Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/40f66869-5c38-3ab1-9994-9f02c0dfb314.roa
File: 40f66869-5c38-3ab1-9994-9f02c0dfb314.roa (raw, json)
Hash identifier: B3EkLugzftb9Jn1BqXG7FFaHTNI/eLEeVc1AgXGb9HQ=
Subject key identifier: 59:31:27:E6:38:0F:37:9D:AB:14:10:31:88:A0:12:97:DD:23:B1:0F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D3265F6EC96450919D6CA0680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/40f66869-5c38-3ab1-9994-9f02c0dfb314.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.92.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:65:f6:ec:96:45:09:19:d6:ca:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=7bbadb62-14e6-4a67-94a4-8386b9498f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:64:4c:24:52:47:77:80:c6:8e:ae:4d:cb:2a:
5e:67:81:cb:b5:ff:93:3a:5d:19:4c:0f:c7:79:4c:
62:4b:ea:f4:78:6c:1b:d6:33:18:c2:73:be:01:22:
a4:a4:3b:07:d0:4a:8b:6c:f0:b4:fb:7a:6a:1f:12:
60:23:15:34:f7:92:c6:3d:51:7a:de:43:f6:e8:e0:
15:15:7a:c6:11:aa:f1:f3:6f:4c:f7:d5:51:de:30:
a2:f7:e6:e7:ca:85:d2:f8:f7:ae:2c:f1:94:93:20:
20:a4:eb:e2:c3:67:e5:eb:21:9c:76:e8:42:89:55:
d6:eb:71:c1:e3:20:f3:f7:24:94:b8:b2:ea:b5:7b:
e4:f7:d4:04:1c:77:5c:29:85:29:02:ab:ff:db:8d:
f5:a0:40:3d:e5:0c:1e:a3:99:d4:00:8c:04:fb:37:
66:28:52:8c:68:17:17:94:a4:4d:f9:a6:43:c9:dd:
68:a0:0e:4e:8c:6d:a6:7e:d1:8b:5d:55:c4:96:f3:
e0:61:7b:6b:6c:77:6d:b3:87:b8:f0:81:e8:1a:3b:
37:99:a6:ed:20:71:78:d5:d5:e5:48:f5:21:fd:1e:
e7:7a:48:b7:4e:d5:e5:58:dc:a2:13:6c:b1:ae:60:
f6:3e:c7:da:9e:c6:88:0c:6a:af:ff:1d:f6:5e:c1:
ed:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:31:27:E6:38:0F:37:9D:AB:14:10:31:88:A0:12:97:DD:23:B1:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/40f66869-5c38-3ab1-9994-9f02c0dfb314.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.92.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:01:19:3b:24:cc:1c:2f:97:fc:a5:13:f5:83:1f:42:99:4c:
8a:a7:93:36:5e:da:c7:ac:f4:f6:54:e9:76:51:2e:72:2a:d5:
d9:1e:fe:be:bc:9c:22:fa:ee:cd:e6:9f:5d:3a:91:0c:2e:be:
2d:b9:2c:6c:e5:cb:40:f2:b7:52:cf:22:5d:73:0f:3d:46:6a:
1d:0e:26:02:61:ef:39:d7:da:3d:7b:ae:81:b2:4d:80:fc:16:
26:d0:24:9f:81:ae:31:64:8d:25:8d:3b:2a:2a:92:1a:7a:40:
6a:ba:d9:45:65:dc:c7:12:3d:2f:b8:c6:54:7f:90:b7:d4:dc:
70:f7:50:bb:18:98:be:df:06:74:66:70:b9:bf:f4:8d:3c:d8:
56:2a:4c:e2:4a:b2:1d:2c:5f:73:38:df:99:73:1c:0f:d0:6e:
99:35:0d:20:2a:77:33:7c:24:20:d3:3e:a7:35:d6:14:6a:ad:
4e:29:d7:e1:f3:5e:0a:8d:4a:8b:78:dc:6f:fa:5b:f6:3f:38:
24:79:7b:bf:d7:4b:5b:eb:d4:28:7b:08:78:8a:ad:fd:3c:cb:
04:34:67:9b:cf:75:e4:d1:d8:10:c1:65:45:b9:c1:de:51:ea:
a8:6c:aa:a1:09:31:bd:ea:93:5c:1d:e9:5d:e4:5e:e2:05:e2:
dd:e1:dd:c0
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0yZfbslkUJGdbKBoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
N2JiYWRiNjItMTRlNi00YTY3LTk0YTQtODM4NmI5NDk4ZjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWRMJFJHd4DGjq5NyypeZ4HLtf+TOl0ZTA/H
eUxiS+r0eGwb1jMYwnO+ASKkpDsH0EqLbPC0+3pqHxJgIxU095LGPVF63kP26OAV
FXrGEarx829M99VR3jCi9+bnyoXS+PeuLPGUkyAgpOviw2fl6yGcduhCiVXW63HB
4yDz9ySUuLLqtXvk99QEHHdcKYUpAqv/2431oEA95Qweo5nUAIwE+zdmKFKMaBcX
lKRN+aZDyd1ooA5OjG2mftGLXVXElvPgYXtrbHdts4e48IHoGjs3mabtIHF41dXl
SPUh/R7neki3TtXlWNyiE2yxrmD2PsfansaIDGqv/x32XsHt6wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFkxJ+Y4DzedqxQQMYigEpfdI7EPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNDBmNjY4NjktNWMzOC0z
YWIxLTk5OTQtOWYwMmMwZGZiMzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAElwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEASgEZOyTMHC+X/KUT9YMfQplMiqeTNl7ax6z09lTpdlEucirV2R7+vryc
IvruzeafXTqRDC6+LbksbOXLQPK3Us8iXXMPPUZqHQ4mAmHvOdfaPXuugbJNgPwW
JtAkn4GuMWSNJY07KiqSGnpAarrZRWXcxxI9L7jGVH+Qt9TccPdQuxiYvt8GdGZw
ub/0jTzYVipM4kqyHSxfczjfmXMcD9BumTUNICp3M3wkINM+pzXWFGqtTinX4fNe
Co1Ki3jcb/pb9j84JHl7v9dLW+vUKHsIeIqt/TzLBDRnm8915NHYEMFlRbnB3lHq
qGyqoQkxveqTXB3pXeRe4gXi3eHdwA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:15:40 2025 by rpki-client