Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/32fb4fd5-d8ee-300f-af3e-1740ea31d556.roa
File: 32fb4fd5-d8ee-300f-af3e-1740ea31d556.roa (raw, json)
Hash identifier: rdb4lpN02kF+Cju8mKfOCOXPVN9ThqrUhoDf7Pxx3zo=
Subject key identifier: 4A:52:87:4E:8A:73:0F:E0:0B:06:E1:C6:B6:77:DD:81:A7:A6:9E:00
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858404619ECD8DEA97DA920EBF180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/32fb4fd5-d8ee-300f-af3e-1740ea31d556.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:46:19:ec:d8:de:a9:7d:a9:20:eb:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=a640512d-d765-4b1d-9f8f-ceffd0dac068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a1:39:cc:47:dd:49:18:64:7a:18:16:b1:9d:
53:f2:f7:22:df:60:76:08:84:fb:49:f7:5f:66:2f:
96:73:70:15:e3:a8:c9:ca:74:c1:ee:a5:67:46:42:
9e:bd:15:29:c9:ab:71:1c:f5:ea:c7:b4:5f:79:fa:
5b:ba:57:6d:4d:54:3c:32:95:96:b8:60:05:6d:2f:
23:74:79:df:29:45:90:04:5a:55:09:09:9f:d3:cf:
fd:06:c0:59:8d:ae:76:f6:20:dc:e8:87:4a:dc:7a:
6f:a9:bd:82:4e:6c:eb:48:03:ab:12:72:ac:e7:4e:
5a:8c:73:af:42:d3:22:ab:02:63:fc:3f:df:06:23:
6e:f9:8e:dd:e4:f1:5b:27:24:f0:f5:e7:34:7e:13:
81:18:3b:f5:ef:16:00:e2:fa:5b:c2:b8:bf:a0:37:
46:04:af:a3:69:82:41:7c:a7:f0:89:e7:58:23:e9:
9e:6e:05:76:a6:c6:b6:f2:56:5a:1e:4a:81:ae:2a:
f6:2b:14:f9:c6:69:2c:4e:30:a5:a0:29:dc:33:ab:
dc:f9:12:de:a4:89:76:0e:72:97:17:bf:0d:92:54:
c7:76:95:6c:d2:0a:e4:52:4d:78:a4:d3:97:a7:f1:
6c:49:7f:47:ca:59:54:5e:71:a2:98:46:c4:d0:bf:
dc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:52:87:4E:8A:73:0F:E0:0B:06:E1:C6:B6:77:DD:81:A7:A6:9E:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/32fb4fd5-d8ee-300f-af3e-1740ea31d556.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:c7:80:7a:41:0a:e3:16:16:49:5d:b1:46:c9:17:68:de:43:
c5:40:c0:7b:f8:5d:38:17:fc:ca:95:08:6a:f3:73:7a:16:5a:
f9:d1:7c:b5:1e:e1:79:90:f3:6e:5c:56:47:9e:98:6c:16:06:
d7:cb:23:e0:49:21:3d:c8:dd:87:b5:0d:10:4d:e4:9d:da:02:
70:8e:90:50:b5:32:1b:f6:b9:5a:13:10:32:a1:6b:bc:35:a1:
09:7a:a7:15:70:81:ed:30:88:c0:ab:3a:73:db:a1:ca:9d:dc:
e1:79:f5:d9:19:14:e0:ca:13:b3:ad:d5:d6:68:9f:e8:f7:25:
b4:8e:87:14:3f:64:6b:32:8e:38:55:e1:14:95:38:7c:30:03:
53:52:e6:5f:1a:87:29:25:53:c4:83:fd:f4:f0:ea:82:dc:ac:
f4:83:18:65:09:6c:ad:27:eb:ca:b0:c0:54:84:b2:83:44:13:
15:e1:8c:4d:0d:c6:43:13:7c:41:57:1c:ce:0a:21:b5:82:b6:
33:70:ca:15:6c:f4:13:d7:61:e3:72:91:1e:bd:c2:14:0c:29:
c8:d8:97:2c:74:63:7e:e6:ab:97:75:af:43:eb:bd:b4:be:a5:
8c:01:c1:0c:3c:0e:00:c3:54:42:68:52:68:bf:d4:d5:b4:4a:
de:b4:34:46
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBGGezY3ql9qSDr8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNzEyMDAwMFoXDTIzMDEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
YTY0MDUxMmQtZDc2NS00YjFkLTlmOGYtY2VmZmQwZGFjMDY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqE5zEfdSRhkehgWsZ1T8vci32B2CIT7Sfdf
Zi+Wc3AV46jJynTB7qVnRkKevRUpyatxHPXqx7RfefpbuldtTVQ8MpWWuGAFbS8j
dHnfKUWQBFpVCQmf08/9BsBZja529iDc6IdK3Hpvqb2CTmzrSAOrEnKs505ajHOv
QtMiqwJj/D/fBiNu+Y7d5PFbJyTw9ec0fhOBGDv17xYA4vpbwri/oDdGBK+jaYJB
fKfwiedYI+mebgV2psa28lZaHkqBrir2KxT5xmksTjCloCncM6vc+RLepIl2DnKX
F78NklTHdpVs0grkUk14pNOXp/FsSX9HyllUXnGimEbE0L/c6wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEpSh06Kcw/gCwbhxrZ33YGnpp4AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMzJmYjRmZDUtZDhlZS0z
MDBmLWFmM2UtMTc0MGVhMzFkNTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEoIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMceAekEK4xYWSV2xRskXaN5DxUDAe/hdOBf8ypUIavNzehZa+dF8tR7h
eZDzblxWR56YbBYG18sj4EkhPcjdh7UNEE3kndoCcI6QULUyG/a5WhMQMqFrvDWh
CXqnFXCB7TCIwKs6c9uhyp3c4Xn12RkU4MoTs63V1mif6PcltI6HFD9kazKOOFXh
FJU4fDADU1LmXxqHKSVTxIP99PDqgtys9IMYZQlsrSfryrDAVISyg0QTFeGMTQ3G
QxN8QVcczgohtYK2M3DKFWz0E9dh43KRHr3CFAwpyNiXLHRjfuarl3WvQ+u9tL6l
jAHBDDwOAMNUQmhSaL/U1bRK3rQ0Rg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:14:23 2025 by rpki-client