Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3740d2f8-9454-3073-bf12-0197d637243c.roa
File: 3740d2f8-9454-3073-bf12-0197d637243c.roa (raw, json)
Hash identifier: B+A8eWCn9fFAbjj6THL4sP1qcf5hpgwLO/8B2XUdvTY=
Subject key identifier: 4C:0F:E1:B6:B3:EE:F5:32:80:3C:1C:A8:CA:6F:9F:5C:42:88:8F:D5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F8086E57A6750468829C92B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3740d2f8-9454-3073-bf12-0197d637243c.roa
Signing time: Fri 07 Oct 2022 12:00:00 +0000
ROA not before: Fri 07 Oct 2022 12:00:00 +0000
ROA not after: Sat 12 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.180.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:80:86:e5:7a:67:50:46:88:29:c9:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 7 12:00:00 2022 GMT
Not After : Nov 12 05:00:00 2022 GMT
Subject: CN=e2dfddf1-5cd0-4542-a9cc-47a6cb079ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:b6:d6:e3:0e:f9:87:b8:64:8b:ab:15:a7:
ee:b5:63:6d:5f:d0:49:27:7a:3d:e1:4e:cb:b8:b0:
9f:4c:8e:82:7f:aa:21:a3:c6:25:8a:a8:92:2b:e8:
f6:77:fe:c5:b2:be:ed:86:ee:0f:ca:cf:80:34:88:
f0:26:7c:90:ec:02:4a:27:28:a5:ff:8a:3e:f4:64:
ab:52:0d:cb:15:76:b4:6a:08:34:66:53:ea:d6:f7:
05:bf:7b:41:fc:d7:8f:21:e5:8f:7b:55:2c:55:35:
9a:a6:92:21:b8:53:5e:d9:ec:c2:a9:85:b8:0a:40:
4b:e4:dd:b1:27:26:f5:3e:b5:fc:ce:da:99:30:b9:
68:c3:66:7e:3b:34:70:07:50:0c:7a:87:95:57:a7:
9b:82:58:f1:ca:63:1d:2d:d9:40:77:3a:47:7c:4e:
12:bd:4a:46:60:82:0b:1d:36:f3:ad:fa:97:d9:12:
03:00:ad:d7:82:da:7d:b9:6d:6a:4a:73:09:92:d7:
a7:90:5c:70:ca:a8:a6:8e:d1:60:aa:67:60:4b:06:
8b:9a:d6:f3:b6:fc:46:92:fa:87:e0:d6:3a:7b:d9:
bc:49:3e:6a:d2:c4:4a:84:78:20:a5:97:17:c5:f0:
4f:15:c7:7b:83:c4:7b:84:62:5c:99:b5:9c:08:e2:
23:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0F:E1:B6:B3:EE:F5:32:80:3C:1C:A8:CA:6F:9F:5C:42:88:8F:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3740d2f8-9454-3073-bf12-0197d637243c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.180.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:ae:99:31:2d:15:28:1e:f5:aa:c1:88:f8:75:7f:ff:37:9b:
a1:92:31:26:20:03:9b:90:79:1a:cb:91:bd:11:ac:2e:23:10:
53:8c:02:27:c0:f4:dd:eb:58:c9:08:45:8b:83:07:38:4a:0d:
c7:2a:c4:be:5c:08:84:5a:08:a0:a4:68:27:ce:d6:1c:8c:21:
db:fa:24:3b:98:99:4e:a7:07:fa:1d:ef:54:79:a6:a4:b8:56:
60:ea:da:cb:29:d2:9d:51:b0:23:e5:7f:53:f6:52:2f:f6:2d:
0f:42:95:ef:b1:ab:ed:42:b2:b4:bc:b4:35:6a:80:9a:6b:46:
80:60:8f:29:28:fe:0b:de:72:fa:1a:67:cd:b0:55:8e:dd:24:
32:c2:e8:af:03:24:6b:57:44:4f:7d:71:ce:12:9a:47:da:31:
f2:b3:a1:9c:e9:a8:5b:46:05:e0:8d:13:2c:7a:c9:60:6a:31:
79:d8:08:b6:c2:1b:6c:29:75:92:68:be:c1:5d:b3:f1:3a:49:
f1:d1:ac:54:14:a7:50:ff:2c:ea:1b:1e:8d:58:ad:e4:a2:14:
ad:32:c2:36:62:f9:9e:6f:1c:12:69:dd:f3:f0:e2:fa:40:ca:
e2:ff:e4:bb:e9:f9:c9:19:63:4e:2f:b8:14:1f:81:f3:46:68:
32:38:d8:68
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+AhuV6Z1BGiCnJK4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAwNzEyMDAwMFoXDTIyMTExMjA1MDAwMFowLzEtMCsGA1UEAxMk
ZTJkZmRkZjEtNWNkMC00NTQyLWE5Y2MtNDdhNmNiMDc5ZWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvci21uMO+Ye4ZIurFafutWNtX9BJJ3o94U7L
uLCfTI6Cf6oho8YliqiSK+j2d/7Fsr7thu4Pys+ANIjwJnyQ7AJKJyil/4o+9GSr
Ug3LFXa0agg0ZlPq1vcFv3tB/NePIeWPe1UsVTWappIhuFNe2ezCqYW4CkBL5N2x
Jyb1PrX8ztqZMLlow2Z+OzRwB1AMeoeVV6ebgljxymMdLdlAdzpHfE4SvUpGYIIL
HTbzrfqX2RIDAK3Xgtp9uW1qSnMJktenkFxwyqimjtFgqmdgSwaLmtbztvxGkvqH
4NY6e9m8ST5q0sRKhHggpZcXxfBPFcd7g8R7hGJcmbWcCOIjHwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEwP4baz7vUygDwcqMpvn1xCiI/VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMzc0MGQyZjgtOTQ1NC0z
MDczLWJmMTItMDE5N2Q2MzcyNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBErQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAIa6ZMS0VKB71qsGI+HV//zeboZIxJiADm5B5GsuRvRGsLiMQU4wCJ8D0
3etYyQhFi4MHOEoNxyrEvlwIhFoIoKRoJ87WHIwh2/okO5iZTqcH+h3vVHmmpLhW
YOrayynSnVGwI+V/U/ZSL/YtD0KV77Gr7UKytLy0NWqAmmtGgGCPKSj+C95y+hpn
zbBVjt0kMsLorwMka1dET31xzhKaR9ox8rOhnOmoW0YF4I0TLHrJYGoxedgItsIb
bCl1kmi+wV2z8TpJ8dGsVBSnUP8s6hsejVit5KIUrTLCNmL5nm8cEmnd8/Di+kDK
4v/ku+n5yRljTi+4FB+B80ZoMjjYaA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:50:47 2025 by rpki-client