Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/35c5144f-5374-3c80-82dd-13d31b5feffc.roa
File: 35c5144f-5374-3c80-82dd-13d31b5feffc.roa (raw, json)
Hash identifier: DbiQ0WkC+ROESWmgDDEcwctlwBuVFQ8jFVaChAFLyL4=
Subject key identifier: A4:8C:90:6D:B6:C5:5D:7D:78:42:5D:D5:53:9D:9A:91:3C:FA:6D:27
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D80BD6BC250A59066E1ECB3A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/35c5144f-5374-3c80-82dd-13d31b5feffc.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.148.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:bd:6b:c2:50:a5:90:66:e1:ec:b3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=52f6ef54-a5bb-4fb1-ae69-7a3586373f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:31:05:70:f0:db:45:08:be:0d:c2:a9:27:6a:
69:08:ad:0d:5b:74:59:cc:c2:fd:52:33:6f:ed:3f:
11:2b:e6:92:e2:73:bc:a6:03:f4:d4:63:e2:ec:81:
7a:b4:13:4b:79:1c:58:5d:0b:fd:30:a7:ca:0a:97:
80:fc:be:e4:5a:32:0a:86:ad:10:4d:36:5f:82:20:
e9:98:a9:dd:65:37:c9:dc:c4:c8:8c:84:fd:dc:46:
f6:2a:92:66:9c:a6:a0:8c:ff:13:ff:32:a8:33:07:
93:2d:7c:6e:f8:6b:33:87:71:05:4e:6e:c3:f4:4e:
4d:0c:1d:70:38:55:4e:66:f3:79:57:39:4a:a3:f8:
35:2d:af:99:9a:53:28:a4:12:87:d8:73:f5:76:f0:
aa:2d:5a:e2:e0:4f:bc:51:3d:22:7d:69:5b:ab:76:
37:8e:c8:50:a3:40:4b:44:3d:3e:6c:84:e5:68:c5:
74:25:6a:f1:f0:47:9d:db:49:ad:3a:2f:bc:15:69:
4a:7a:6c:c5:55:33:a5:3d:ed:50:5a:b3:b7:6c:29:
60:3c:8e:f5:5d:b2:b1:0d:57:fe:36:1a:34:35:7d:
94:7f:51:3e:9a:cd:89:0d:33:33:99:f5:fd:71:af:
82:18:64:04:18:8f:f7:d5:75:3b:fc:cc:49:f8:f0:
08:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8C:90:6D:B6:C5:5D:7D:78:42:5D:D5:53:9D:9A:91:3C:FA:6D:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/35c5144f-5374-3c80-82dd-13d31b5feffc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.148.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:5b:28:24:7a:f4:78:a0:3f:44:d4:ce:aa:c1:30:4f:05:6e:
16:1f:a7:1e:ac:19:a3:48:dc:db:cb:1c:4f:20:04:f8:b8:8f:
72:45:1c:82:2a:04:12:fb:32:71:f5:3f:24:02:8a:2b:d5:5c:
a8:d5:d9:fd:4e:88:18:a1:69:91:e3:3d:4c:0b:b7:9a:8c:63:
b5:e3:ff:47:3d:4a:14:e3:29:c1:d7:be:cc:f7:19:32:b3:84:
b6:37:a3:5e:00:89:f8:a7:c9:77:37:a0:fb:b6:39:3b:ca:8c:
b7:ce:72:d6:58:ea:7e:7a:a5:a5:39:2e:7d:ef:23:60:0a:2a:
d6:60:e3:82:a4:39:3f:52:78:c9:f9:53:77:0f:bf:e0:84:f5:
2f:a1:f3:fa:6b:38:1d:9b:f1:0f:71:7d:24:75:3b:62:8c:c9:
08:ee:d5:ee:40:b7:e5:82:13:8c:0a:de:ac:9b:a0:a2:00:eb:
bf:23:b7:42:65:25:7d:17:34:08:b2:ce:4d:9c:35:7b:c4:25:
c4:74:5b:c8:b2:e7:93:09:63:1c:4e:f1:d9:f8:f4:32:33:ce:
eb:c5:3e:f8:b2:6a:d3:42:39:a9:6f:b9:cf:93:b2:91:79:a9:
07:52:8a:f4:ee:bf:f2:a6:24:4a:0e:af:89:a4:a4:2c:2f:81:
3f:e5:13:2e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2AvWvCUKWQZuHss6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQwODA0MDAwMFoXDTIyMDUxMzA0MDAwMFowLzEtMCsGA1UEAxMk
NTJmNmVmNTQtYTViYi00ZmIxLWFlNjktN2EzNTg2MzczZjNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DEFcPDbRQi+DcKpJ2ppCK0NW3RZzML9UjNv
7T8RK+aS4nO8pgP01GPi7IF6tBNLeRxYXQv9MKfKCpeA/L7kWjIKhq0QTTZfgiDp
mKndZTfJ3MTIjIT93Eb2KpJmnKagjP8T/zKoMweTLXxu+Gszh3EFTm7D9E5NDB1w
OFVOZvN5VzlKo/g1La+ZmlMopBKH2HP1dvCqLVri4E+8UT0ifWlbq3Y3jshQo0BL
RD0+bITlaMV0JWrx8Eed20mtOi+8FWlKemzFVTOlPe1QWrO3bClgPI71XbKxDVf+
Nho0NX2Uf1E+ms2JDTMzmfX9ca+CGGQEGI/31XU7/MxJ+PAIUQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKSMkG22xV19eEJd1VOdmpE8+m0nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMzVjNTE0NGYtNTM3NC0z
YzgwLTgyZGQtMTNkMzFiNWZlZmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEpQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAkFsoJHr0eKA/RNTOqsEwTwVuFh+nHqwZo0jc28scTyAE+LiPckUcgioE
EvsycfU/JAKKK9VcqNXZ/U6IGKFpkeM9TAu3moxjteP/Rz1KFOMpwde+zPcZMrOE
tjejXgCJ+KfJdzeg+7Y5O8qMt85y1ljqfnqlpTkufe8jYAoq1mDjgqQ5P1J4yflT
dw+/4IT1L6Hz+ms4HZvxD3F9JHU7YozJCO7V7kC35YITjArerJugogDrvyO3QmUl
fRc0CLLOTZw1e8QlxHRbyLLnkwljHE7x2fj0MjPO68U++LJq00I5qW+5z5OykXmp
B1KK9O6/8qYkSg6viaSkLC+BP+UTLg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:46:48 2025 by rpki-client