Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/375eb4ff-0b4a-3c84-ac0a-40078f958f97.roa
File: 375eb4ff-0b4a-3c84-ac0a-40078f958f97.roa (raw, json)
Hash identifier: ln9uQT6cSz6I6suZm82WUgu0Q7TgTdyrItWmardMsb8=
Subject key identifier: 84:81:4C:06:0B:A7:C5:E9:88:AE:6F:C1:06:10:E8:6E:34:5F:C8:FC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B31E5FAF8DC93242C1F7020
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/375eb4ff-0b4a-3c84-ac0a-40078f958f97.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.87.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:31:e5:fa:f8:dc:93:24:2c:1f:70:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=1bb09dcd-7ed9-4fc0-916a-a21ba3150faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:df:63:53:23:ea:ff:47:f4:a2:59:41:0c:b9:
3d:b1:4e:8c:24:f4:0d:e5:51:8b:ee:c8:b3:0a:1a:
ba:3e:4f:18:ee:55:56:fb:d4:b2:10:90:91:56:69:
a4:58:bf:05:15:dc:ef:4e:e5:9c:0f:3d:78:9f:54:
f2:96:c7:ae:16:3b:82:0a:92:41:02:57:74:bc:a0:
e4:52:bb:14:08:cd:00:41:f4:54:4c:95:a8:f1:c5:
18:02:c8:c7:8b:6a:97:46:ec:fc:10:92:b9:0c:19:
06:b8:06:84:a9:a5:48:00:5f:07:64:7f:d8:a9:87:
1c:c8:7f:7e:c5:91:84:12:dc:8d:a9:c2:c8:0b:19:
3a:3f:5e:13:b7:0c:95:07:9e:62:05:2e:b7:16:dd:
9b:c6:d9:b2:b5:57:ef:0f:b7:8b:a9:6c:23:40:a1:
24:5d:c1:de:d5:c5:07:83:7a:74:52:79:6b:1b:3a:
f4:b3:ee:4b:5c:be:fa:89:86:1a:ec:40:97:2d:ac:
0b:d0:87:89:e7:1f:26:02:38:52:5f:b9:ea:a7:aa:
55:c6:0d:b6:9f:93:c7:d9:f1:df:5f:5f:dc:1e:43:
92:45:68:9a:16:1b:08:f3:57:c1:d1:61:37:c3:b2:
01:12:9a:0f:0c:eb:c7:85:8f:0d:d4:58:1e:73:97:
e0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:81:4C:06:0B:A7:C5:E9:88:AE:6F:C1:06:10:E8:6E:34:5F:C8:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/375eb4ff-0b4a-3c84-ac0a-40078f958f97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.87.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:11:d2:c3:87:0a:dd:8c:05:9d:f0:78:92:73:ab:38:fe:d5:
68:96:69:15:ec:72:77:ce:dd:3b:95:24:8f:96:62:ae:ac:6d:
ff:1b:5d:b5:dd:77:c7:d8:bc:6d:71:66:9b:9c:4e:a9:58:96:
7c:61:ea:c5:53:3a:91:f4:92:37:72:54:79:6b:81:91:20:05:
f1:0c:86:91:f7:c5:72:27:79:fc:54:67:a5:d1:63:2c:bd:8d:
78:77:38:c2:90:f1:f7:91:91:da:fd:5d:00:9c:59:9b:7f:68:
db:db:7b:e2:ef:9a:91:70:d7:e9:39:69:25:89:48:f0:19:a8:
c5:47:86:05:17:7f:e6:b8:78:f4:83:3b:36:f8:9a:17:dc:63:
dc:36:82:df:e6:cb:ae:67:ca:d4:1b:d9:90:aa:75:69:56:f1:
22:56:bc:74:04:68:1a:f4:6b:00:f8:cd:b4:0e:8d:f3:39:67:
bb:4c:a3:8d:99:1b:d7:16:fb:b3:0a:96:b9:fe:20:91:9f:75:
ae:23:d1:08:cb:b6:a5:a3:8a:34:5e:25:75:85:27:31:72:06:
b8:6c:5c:e8:c3:01:18:3d:f3:d5:00:e9:59:d6:73:f7:51:2f:
7b:7a:0a:e7:d2:67:f6:e4:ef:30:9a:72:85:8d:b9:b3:e0:01:
bd:fd:95:d7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0LMeX6+NyTJCwfcCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIyNTA1MDAwMFoXDTIyMDQwMTA0MDAwMFowLzEtMCsGA1UEAxMk
MWJiMDlkY2QtN2VkOS00ZmMwLTkxNmEtYTIxYmEzMTUwZmFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN9jUyPq/0f0ollBDLk9sU6MJPQN5VGL7siz
Chq6Pk8Y7lVW+9SyEJCRVmmkWL8FFdzvTuWcDz14n1TylseuFjuCCpJBAld0vKDk
UrsUCM0AQfRUTJWo8cUYAsjHi2qXRuz8EJK5DBkGuAaEqaVIAF8HZH/YqYccyH9+
xZGEEtyNqcLICxk6P14TtwyVB55iBS63Ft2bxtmytVfvD7eLqWwjQKEkXcHe1cUH
g3p0UnlrGzr0s+5LXL76iYYa7ECXLawL0IeJ5x8mAjhSX7nqp6pVxg22n5PH2fHf
X1/cHkOSRWiaFhsI81fB0WE3w7IBEpoPDOvHhY8N1Fgec5fgEwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFISBTAYLp8XpiK5vwQYQ6G40X8j8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMzc1ZWI0ZmYtMGI0YS0z
Yzg0LWFjMGEtNDAwNzhmOTU4Zjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAElcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAaRHSw4cK3YwFnfB4knOrOP7VaJZpFexyd87dO5Ukj5Zirqxt/xtdtd13
x9i8bXFmm5xOqViWfGHqxVM6kfSSN3JUeWuBkSAF8QyGkffFcid5/FRnpdFjLL2N
eHc4wpDx95GR2v1dAJxZm39o29t74u+akXDX6TlpJYlI8BmoxUeGBRd/5rh49IM7
NviaF9xj3DaC3+bLrmfK1BvZkKp1aVbxIla8dARoGvRrAPjNtA6N8zlnu0yjjZkb
1xb7swqWuf4gkZ91riPRCMu2paOKNF4ldYUnMXIGuGxc6MMBGD3z1QDpWdZz91Ev
e3oK59Jn9uTvMJpyhY25s+ABvf2V1w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:39:43 2025 by rpki-client