Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b3d94f7-ad17-3d08-b893-8e492b38648b.roa
File: 2b3d94f7-ad17-3d08-b893-8e492b38648b.roa (raw, json)
Hash identifier: q+9/ZiYoTNyRBLwgcB+xOy2slGxJY5MCLFjKByGxE/M=
Subject key identifier: 87:70:81:F1:DE:02:53:3F:F2:FB:24:DB:CB:4D:06:14:1D:3A:64:20
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E97723822C847B2D0974C9CC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b3d94f7-ad17-3d08-b893-8e492b38648b.roa
Signing time: Sat 16 Jul 2022 12:00:00 +0000
ROA not before: Sat 16 Jul 2022 12:00:00 +0000
ROA not after: Sun 21 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.72.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:97:72:38:22:c8:47:b2:d0:97:4c:9c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 16 12:00:00 2022 GMT
Not After : Aug 21 04:00:00 2022 GMT
Subject: CN=d86b0db5-d554-4605-b1bd-aadbac5ebe4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c8:3e:9c:3d:87:2d:7a:33:7f:be:a7:89:8e:
95:f2:55:1f:ac:3a:ef:f1:7f:84:ef:e4:c5:c4:b5:
58:56:aa:f3:22:f4:e7:ff:cc:54:07:33:fb:09:23:
17:c0:6c:38:d2:24:b9:4f:2d:e2:d8:2f:d2:b7:94:
d9:ff:ce:44:7b:a8:d7:60:4b:31:cf:18:99:4d:88:
0d:50:10:8b:48:fe:59:f1:fb:a8:9a:2f:da:7f:ad:
60:69:8b:60:c9:b3:04:97:0e:fd:8a:91:8e:7b:4e:
88:2f:07:e0:3e:c2:c1:7b:36:2a:0e:87:0a:19:e2:
5d:22:4f:31:3b:2b:2a:52:07:4d:a5:28:23:09:b1:
72:13:c8:a2:c8:7b:75:0f:9e:38:96:b1:35:e1:6d:
64:2b:c8:58:1e:63:56:a9:4b:9c:2d:6b:c3:34:11:
97:67:df:6c:0b:1b:86:1b:68:f1:07:a1:64:77:fe:
2e:8b:ed:55:72:9a:80:28:d5:7f:1f:8a:73:a0:b7:
fc:80:f8:81:85:ad:2b:5a:10:5d:82:5d:08:93:e3:
51:8b:2b:71:41:fe:36:14:ae:d0:05:95:41:cf:a8:
b0:f8:56:40:52:c3:22:66:7d:bb:d5:f1:95:27:c8:
77:c9:13:97:47:31:61:db:e9:8b:50:3f:d4:4c:39:
e6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:70:81:F1:DE:02:53:3F:F2:FB:24:DB:CB:4D:06:14:1D:3A:64:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b3d94f7-ad17-3d08-b893-8e492b38648b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.72.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:82:3b:34:f1:1a:be:ea:8b:60:eb:33:3a:72:27:93:f3:89:
00:f0:4b:af:ec:f8:b0:6f:49:52:b5:8a:25:be:17:a7:f2:7e:
d2:27:8f:99:a5:7a:fa:77:23:a2:87:b6:93:5c:de:4e:35:48:
d6:79:f5:d8:e4:98:65:f0:9f:72:57:d5:5a:7b:57:4d:93:cf:
2b:0f:25:b3:1a:52:36:c4:b7:a5:b3:c7:8a:8e:ed:11:be:b7:
a9:e3:11:9e:3f:f6:c9:c3:d7:ca:b1:7f:31:8c:07:84:84:b5:
af:f3:f7:aa:16:36:f1:7a:90:d1:83:ea:93:a4:c3:18:ba:35:
66:11:57:5a:4c:4a:89:af:00:89:95:3c:b9:2d:5a:f5:98:72:
1c:45:51:ef:c3:92:8b:a3:fc:78:94:8c:6b:ca:e8:5c:72:6f:
41:aa:43:c2:af:1d:10:85:2b:41:f4:69:04:9b:dd:9f:06:56:
59:98:34:00:1f:de:0f:e4:a4:d1:ae:04:f9:59:80:67:22:7c:
1f:5c:15:00:f8:d7:da:75:91:1f:e7:17:9b:65:59:b3:53:11:
95:ef:f7:81:51:20:db:1e:14:7b:1e:1d:ff:7b:df:79:58:6a:
45:ca:a7:78:37:c2:78:a2:64:e1:2c:4a:a4:73:d5:05:5d:2a:
50:eb:de:5d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6XcjgiyEey0JdMnMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcxNjEyMDAwMFoXDTIyMDgyMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZDg2YjBkYjUtZDU1NC00NjA1LWIxYmQtYWFkYmFjNWViZTRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksg+nD2HLXozf76niY6V8lUfrDrv8X+E7+TF
xLVYVqrzIvTn/8xUBzP7CSMXwGw40iS5Ty3i2C/St5TZ/85Ee6jXYEsxzxiZTYgN
UBCLSP5Z8fuomi/af61gaYtgybMElw79ipGOe06ILwfgPsLBezYqDocKGeJdIk8x
OysqUgdNpSgjCbFyE8iiyHt1D544lrE14W1kK8hYHmNWqUucLWvDNBGXZ99sCxuG
G2jxB6Fkd/4ui+1VcpqAKNV/H4pzoLf8gPiBha0rWhBdgl0Ik+NRiytxQf42FK7Q
BZVBz6iw+FZAUsMiZn271fGVJ8h3yROXRzFh2+mLUD/UTDnm3wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIdwgfHeAlM/8vsk28tNBhQdOmQgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMmIzZDk0ZjctYWQxNy0z
ZDA4LWI4OTMtOGU0OTJiMzg2NDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEkgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAR4I7NPEavuqLYOszOnInk/OJAPBLr+z4sG9JUrWKJb4Xp/J+0iePmaV6
+ncjooe2k1zeTjVI1nn12OSYZfCfclfVWntXTZPPKw8lsxpSNsS3pbPHio7tEb63
qeMRnj/2ycPXyrF/MYwHhIS1r/P3qhY28XqQ0YPqk6TDGLo1ZhFXWkxKia8AiZU8
uS1a9ZhyHEVR78OSi6P8eJSMa8roXHJvQapDwq8dEIUrQfRpBJvdnwZWWZg0AB/e
D+Sk0a4E+VmAZyJ8H1wVAPjX2nWRH+cXm2VZs1MRle/3gVEg2x4Uex4d/3vfeVhq
RcqneDfCeKJk4SxKpHPVBV0qUOveXQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:39:14 2025 by rpki-client