Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2d8bf5ec-1703-3085-bc14-628afef90b99.roa
File: 2d8bf5ec-1703-3085-bc14-628afef90b99.roa (raw, json)
Hash identifier: EMDHi7evRe4sXmf7CQV6O6ZpdlVrtaapFdvW02hdFtc=
Subject key identifier: 29:15:8E:10:25:E1:AE:9F:47:AF:8F:C2:C0:D9:F1:B9:1C:28:B2:31
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858409471B0CC13E2D62E5AE9C7C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2d8bf5ec-1703-3085-bc14-628afef90b99.roa
Signing time: Sat 14 Jan 2023 12:00:00 +0000
ROA not before: Sat 14 Jan 2023 12:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.38.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:94:71:b0:cc:13:e2:d6:2e:5a:e9:c7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 12:00:00 2023 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=0c90ae54-ebb7-4783-9e13-ea8bfd9da8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:1f:e0:c9:e9:ac:3e:4c:10:34:16:59:62:
8c:3d:02:b4:93:ed:9a:a5:59:6e:6c:a2:96:58:93:
2c:83:50:71:27:b2:15:68:83:ce:30:12:82:db:a0:
ed:37:29:4b:96:22:02:12:ac:9e:34:fd:ff:72:59:
dc:a2:1f:d6:14:ea:2f:08:9b:7e:0b:95:9b:7c:d0:
19:9f:f9:8a:16:6e:4d:d0:42:94:4c:5a:1a:7c:40:
08:46:da:ab:5c:56:28:11:03:31:5e:08:b5:c0:d7:
ca:ff:3b:9b:37:9c:10:af:0e:4a:ff:c7:71:04:20:
af:19:ed:e4:df:e7:85:6e:f2:b2:f9:70:c6:ba:41:
2a:6c:6b:fc:25:ef:65:34:ce:63:b5:f4:98:59:ef:
a6:31:0b:82:7a:c3:57:9f:1a:a1:3e:5e:a0:73:fb:
81:d3:bf:2c:97:f7:15:bf:48:c8:8d:26:9f:9d:bd:
df:93:19:70:a0:d3:2c:52:8a:8f:86:bc:38:ff:f8:
1f:31:88:24:92:9f:0a:21:bb:14:84:a9:02:51:15:
47:df:be:65:bd:a5:92:23:09:8c:b3:78:d7:56:87:
78:4c:d1:b8:d3:0a:50:f3:65:08:6a:b7:a8:c0:aa:
3c:90:70:a4:69:4c:b9:2b:fe:b8:6b:be:27:6f:b4:
58:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:15:8E:10:25:E1:AE:9F:47:AF:8F:C2:C0:D9:F1:B9:1C:28:B2:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2d8bf5ec-1703-3085-bc14-628afef90b99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.38.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:26:f8:fb:e3:9a:b5:23:12:37:60:7b:6b:1b:59:c1:3b:2a:
16:fd:ad:e8:cb:02:ca:0d:5b:1a:05:17:c4:23:04:0e:b5:bb:
c0:19:34:02:93:35:b4:4f:a3:9a:57:46:d8:6e:08:b0:9a:37:
11:77:ef:7b:d1:9f:22:30:8b:93:7a:1e:a9:a6:58:02:21:cb:
bf:12:c5:31:9a:ac:8f:8d:1f:ca:37:a0:8e:88:34:8c:7e:2f:
64:98:b2:f2:77:dd:9a:2d:f8:2a:0b:a1:13:f1:a0:05:36:c9:
96:8b:c0:3f:aa:a9:1e:29:88:96:34:f8:1c:d7:28:99:71:8f:
0d:53:84:da:49:73:39:47:28:00:f9:98:07:36:aa:4a:82:b4:
9b:bd:90:2d:54:19:73:d7:f7:fb:a9:18:8b:91:dc:96:f1:b9:
ce:9a:ab:e0:6d:14:0c:dd:82:03:33:9f:d7:83:cc:74:dd:b8:
10:84:20:98:d2:72:86:5d:bc:14:06:dc:91:af:8f:7a:d7:2e:
44:1a:76:74:c0:d2:85:20:93:6b:ca:3d:85:e5:c4:b2:e9:c3:
22:e6:60:c8:3f:c5:fa:b5:ad:51:b3:31:50:cc:ef:03:ae:71:
4d:fe:52:c9:29:e0:de:d7:a1:29:e2:a0:c1:f1:92:96:96:c1:
7d:51:b6:46
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECUcbDME+LWLlrpx8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExNDEyMDAwMFoXDTIzMDIxOTA1MDAwMFowLzEtMCsGA1UEAxMk
MGM5MGFlNTQtZWJiNy00NzgzLTllMTMtZWE4YmZkOWRhOGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu54f4MnprD5MEDQWWWKMPQK0k+2apVlubKKW
WJMsg1BxJ7IVaIPOMBKC26DtNylLliICEqyeNP3/clncoh/WFOovCJt+C5WbfNAZ
n/mKFm5N0EKUTFoafEAIRtqrXFYoEQMxXgi1wNfK/zubN5wQrw5K/8dxBCCvGe3k
3+eFbvKy+XDGukEqbGv8Je9lNM5jtfSYWe+mMQuCesNXnxqhPl6gc/uB078sl/cV
v0jIjSafnb3fkxlwoNMsUoqPhrw4//gfMYgkkp8KIbsUhKkCURVH375lvaWSIwmM
s3jXVod4TNG40wpQ82UIareowKo8kHCkaUy5K/64a74nb7RYIQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCkVjhAl4a6fR6+PwsDZ8bkcKLIxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMmQ4YmY1ZWMtMTcwMy0z
MDg1LWJjMTQtNjI4YWZlZjkwYjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEiYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJib4++OatSMSN2B7axtZwTsqFv2t6MsCyg1bGgUXxCMEDrW7wBk0ApM1
tE+jmldG2G4IsJo3EXfve9GfIjCLk3oeqaZYAiHLvxLFMZqsj40fyjegjog0jH4v
ZJiy8nfdmi34KguhE/GgBTbJlovAP6qpHimIljT4HNcomXGPDVOE2klzOUcoAPmY
BzaqSoK0m72QLVQZc9f3+6kYi5HclvG5zpqr4G0UDN2CAzOf14PMdN24EIQgmNJy
hl28FAbcka+PetcuRBp2dMDShSCTa8o9heXEsunDIuZgyD/F+rWtUbMxUMzvA65x
Tf5SySng3tehKeKgwfGSlpbBfVG2Rg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:12:45 2025 by rpki-client