Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/31a19049-4a2e-3256-8c6a-7442ce979278.roa
File: 31a19049-4a2e-3256-8c6a-7442ce979278.roa (raw, json)
Hash identifier: wHisOomuTZ6i62o4RxO5Nl8v8ktvULBi7XKI0ZjiIbM=
Subject key identifier: 3A:68:88:E7:80:C1:D0:73:38:F0:C6:7D:CE:A2:6A:4D:B0:B3:BA:58
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DA79E921977319A1F0310C5C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/31a19049-4a2e-3256-8c6a-7442ce979278.roa
Signing time: Thu 21 Apr 2022 12:00:00 +0000
ROA not before: Thu 21 Apr 2022 12:00:00 +0000
ROA not after: Fri 27 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.47.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a7:9e:92:19:77:31:9a:1f:03:10:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 21 12:00:00 2022 GMT
Not After : May 27 04:00:00 2022 GMT
Subject: CN=8271e83e-b01c-455b-bc60-cae36033a6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c9:f5:4b:a3:9f:56:4b:e7:fd:6d:d6:a0:d0:
94:ee:bb:94:3c:e8:d5:d3:52:9a:6c:8f:cf:46:95:
4f:f9:89:8c:54:e5:e3:64:48:4c:90:de:a3:22:a4:
b1:b6:2c:f2:70:9d:c8:99:84:f3:33:a4:65:10:90:
9a:99:04:51:f6:35:50:1f:b0:db:8c:4f:20:d3:43:
64:a9:70:a5:7d:63:20:bf:19:81:8d:cf:d0:21:4b:
53:b8:a5:df:34:10:9b:0e:bc:9d:8d:b1:c8:6e:d9:
00:bc:c4:e6:bb:06:ec:31:ab:1e:7d:a2:68:fa:d1:
22:d6:dd:6a:5a:37:8c:fb:dc:c6:ac:d9:63:84:8b:
8c:ae:d4:6d:c2:20:fc:d0:c3:7b:3a:17:a4:ef:e5:
8f:9c:98:3e:b8:32:aa:9f:bc:55:be:c7:ae:5d:04:
8b:4b:49:44:a1:f0:6f:ed:be:7a:c7:64:20:8e:7d:
6f:a0:b8:9d:e3:3c:1e:f5:0a:de:6d:0b:cf:f5:f5:
4d:7d:4c:ce:24:ee:b9:6f:34:cc:ae:79:fe:d9:a9:
94:89:29:30:2c:ca:23:a1:f5:00:13:b0:d4:fb:62:
81:97:95:4a:23:e6:85:06:cb:b8:4a:1d:9b:40:5f:
f7:17:86:54:93:d5:64:df:60:b1:3f:76:b1:fd:c0:
71:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:68:88:E7:80:C1:D0:73:38:F0:C6:7D:CE:A2:6A:4D:B0:B3:BA:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/31a19049-4a2e-3256-8c6a-7442ce979278.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.47.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:49:c2:be:e6:5b:3b:10:29:02:24:55:3f:1e:2b:7d:6d:34:
50:5f:d2:83:5b:1e:c0:96:7d:59:7a:26:94:13:7e:34:67:ab:
5a:66:59:41:ee:bb:a7:52:16:16:7c:fb:0a:64:06:3e:0a:d2:
39:58:9c:54:d9:2c:50:ea:1b:69:7a:fa:17:da:2a:fe:4f:83:
b9:52:e8:d9:c2:44:5f:0f:02:85:f3:e4:b5:0b:fb:2c:24:7e:
d6:80:59:f3:43:bb:9c:33:9b:01:3d:48:2e:0a:be:de:26:7a:
87:f0:9a:26:c5:40:b3:e5:fc:9f:84:d4:8d:e2:8a:c1:7a:74:
59:b4:6b:92:1b:5f:fb:c9:b9:72:cd:f8:8f:07:c9:37:86:6a:
9a:67:0a:fc:10:75:a6:fc:60:b4:a6:44:d0:ce:e7:8d:ec:8f:
27:02:65:c6:d8:cf:cc:f6:40:f9:9e:3f:c1:65:36:bb:2c:42:
44:f1:50:c8:42:57:ea:ac:4f:c9:f8:8d:32:dc:f4:37:fc:52:
af:b3:5e:9e:41:eb:ee:ec:11:62:97:bc:12:e1:38:72:20:56:
18:40:ef:4b:de:ab:2c:58:6e:8f:f5:8e:df:96:41:a4:73:93:
06:24:28:a9:32:9e:aa:07:4b:62:41:77:6a:f7:f5:d0:8a:bc:
c5:d6:6e:b8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2nnpIZdzGaHwMQxcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQyMTEyMDAwMFoXDTIyMDUyNzA0MDAwMFowLzEtMCsGA1UEAxMk
ODI3MWU4M2UtYjAxYy00NTViLWJjNjAtY2FlMzYwMzNhNmE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8n1S6OfVkvn/W3WoNCU7ruUPOjV01KabI/P
RpVP+YmMVOXjZEhMkN6jIqSxtizycJ3ImYTzM6RlEJCamQRR9jVQH7DbjE8g00Nk
qXClfWMgvxmBjc/QIUtTuKXfNBCbDrydjbHIbtkAvMTmuwbsMasefaJo+tEi1t1q
WjeM+9zGrNljhIuMrtRtwiD80MN7Ohek7+WPnJg+uDKqn7xVvseuXQSLS0lEofBv
7b56x2Qgjn1voLid4zwe9QrebQvP9fVNfUzOJO65bzTMrnn+2amUiSkwLMojofUA
E7DU+2KBl5VKI+aFBsu4Sh2bQF/3F4ZUk9Vk32CxP3ax/cBxRwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDpoiOeAwdBzOPDGfc6iak2ws7pYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMzFhMTkwNDktNGEyZS0z
MjU2LThjNmEtNzQ0MmNlOTc5Mjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEi8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAM0nCvuZbOxApAiRVPx4rfW00UF/Sg1sewJZ9WXomlBN+NGerWmZZQe67
p1IWFnz7CmQGPgrSOVicVNksUOobaXr6F9oq/k+DuVLo2cJEXw8ChfPktQv7LCR+
1oBZ80O7nDObAT1ILgq+3iZ6h/CaJsVAs+X8n4TUjeKKwXp0WbRrkhtf+8m5cs34
jwfJN4ZqmmcK/BB1pvxgtKZE0M7njeyPJwJlxtjPzPZA+Z4/wWU2uyxCRPFQyEJX
6qxPyfiNMtz0N/xSr7NenkHr7uwRYpe8EuE4ciBWGEDvS96rLFhuj/WO35ZBpHOT
BiQoqTKeqgdLYkF3avf10Iq8xdZuuA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:30:00 2025 by rpki-client