Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b8ae5cf-034d-3562-8289-b9f069663672.roa
File: 3b8ae5cf-034d-3562-8289-b9f069663672.roa (raw, json)
Hash identifier: VQatnw7AWc/ML5VsbPJBuHRA0EVbpsHdj7PbCpoyNSw=
Subject key identifier: 8F:B2:73:83:FA:B2:5C:74:CD:34:0A:86:48:B9:23:A9:1C:13:F5:3E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F82E951BD4A4E7A4B479FCA80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b8ae5cf-034d-3562-8289-b9f069663672.roa
Signing time: Sat 08 Oct 2022 12:00:00 +0000
ROA not before: Sat 08 Oct 2022 12:00:00 +0000
ROA not after: Sun 13 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.76.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:82:e9:51:bd:4a:4e:7a:4b:47:9f:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 8 12:00:00 2022 GMT
Not After : Nov 13 05:00:00 2022 GMT
Subject: CN=138e0ad0-66b3-434c-badb-3ef672506971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e1:c6:ed:17:eb:59:4d:e0:cc:26:4c:f1:bc:
9e:30:b5:2c:73:01:d9:d4:fc:c8:6f:03:94:8d:03:
7a:d3:00:b1:f4:ee:0a:85:22:d1:9c:2a:64:38:05:
25:64:f1:17:50:84:d1:7b:ab:99:a4:12:80:6b:e7:
86:e9:e3:53:76:77:cf:a5:e2:fa:8a:5c:b5:da:e0:
1a:43:8a:4d:97:a9:29:65:b2:22:5d:5c:4d:29:26:
96:c8:4a:b5:7f:b7:6f:d8:0c:92:b6:8f:ce:c6:e6:
ae:ba:0a:97:9c:30:90:ff:26:08:c2:04:bd:f4:ba:
d4:d5:97:ed:69:74:d3:9b:1c:91:32:0c:ba:44:dd:
a8:34:60:93:b2:a6:96:7d:7d:5b:98:9e:79:37:26:
2a:e9:d7:82:78:46:cc:48:e7:7f:fe:e9:b9:85:04:
48:8b:e3:0c:eb:41:2f:af:e0:78:08:bb:e7:1a:69:
96:2b:dc:ff:aa:04:79:72:85:93:f9:29:97:76:6a:
13:bd:8e:41:8f:ce:74:a5:a4:65:d9:62:67:03:40:
2a:12:4d:9a:2e:1a:cf:21:0b:5a:9a:c1:99:fc:56:
00:9b:60:fe:a5:79:42:aa:86:da:51:be:bf:cc:77:
cb:0a:52:5c:39:bd:e3:14:f1:0c:b3:16:43:6e:62:
31:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B2:73:83:FA:B2:5C:74:CD:34:0A:86:48:B9:23:A9:1C:13:F5:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b8ae5cf-034d-3562-8289-b9f069663672.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.76.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:4b:61:03:5e:83:1b:e4:13:d9:5b:13:9e:bf:73:d5:fe:c4:
b5:94:c0:51:77:27:ce:6b:4a:c2:9a:97:2e:4b:37:05:bb:94:
41:49:fc:7a:34:85:c0:ae:cc:14:57:d8:65:38:da:d4:ae:a2:
34:6d:d4:68:83:f1:c0:89:ad:a0:90:05:5b:ab:b1:a9:92:ca:
93:70:b9:37:c8:ca:de:77:2d:33:19:b9:74:eb:3f:61:d1:d5:
84:6f:2c:e4:a2:b4:5f:e3:a5:23:9c:5c:8a:03:a3:48:64:5a:
65:e1:63:82:ae:4b:2e:a6:db:50:84:ea:eb:28:f6:cd:ed:33:
b2:9b:9c:3c:92:dc:8c:66:2e:cf:22:d0:74:aa:a2:0b:db:b7:
c0:e9:93:14:af:76:84:27:ce:1f:f2:11:25:a2:79:07:b1:1c:
a5:bd:38:d8:fb:1a:98:95:d9:05:3f:48:fc:50:74:91:b9:ad:
8f:87:4c:24:bd:d3:b4:9a:0a:3b:c5:53:a0:98:5a:1d:b5:e7:
ee:88:94:2d:2a:53:d9:3d:30:e1:23:1c:4c:7f:94:0f:6a:90:
4d:e1:07:da:18:7f:59:14:a9:23:8b:e1:4b:00:10:24:8a:8d:
74:4e:54:83:2e:76:d5:74:eb:0d:96:cb:2d:1c:18:67:90:60:
98:09:fd:19
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+C6VG9Sk56S0efyoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAwODEyMDAwMFoXDTIyMTExMzA1MDAwMFowLzEtMCsGA1UEAxMk
MTM4ZTBhZDAtNjZiMy00MzRjLWJhZGItM2VmNjcyNTA2OTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+HG7RfrWU3gzCZM8byeMLUscwHZ1PzIbwOU
jQN60wCx9O4KhSLRnCpkOAUlZPEXUITRe6uZpBKAa+eG6eNTdnfPpeL6ily12uAa
Q4pNl6kpZbIiXVxNKSaWyEq1f7dv2AySto/OxuauugqXnDCQ/yYIwgS99LrU1Zft
aXTTmxyRMgy6RN2oNGCTsqaWfX1bmJ55NyYq6deCeEbMSOd//um5hQRIi+MM60Ev
r+B4CLvnGmmWK9z/qgR5coWT+SmXdmoTvY5Bj850paRl2WJnA0AqEk2aLhrPIQta
msGZ/FYAm2D+pXlCqobaUb6/zHfLClJcOb3jFPEMsxZDbmIx6wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFI+yc4P6slx0zTQKhki5I6kcE/U+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvM2I4YWU1Y2YtMDM0ZC0z
NTYyLTgyODktYjlmMDY5NjYzNjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEkwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAikthA16DG+QT2VsTnr9z1f7EtZTAUXcnzmtKwpqXLks3BbuUQUn8ejSF
wK7MFFfYZTja1K6iNG3UaIPxwImtoJAFW6uxqZLKk3C5N8jK3nctMxm5dOs/YdHV
hG8s5KK0X+OlI5xcigOjSGRaZeFjgq5LLqbbUITq6yj2ze0zspucPJLcjGYuzyLQ
dKqiC9u3wOmTFK92hCfOH/IRJaJ5B7Ecpb042PsamJXZBT9I/FB0kbmtj4dMJL3T
tJoKO8VToJhaHbXn7oiULSpT2T0w4SMcTH+UD2qQTeEH2hh/WRSpI4vhSwAQJIqN
dE5Ugy521XTrDZbLLRwYZ5BgmAn9GQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:36:32 2025 by rpki-client