWZrPzgFkdk5eaukXDYx3wP2Z0KI25XG
9TVQfDHAvtL9xKqmo4yqXGCWO/fR9oyp/bIp0NKPAVjZ8bV6/p5ZCFN3qMcpMO7O
Peu8DsD/9qn1Me4RFO3XbMiyidAhMy8T5+/QSyfXYzIESXkQDFNiM20XJAoJxuwC
E9k+SAUOzDIHllpnYJvb8V7QoImoVFs5yjSP0RuOSVSODlGfudHbpkGvDU7ualA+
eELdUTHi/y3fPLjdehCkxpqsiDc/ZIb1JIvUqrFX7W0KWc4F4QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAm9iidPguqoBLOB2MI+LUo1G2UCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMjg4ZTZiZmItYjFkZS0z
ZGU1LWE2MDMtNDEzN2NiYmY2MjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEjYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAeoR34NMcREi/iKUy56HNE/LtKBQgBRVQ/DtLPPilmcRSceexOV/uzrpv
f6XjwLxwH862RDBWWY9QIbmBwFDT+DoF3CfnWUlN2uGYfq+E1RBB+HSxy9oPMyms
9DEQ4fGJ0HB9BgMszcYLPmWNvvAlwjq7PmAq39Wg8o7Z0Xc51eT5XrFfyGE0eTh5
dBlxvhFcBDD7uCQFeDTcBJ+mY7+IpzP6E9F++aRVj+G3xVo28kNaRaqYh9HbbcMu
gh8ns2BL/RGwVkp8YxuEpcuiNdiT9bgCoOco8iXTylu4hmaOI/0e+aNJCwxyDqlq
zj5+9MahdJA6N2N8DPquPFxMLLVk2g==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:50:05 2025 by rpki-client