Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3af3049d-8586-3f7e-8dcc-33c3402acaf2.roa
File: 3af3049d-8586-3f7e-8dcc-33c3402acaf2.roa (raw, json)
Hash identifier: 4TarQSwJ6kaxh3kitFotf/l8dGuPSff0+aqz1IpuKS0=
Subject key identifier: 0A:DC:A9:8E:D0:AA:88:42:DA:D2:E4:D5:79:DC:9C:ED:F4:4D:E3:53
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858404637ADF321DBA29F02E26360
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3af3049d-8586-3f7e-8dcc-33c3402acaf2.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.111.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:46:37:ad:f3:21:db:a2:9f:02:e2:63:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=5872b3be-6a03-4d3d-b859-a4fcd0fb0098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:23:75:da:9e:89:36:3d:1d:31:61:a2:90:2c:
8a:ca:43:68:9a:be:68:e7:a6:f6:9d:97:2e:63:57:
7f:34:a5:83:ef:47:bf:63:ef:bb:76:18:6a:a0:3c:
aa:0a:c0:c5:a4:19:6a:6a:cd:17:8a:59:34:e5:a0:
24:b2:25:cf:4b:6b:de:2f:48:5a:57:12:1c:a9:43:
c8:4f:f0:82:83:8f:8c:95:af:ae:6c:34:33:df:7c:
dd:8d:30:e0:8d:05:d5:45:bf:71:44:06:10:7f:2d:
00:28:ba:4c:f4:8f:22:4e:9e:9e:6a:dc:51:bc:8b:
56:4e:d6:4b:82:7b:ce:97:39:b2:57:f8:fa:64:9d:
cf:28:91:96:d4:36:f1:f1:2f:2a:92:00:39:4f:de:
64:ed:63:d9:12:8e:3d:ba:39:33:b8:8a:01:b2:f2:
f3:54:f2:1d:61:3c:a7:27:d2:02:42:44:63:5d:74:
ea:82:9d:4c:9c:41:6d:d1:d7:0b:dc:71:18:aa:9d:
fb:43:86:d2:7d:d3:38:37:71:07:da:35:1a:74:ad:
64:7b:8a:3c:b1:4f:8f:25:05:8b:dd:9e:09:e1:89:
1b:db:17:c6:f6:a0:ed:94:e5:1e:21:85:99:89:59:
e8:54:15:40:d8:48:05:1f:1d:45:49:22:bc:dd:8f:
46:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DC:A9:8E:D0:AA:88:42:DA:D2:E4:D5:79:DC:9C:ED:F4:4D:E3:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3af3049d-8586-3f7e-8dcc-33c3402acaf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.111.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:89:8f:fd:3c:ad:ef:14:25:96:83:29:a3:e2:b1:f5:7a:b8:
ee:00:5b:0d:41:7e:e9:06:51:df:21:d8:90:9c:1d:f1:fb:13:
f4:0b:f3:4d:76:93:71:98:5f:52:44:f3:c8:8b:56:67:aa:0d:
79:46:54:32:e9:40:c3:60:76:8a:64:c8:36:33:e0:5b:06:4f:
4c:d2:7f:e0:f2:16:21:bf:9f:e2:f3:58:4f:d7:8f:86:c7:78:
5c:45:f7:f7:80:cd:d6:65:54:e4:85:13:5d:02:c4:35:79:f6:
83:b8:3a:c7:5c:09:d7:f6:a8:14:08:2d:6d:4d:81:c4:7c:c1:
86:b0:05:16:02:18:33:3f:9c:94:73:23:da:d8:d3:db:16:13:
8c:8e:97:7b:b1:4e:20:77:af:01:6b:d1:a6:8e:91:6b:f3:fc:
79:e9:89:00:6e:17:30:e1:53:0c:29:30:90:92:dd:92:5c:51:
28:7c:ce:29:5c:bd:38:2b:44:ee:f6:e1:1f:b6:13:f7:6c:d2:
7e:2c:79:5b:a3:a2:0e:c2:33:75:9b:b2:d8:26:0b:d6:68:17:
b8:fb:c3:e8:62:62:58:49:ba:1c:35:a7:4d:65:8c:59:47:9a:
e4:94:4b:93:c2:6b:d1:85:4d:57:98:18:1e:1b:2f:63:88:39:
0a:f2:3a:be
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBGN63zIduinwLiY2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNzEyMDAwMFoXDTIzMDEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
NTg3MmIzYmUtNmEwMy00ZDNkLWI4NTktYTRmY2QwZmIwMDk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCN12p6JNj0dMWGikCyKykNomr5o56b2nZcu
Y1d/NKWD70e/Y++7dhhqoDyqCsDFpBlqas0Xilk05aAksiXPS2veL0haVxIcqUPI
T/CCg4+Mla+ubDQz33zdjTDgjQXVRb9xRAYQfy0AKLpM9I8iTp6eatxRvItWTtZL
gnvOlzmyV/j6ZJ3PKJGW1Dbx8S8qkgA5T95k7WPZEo49ujkzuIoBsvLzVPIdYTyn
J9ICQkRjXXTqgp1MnEFt0dcL3HEYqp37Q4bSfdM4N3EH2jUadK1ke4o8sU+PJQWL
3Z4J4Ykb2xfG9qDtlOUeIYWZiVnoVBVA2EgFHx1FSSK83Y9GQQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFArcqY7QqohC2tLk1XncnO30TeNTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvM2FmMzA0OWQtODU4Ni0z
ZjdlLThkY2MtMzNjMzQwMmFjYWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEm8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAM4mP/Tyt7xQlloMpo+Kx9Xq47gBbDUF+6QZR3yHYkJwd8fsT9AvzTXaT
cZhfUkTzyItWZ6oNeUZUMulAw2B2imTINjPgWwZPTNJ/4PIWIb+f4vNYT9ePhsd4
XEX394DN1mVU5IUTXQLENXn2g7g6x1wJ1/aoFAgtbU2BxHzBhrAFFgIYMz+clHMj
2tjT2xYTjI6Xe7FOIHevAWvRpo6Ra/P8eemJAG4XMOFTDCkwkJLdklxRKHzOKVy9
OCtE7vbhH7YT92zSfix5W6OiDsIzdZuy2CYL1mgXuPvD6GJiWEm6HDWnTWWMWUea
5JRLk8Jr0YVNV5gYHhsvY4g5CvI6vg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 11:59:39 2025 by rpki-client