Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/32238532-aeff-31c4-919b-79c95e52ebc7.roa
File: 32238532-aeff-31c4-919b-79c95e52ebc7.roa (raw, json)
Hash identifier: p+1nTwsanRJJT7WGwu8ou4O3dNTyZIyFUQxlSt/ggKA=
Subject key identifier: 2D:6B:72:D8:38:18:B3:A6:F9:75:A0:E6:D1:1A:86:91:20:64:DE:50
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF7EE85000FE5D7350455C880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/32238532-aeff-31c4-919b-79c95e52ebc7.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.102.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f7:ee:85:00:0f:e5:d7:35:04:55:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=e9d3a5cd-1410-4f9f-a3d8-f47e33a9e308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3c:8f:c8:ce:7d:cf:88:a8:a4:dd:58:a4:73:
e4:a8:c3:71:b0:51:33:57:93:4a:2a:66:62:82:67:
a9:70:9a:02:ac:fc:fd:d9:de:42:25:29:f3:33:d2:
3c:ab:b1:a3:e7:61:70:0c:a3:5a:ca:8a:a2:7a:20:
05:aa:96:4e:44:da:63:00:db:9d:ad:a1:c2:eb:54:
49:93:5b:ed:ea:77:f9:29:09:9c:c5:13:30:1c:d5:
ff:91:0d:c2:f4:97:24:17:65:a1:c4:04:7d:0e:b4:
76:36:ec:73:63:ce:b7:4e:ea:52:fb:a3:d3:d0:0e:
06:a9:87:27:b1:74:0f:f5:1e:1e:45:dd:09:1c:05:
ac:9f:59:0f:a2:4f:42:54:da:ed:b1:91:e8:dc:ae:
73:65:50:ee:cd:2c:a7:28:2a:79:95:47:69:30:09:
85:d8:28:93:93:25:27:65:bb:bb:cc:07:67:66:f5:
d6:69:c2:a8:2d:cc:78:97:ab:9e:25:d3:82:f4:cc:
1c:7f:e0:a4:07:03:dd:ec:7f:f7:e6:4d:f8:39:ce:
0c:24:3f:c8:96:cf:c6:c3:fb:7b:1f:11:8f:e6:6e:
85:5f:53:0f:db:be:e1:5b:a8:b7:95:e1:a8:73:a3:
93:3c:a0:f7:22:85:1a:40:ed:80:30:08:75:fd:5b:
ea:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6B:72:D8:38:18:B3:A6:F9:75:A0:E6:D1:1A:86:91:20:64:DE:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/32238532-aeff-31c4-919b-79c95e52ebc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.102.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:ea:60:f2:ab:29:dc:ad:b6:10:9d:54:bd:74:39:9c:51:f4:
f6:2b:e6:c5:4f:63:a7:f5:63:b5:12:c6:66:07:55:dc:4a:ca:
ad:17:e3:2a:36:10:14:59:38:0e:af:ab:8e:02:7c:67:3f:58:
4a:c7:48:4e:61:23:b2:f2:b8:28:14:0a:4c:29:9b:c7:dc:6e:
31:20:a8:b9:d8:d0:71:aa:93:d4:1b:15:7e:66:e5:52:10:fe:
11:08:5f:99:92:25:90:69:d8:40:a7:d5:cd:19:76:50:f7:89:
d0:e7:bf:e9:ec:e1:8d:ba:3f:5d:5b:4f:5c:92:76:dc:29:c6:
9d:40:38:79:c1:41:86:c7:2c:75:91:1d:96:24:12:9d:94:18:
48:36:ec:13:04:8d:22:bf:03:d8:d0:87:10:d3:e3:61:9d:e4:
31:9f:52:ed:4e:2d:6f:88:00:02:65:6c:03:ea:1b:45:4d:33:
0f:d4:00:3d:5d:7b:1a:79:66:03:dc:4c:73:f5:ba:be:e4:cc:
fa:db:b7:27:f3:dd:4c:de:9d:ea:6c:f5:4d:45:5c:4e:94:e3:
a6:df:d3:88:42:b6:b2:13:d2:09:63:03:1f:63:32:85:67:77:
6d:a4:21:13:94:85:91:15:fe:87:a6:47:01:0b:9f:16:c5:17:
4a:8f:7d:a1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/37oUAD+XXNQRVyIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTExOTEyMDAwMFoXDTIyMTIyNTA1MDAwMFowLzEtMCsGA1UEAxMk
ZTlkM2E1Y2QtMTQxMC00ZjlmLWEzZDgtZjQ3ZTMzYTllMzA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTyPyM59z4iopN1YpHPkqMNxsFEzV5NKKmZi
gmepcJoCrPz92d5CJSnzM9I8q7Gj52FwDKNayoqieiAFqpZORNpjANudraHC61RJ
k1vt6nf5KQmcxRMwHNX/kQ3C9JckF2WhxAR9DrR2NuxzY863TupS+6PT0A4GqYcn
sXQP9R4eRd0JHAWsn1kPok9CVNrtsZHo3K5zZVDuzSynKCp5lUdpMAmF2CiTkyUn
Zbu7zAdnZvXWacKoLcx4l6ueJdOC9Mwcf+CkBwPd7H/35k34Oc4MJD/Ils/Gw/t7
HxGP5m6FX1MP277hW6i3leGoc6OTPKD3IoUaQO2AMAh1/VvqTQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFC1rctg4GLOm+XWg5tEahpEgZN5QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMzIyMzg1MzItYWVmZi0z
MWM0LTkxOWItNzljOTVlNTJlYmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEmYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAlupg8qsp3K22EJ1UvXQ5nFH09ivmxU9jp/VjtRLGZgdV3ErKrRfjKjYQ
FFk4Dq+rjgJ8Zz9YSsdITmEjsvK4KBQKTCmbx9xuMSCoudjQcaqT1BsVfmblUhD+
EQhfmZIlkGnYQKfVzRl2UPeJ0Oe/6ezhjbo/XVtPXJJ23CnGnUA4ecFBhscsdZEd
liQSnZQYSDbsEwSNIr8D2NCHENPjYZ3kMZ9S7U4tb4gAAmVsA+obRU0zD9QAPV17
GnlmA9xMc/W6vuTM+tu3J/PdTN6d6mz1TUVcTpTjpt/TiEK2shPSCWMDH2MyhWd3
baQhE5SFkRX+h6ZHAQufFsUXSo99oQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:36:23 2025 by rpki-client