Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/412f905c-2e5c-3fd5-8b72-d0c4a9715a6e.roa
File: 412f905c-2e5c-3fd5-8b72-d0c4a9715a6e.roa (raw, json)
Hash identifier: OyaXQXYMkCa8Roctr0Wo6Mh9KQ8Qo2W4Tq5IPKkmgVk=
Subject key identifier: F1:A6:96:BE:67:84:C4:DC:A0:8C:F7:C3:7A:FD:58:4A:55:8D:E0:6C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD4154BA71EE0899D2DDD3AA0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/412f905c-2e5c-3fd5-8b72-d0c4a9715a6e.roa
Signing time: Sat 07 May 2022 12:00:00 +0000
ROA not before: Sat 07 May 2022 12:00:00 +0000
ROA not after: Sun 12 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.42.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d4:15:4b:a7:1e:e0:89:9d:2d:dd:3a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 7 12:00:00 2022 GMT
Not After : Jun 12 04:00:00 2022 GMT
Subject: CN=c650ed14-1f53-458a-a2c2-bb8f1c919fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:40:a2:a8:1c:3f:0f:05:73:f2:58:33:64:75:
65:93:a4:89:f9:b5:c7:ac:ac:2e:a6:9c:f0:ba:4f:
57:7e:ed:64:81:ee:ea:37:16:82:ce:b2:31:d4:1e:
3c:a1:34:a9:52:4b:f6:81:99:27:b3:aa:63:e7:5d:
91:ee:3f:2f:37:3f:e3:6f:29:cf:5b:2d:b6:f3:89:
38:a1:60:a0:d7:0e:10:3e:3b:8b:c3:1b:34:32:17:
c0:6a:5e:c9:36:35:f3:c7:d4:34:9f:a9:21:d4:ab:
a2:36:69:86:a1:9d:2b:78:c2:94:34:e4:50:da:8e:
7d:20:af:e5:19:4a:02:d8:e5:3e:d0:26:d2:92:fc:
2a:bf:54:06:33:31:45:7a:eb:91:16:af:c2:3c:30:
7e:19:ab:3a:9b:ff:fd:d8:bd:8c:5b:db:3c:a7:ca:
35:d9:72:9c:18:31:fc:08:e2:ae:e1:d1:a1:50:eb:
3e:fb:2e:08:62:23:a9:0b:63:b3:bb:ad:40:87:d0:
68:dd:be:10:53:47:9d:cb:4b:3e:77:91:be:51:7c:
df:41:9b:e9:de:90:51:e4:05:10:a1:2e:7d:80:b3:
bc:fb:df:8d:9e:8c:67:3a:e3:af:7d:c5:99:a9:67:
6f:64:14:b4:0b:12:61:b8:f8:d5:5f:cb:08:c2:a2:
b6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A6:96:BE:67:84:C4:DC:A0:8C:F7:C3:7A:FD:58:4A:55:8D:E0:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/412f905c-2e5c-3fd5-8b72-d0c4a9715a6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.42.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:85:81:90:42:23:76:96:15:52:b2:63:4c:8a:ae:9f:11:12:
63:fe:78:46:3b:b1:78:47:8b:b7:9a:f2:98:b5:18:d2:fa:0d:
1a:e5:26:26:e6:f7:0b:5e:d8:80:ee:5f:58:9a:35:82:19:6a:
54:6c:bc:f0:63:51:3a:14:da:b3:9b:02:67:b6:6c:79:3c:cf:
b8:73:9b:07:36:42:59:7d:d2:27:a7:2f:99:2e:2c:53:cb:44:
a6:15:c7:1e:5d:e4:e4:95:42:13:0c:2d:8e:be:fd:e6:ce:c8:
34:ea:66:9d:5a:8f:8c:df:2b:a6:d8:c4:19:b6:ac:ad:02:d5:
37:09:f4:4e:a3:7c:96:07:d9:38:d4:78:36:77:dc:71:ab:a7:
9b:7d:d5:fb:94:dc:72:b4:a9:08:35:ad:5b:e0:55:ae:32:b9:
ae:87:27:39:4c:76:82:29:e1:f0:e7:1c:36:c3:81:7b:22:45:
6f:85:2c:c1:a1:7d:c6:42:d8:71:9f:4c:31:86:8f:48:3c:1e:
3a:75:70:7e:98:73:90:2f:7d:5a:fe:c4:57:53:8d:26:95:a1:
a8:4d:36:e0:a4:53:59:81:d5:20:d9:5d:71:a3:b9:97:0b:0e:
03:93:5f:f0:4a:bd:f7:a5:01:b4:c7:3a:15:94:fc:2d:de:4c:
2b:26:f4:d1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3UFUunHuCJnS3dOqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUwNzEyMDAwMFoXDTIyMDYxMjA0MDAwMFowLzEtMCsGA1UEAxMk
YzY1MGVkMTQtMWY1My00NThhLWEyYzItYmI4ZjFjOTE5ZmRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmECiqBw/DwVz8lgzZHVlk6SJ+bXHrKwuppzw
uk9Xfu1kge7qNxaCzrIx1B48oTSpUkv2gZkns6pj512R7j8vNz/jbynPWy2284k4
oWCg1w4QPjuLwxs0MhfAal7JNjXzx9Q0n6kh1KuiNmmGoZ0reMKUNORQ2o59IK/l
GUoC2OU+0CbSkvwqv1QGMzFFeuuRFq/CPDB+Gas6m//92L2MW9s8p8o12XKcGDH8
COKu4dGhUOs++y4IYiOpC2Ozu61Ah9Bo3b4QU0edy0s+d5G+UXzfQZvp3pBR5AUQ
oS59gLO8+9+NnoxnOuOvfcWZqWdvZBS0CxJhuPjVX8sIwqK2QQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPGmlr5nhMTcoIz3w3r9WEpVjeBsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNDEyZjkwNWMtMmU1Yy0z
ZmQ1LThiNzItZDBjNGE5NzE1YTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEiowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmYWBkEIjdpYVUrJjTIqunxESY/54RjuxeEeLt5rymLUY0voNGuUmJub3
C17YgO5fWJo1ghlqVGy88GNROhTas5sCZ7ZseTzPuHObBzZCWX3SJ6cvmS4sU8tE
phXHHl3k5JVCEwwtjr795s7INOpmnVqPjN8rptjEGbasrQLVNwn0TqN8lgfZONR4
Nnfccaunm33V+5TccrSpCDWtW+BVrjK5rocnOUx2ginh8OccNsOBeyJFb4UswaF9
xkLYcZ9MMYaPSDweOnVwfphzkC99Wv7EV1ONJpWhqE024KRTWYHVINldcaO5lwsO
A5Nf8Eq996UBtMc6FZT8Ld5MKyb00Q==
-----END CERTIFICATE-----
Generated at Tue Jun 17 03:26:25 2025 by rpki-client