Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b6b3d00-3fd2-3574-8e34-dc5499998cee.roa
File: 2b6b3d00-3fd2-3574-8e34-dc5499998cee.roa (raw, json)
Hash identifier: YtMKvX6EzLIr9vpkW+16wk42t7SFUBfDz32SujUUcZE=
Subject key identifier: 33:9B:22:69:D6:8C:C8:76:60:91:51:55:DD:BA:23:D8:A1:59:D0:F3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCE15DFC35776641E0B2AE380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b6b3d00-3fd2-3574-8e34-dc5499998cee.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ce:15:df:c3:57:76:64:1e:0b:2a:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=6d6a6f56-106a-49fd-bf14-e92ee8ab73db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ae:6d:b1:cf:59:fa:69:fd:8d:ca:41:e8:3a:
5d:7e:1c:b7:35:6a:93:aa:ae:04:73:c9:76:c0:49:
6e:81:e4:de:cf:60:c4:27:a9:9d:13:6c:31:b5:e3:
af:72:5c:38:11:75:4d:94:60:96:9d:5f:da:e9:54:
0d:46:a5:9a:2a:c9:85:6f:0a:ef:ad:ce:e7:3f:30:
b2:3b:cb:2e:81:12:50:fd:5b:bb:48:0a:96:5b:f7:
43:e0:82:62:67:0f:8c:0c:0a:bd:25:81:f0:a3:85:
d1:6e:57:0b:b1:18:21:4a:bd:5e:55:f0:c3:52:2c:
11:4e:33:f9:3a:9e:d7:30:e8:84:0e:ca:05:3c:e2:
b2:d0:95:d3:b8:b5:38:5d:eb:20:fd:51:c1:6c:57:
f6:29:fc:1c:9b:fd:1f:6f:17:16:3e:1d:67:58:fc:
ac:81:6e:9a:5d:42:25:50:27:e0:ca:ad:df:51:af:
51:09:5d:62:f7:68:bf:ab:10:f5:37:62:61:6d:ba:
ec:65:da:de:09:0b:3c:b9:4c:a5:23:3b:9d:eb:4a:
44:77:6c:71:3d:3e:b7:94:0e:d5:4b:11:6b:4b:88:
23:64:df:b5:20:e4:9c:b5:16:5b:7f:12:bd:dd:e8:
c7:83:d2:30:37:68:9b:f5:44:ce:bc:f5:50:a7:43:
19:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9B:22:69:D6:8C:C8:76:60:91:51:55:DD:BA:23:D8:A1:59:D0:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b6b3d00-3fd2-3574-8e34-dc5499998cee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:74:6f:3a:86:8b:aa:9e:2f:25:5b:24:8a:35:13:bb:4f:5a:
3a:4b:94:03:77:bc:c6:3f:36:ec:51:94:e9:0c:14:0e:82:69:
f8:ff:8f:26:ff:3c:20:51:8c:15:64:7a:3f:26:ef:06:29:1d:
b6:59:e8:eb:f0:3e:2a:ef:6e:ef:d0:ba:71:64:e9:e5:30:d2:
68:0b:20:3b:af:d4:85:2c:cb:d4:50:25:54:0d:b2:d5:52:e7:
ed:32:f5:4b:6d:92:fe:01:7c:09:64:fb:b3:92:44:67:5c:61:
3a:5c:42:f1:23:ef:ce:a3:e4:74:f9:d3:e7:68:c2:90:63:03:
28:e1:a5:db:a7:ea:cb:c0:17:9a:3c:7e:7b:f6:4b:fe:fc:35:
51:ab:db:e4:fa:06:b5:5f:b1:f7:fd:05:dc:69:29:52:22:90:
3e:21:3f:a1:ff:21:6c:d4:65:a0:dc:c0:96:73:6d:4d:4b:d6:
da:45:d5:63:90:91:c3:65:fa:08:93:b8:98:0d:a6:72:87:1c:
9f:a4:7d:bc:c7:bc:ce:c3:c2:36:2d:9b:6b:db:f5:26:e4:f1:
33:29:5a:dd:12:49:3b:a7:c2:7d:1b:69:c7:08:62:fa:27:b7:
52:b6:01:4f:7a:6e:32:c0:3b:6e:ff:d7:5e:d4:fa:62:76:87:
fb:7e:07:b9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/OFd/DV3ZkHgsq44AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEwNDEyMDAwMFoXDTIyMTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
NmQ2YTZmNTYtMTA2YS00OWZkLWJmMTQtZTkyZWU4YWI3M2RiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a5tsc9Z+mn9jcpB6Dpdfhy3NWqTqq4Ec8l2
wElugeTez2DEJ6mdE2wxteOvclw4EXVNlGCWnV/a6VQNRqWaKsmFbwrvrc7nPzCy
O8sugRJQ/Vu7SAqWW/dD4IJiZw+MDAq9JYHwo4XRblcLsRghSr1eVfDDUiwRTjP5
Op7XMOiEDsoFPOKy0JXTuLU4Xesg/VHBbFf2Kfwcm/0fbxcWPh1nWPysgW6aXUIl
UCfgyq3fUa9RCV1i92i/qxD1N2JhbbrsZdreCQs8uUylIzud60pEd2xxPT63lA7V
SxFrS4gjZN+1IOSctRZbfxK93ejHg9IwN2ib9UTOvPVQp0MZMwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDObImnWjMh2YJFRVd26I9ihWdDzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMmI2YjNkMDAtM2ZkMi0z
NTc0LThlMzQtZGM1NDk5OTk4Y2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEtgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMHRvOoaLqp4vJVskijUTu09aOkuUA3e8xj827FGU6QwUDoJp+P+PJv88
IFGMFWR6PybvBikdtlno6/A+Ku9u79C6cWTp5TDSaAsgO6/UhSzL1FAlVA2y1VLn
7TL1S22S/gF8CWT7s5JEZ1xhOlxC8SPvzqPkdPnT52jCkGMDKOGl26fqy8AXmjx+
e/ZL/vw1Uavb5PoGtV+x9/0F3GkpUiKQPiE/of8hbNRloNzAlnNtTUvW2kXVY5CR
w2X6CJO4mA2mcoccn6R9vMe8zsPCNi2ba9v1JuTxMyla3RJJO6fCfRtpxwhi+ie3
UrYBT3puMsA7bv/XXtT6YnaH+34HuQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:14:03 2025 by rpki-client