Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3928da01-1a23-391a-b18b-c4b0909986ea.roa
File: 3928da01-1a23-391a-b18b-c4b0909986ea.roa (raw, json)
Hash identifier: 1niOD64gYcA8cw57K3mbED6DRJFVb98GllUGgEridF8=
Subject key identifier: 94:56:57:06:87:C1:48:00:D2:78:FB:AC:ED:94:BF:16:0B:36:7F:83
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCE1D611B64EC163741F11180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3928da01-1a23-391a-b18b-c4b0909986ea.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.175.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ce:1d:61:1b:64:ec:16:37:41:f1:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=c95fac1e-d2e8-485e-a9bf-0a14f501f527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:32:31:bc:07:af:03:91:99:11:92:c8:77:3e:
fa:1e:4d:a1:b7:eb:e6:bc:9a:7e:a5:84:4c:20:43:
67:54:5a:26:db:37:ed:eb:f8:d3:eb:36:45:2d:92:
c7:58:1c:8a:74:7a:86:44:ba:c2:1e:78:3c:6a:5f:
8a:96:d8:b8:21:4e:6b:27:18:0d:33:5f:a5:e0:da:
b0:00:cd:76:01:37:d1:21:ae:61:e9:eb:6d:29:e3:
b2:52:6a:78:19:6b:15:dc:42:89:65:6a:86:e3:8d:
cf:cd:34:f1:f3:6b:e0:51:90:3a:40:2e:f8:54:06:
d6:c6:32:e2:52:6f:fb:32:0e:25:f5:25:54:2b:b0:
97:78:c8:68:1b:35:6b:d5:01:0b:b6:6b:52:14:c1:
2d:a0:a6:ec:2f:43:cb:f8:b9:98:ca:9c:25:bb:74:
0b:68:4b:d9:35:c0:d1:a0:66:d2:6d:83:d2:b0:35:
a9:7d:9a:19:ec:32:73:0c:82:24:3d:64:07:6b:b5:
7d:31:a4:13:07:61:94:de:73:0f:66:8e:e7:e2:7c:
e8:d1:8b:70:de:86:1f:b1:39:43:a7:19:d6:36:04:
0e:f2:6a:ea:dd:ef:d6:03:f6:02:de:17:ce:05:eb:
6f:47:62:1e:23:7e:91:e9:58:f0:88:b9:5b:fa:27:
19:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:56:57:06:87:C1:48:00:D2:78:FB:AC:ED:94:BF:16:0B:36:7F:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3928da01-1a23-391a-b18b-c4b0909986ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.175.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:9b:7a:e5:6e:1b:c9:62:e1:fc:de:a8:44:a9:98:5d:b9:4a:
e8:43:32:55:87:32:1f:91:f9:7d:cb:fb:2e:83:e1:7c:e0:09:
2f:73:ef:35:c8:7e:e0:8a:de:37:ef:55:85:06:c6:e7:0e:f4:
5a:17:08:e0:5d:b4:a5:27:87:45:f9:75:4e:cc:f0:3b:0a:02:
7b:30:ff:6c:30:68:69:a0:23:66:d2:26:d0:d4:60:c3:1f:c5:
95:1d:39:47:7d:3e:b1:48:ba:90:df:66:27:85:aa:55:19:03:
25:ea:5f:f0:f0:d1:d9:07:f1:21:63:98:1c:ef:2f:3e:b7:e1:
9f:e9:4d:59:01:9b:57:6d:d2:6d:8a:e8:13:0b:52:3a:a3:a9:
3f:1b:b5:f6:f1:12:2e:af:77:c3:ff:f8:a2:f6:b9:01:25:1a:
f6:b3:41:07:61:c9:cd:d7:8a:4d:42:1e:7c:8f:95:6c:b5:0c:
f4:ab:60:d8:75:3a:86:e6:4e:21:24:16:e2:98:37:0a:ba:7a:
af:cb:95:fc:53:1c:f2:1a:0a:22:e6:07:4b:fc:8f:a9:dc:05:
9e:81:71:a3:2b:98:eb:d5:b9:66:44:50:a1:89:57:7a:94:c3:
86:25:28:63:01:66:85:c2:5d:1d:df:7f:83:db:48:74:99:0c:
a6:d1:fe:65
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/OHWEbZOwWN0HxEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEwNDEyMDAwMFoXDTIyMTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
Yzk1ZmFjMWUtZDJlOC00ODVlLWE5YmYtMGExNGY1MDFmNTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDIxvAevA5GZEZLIdz76Hk2ht+vmvJp+pYRM
IENnVFom2zft6/jT6zZFLZLHWByKdHqGRLrCHng8al+Klti4IU5rJxgNM1+l4Nqw
AM12ATfRIa5h6ettKeOyUmp4GWsV3EKJZWqG443PzTTx82vgUZA6QC74VAbWxjLi
Um/7Mg4l9SVUK7CXeMhoGzVr1QELtmtSFMEtoKbsL0PL+LmYypwlu3QLaEvZNcDR
oGbSbYPSsDWpfZoZ7DJzDIIkPWQHa7V9MaQTB2GU3nMPZo7n4nzo0Ytw3oYfsTlD
pxnWNgQO8mrq3e/WA/YC3hfOBetvR2IeI36R6VjwiLlb+icZpwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJRWVwaHwUgA0nj7rO2UvxYLNn+DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMzkyOGRhMDEtMWEyMy0z
OTFhLWIxOGItYzRiMDkwOTk4NmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEq8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAS5t65W4byWLh/N6oRKmYXblK6EMyVYcyH5H5fcv7LoPhfOAJL3PvNch+
4IreN+9VhQbG5w70WhcI4F20pSeHRfl1TszwOwoCezD/bDBoaaAjZtIm0NRgwx/F
lR05R30+sUi6kN9mJ4WqVRkDJepf8PDR2QfxIWOYHO8vPrfhn+lNWQGbV23SbYro
EwtSOqOpPxu19vESLq93w//4ova5ASUa9rNBB2HJzdeKTUIefI+VbLUM9Ktg2HU6
huZOISQW4pg3Crp6r8uV/FMc8hoKIuYHS/yPqdwFnoFxoyuY69W5ZkRQoYlXepTD
hiUoYwFmhcJdHd9/g9tIdJkMptH+ZQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:38:37 2025 by rpki-client