Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/426a21b1-ccc7-341f-abe1-a653fa92854d.roa
File: 426a21b1-ccc7-341f-abe1-a653fa92854d.roa (raw, json)
Hash identifier: UUMQdg0IAI0wnZzakZ6vkK7iEmwd4fJ/gerN9hho7nM=
Subject key identifier: 6D:89:D1:81:A4:2C:E7:85:D5:B2:B4:F6:CE:63:AD:85:B8:0E:54:02
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF58C4E1A0AD1EF20A1042AE0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/426a21b1-ccc7-341f-abe1-a653fa92854d.roa
Signing time: Fri 18 Nov 2022 12:00:00 +0000
ROA not before: Fri 18 Nov 2022 12:00:00 +0000
ROA not after: Sat 24 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.184.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f5:8c:4e:1a:0a:d1:ef:20:a1:04:2a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 18 12:00:00 2022 GMT
Not After : Dec 24 05:00:00 2022 GMT
Subject: CN=57080b9e-ef96-4f08-9fba-e4f83423c62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:06:46:bb:21:a8:cb:c0:62:19:f2:86:da:
7d:6f:5d:c1:67:56:37:40:4a:1b:fe:87:a4:01:f7:
68:72:53:0e:0b:b2:be:45:02:99:b2:24:fd:48:16:
02:92:d5:ca:af:05:eb:c8:95:14:56:42:14:4b:36:
39:25:52:39:14:33:29:bc:fb:30:bc:31:f1:48:85:
d5:a2:97:35:39:d5:1a:9a:bf:7d:bf:3a:4c:dd:5a:
3d:aa:40:c4:bc:c8:fb:26:39:39:e6:bf:f8:67:8a:
89:d1:3a:7e:f8:6f:a4:6b:06:7d:b3:94:8b:dc:43:
a6:40:bb:19:5d:6b:0e:23:fd:17:71:bf:67:b7:52:
d3:ea:d3:4e:e1:c5:a8:95:e4:4d:05:f3:78:a6:bf:
27:b3:1e:3b:d0:4f:b3:7d:e0:09:96:8e:2d:a0:c1:
75:96:ac:f9:3e:71:65:05:e8:d4:49:2a:c6:cd:e3:
e6:fb:c1:39:ff:fb:92:ba:bc:c6:79:cf:31:82:1b:
68:cd:55:43:24:2a:20:9e:b7:47:49:be:43:72:5e:
34:d1:ff:ee:89:a3:3f:e6:27:5b:0a:a0:61:40:e2:
ef:0a:00:58:08:07:92:59:a0:eb:e5:ab:df:20:3e:
6b:91:bd:47:2c:8a:f8:ab:cd:1d:92:ef:f1:b0:64:
b1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:89:D1:81:A4:2C:E7:85:D5:B2:B4:F6:CE:63:AD:85:B8:0E:54:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/426a21b1-ccc7-341f-abe1-a653fa92854d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.184.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:63:e8:82:38:5e:6f:e5:54:38:bf:33:0c:07:0b:f6:94:b9:
a7:13:1a:3b:ed:0a:17:34:46:98:a8:95:4b:56:2f:a8:bc:b5:
d8:4a:60:62:d2:0a:50:d2:57:65:78:c2:e3:3a:0c:93:e1:cc:
ec:ca:65:74:c6:1a:fc:77:32:23:c0:0b:8c:e3:40:1e:6c:3a:
8f:2e:2f:a5:f5:dd:b7:30:5f:44:60:fb:1f:54:1d:77:94:9e:
e4:85:88:40:6c:93:4f:ee:99:2c:fb:d4:5d:7d:10:3e:8c:b8:
fc:cd:38:8f:e8:ca:9d:dc:f3:36:7a:69:f4:f7:07:4a:b6:05:
e9:a4:54:84:9f:b8:0c:9a:10:27:a7:d2:be:dc:c4:b4:f3:97:
46:69:f7:d1:9d:93:0f:42:99:96:53:a1:f9:5d:02:85:63:e6:
b5:76:5e:8f:d8:ad:49:91:a1:39:50:84:a9:e9:0d:ea:87:e1:
41:70:cb:c0:40:6c:24:14:c6:57:d2:9c:f5:ed:f7:c8:e8:83:
a5:a6:9c:bd:84:91:a8:39:72:30:21:4c:bb:3d:78:e2:30:77:
fb:a9:0c:13:99:e1:00:99:a0:6c:9f:e1:ee:61:27:22:07:92:
b9:c4:b6:db:09:29:1a:a8:b6:6d:60:a5:87:82:3a:8d:f2:08:
35:50:39:76
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/1jE4aCtHvIKEEKuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTExODEyMDAwMFoXDTIyMTIyNDA1MDAwMFowLzEtMCsGA1UEAxMk
NTcwODBiOWUtZWY5Ni00ZjA4LTlmYmEtZTRmODM0MjNjNjJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnAGRrshqMvAYhnyhtp9b13BZ1Y3QEob/oek
AfdoclMOC7K+RQKZsiT9SBYCktXKrwXryJUUVkIUSzY5JVI5FDMpvPswvDHxSIXV
opc1OdUamr99vzpM3Vo9qkDEvMj7Jjk55r/4Z4qJ0Tp++G+kawZ9s5SL3EOmQLsZ
XWsOI/0Xcb9nt1LT6tNO4cWoleRNBfN4pr8nsx470E+zfeAJlo4toMF1lqz5PnFl
BejUSSrGzePm+8E5//uSurzGec8xghtozVVDJCognrdHSb5Dcl400f/uiaM/5idb
CqBhQOLvCgBYCAeSWaDr5avfID5rkb1HLIr4q80dku/xsGSxtwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFG2J0YGkLOeF1bK09s5jrYW4DlQCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNDI2YTIxYjEtY2NjNy0z
NDFmLWFiZTEtYTY1M2ZhOTI4NTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBErgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAO2Pogjheb+VUOL8zDAcL9pS5pxMaO+0KFzRGmKiVS1YvqLy12EpgYtIK
UNJXZXjC4zoMk+HM7MpldMYa/HcyI8ALjONAHmw6jy4vpfXdtzBfRGD7H1Qdd5Se
5IWIQGyTT+6ZLPvUXX0QPoy4/M04j+jKndzzNnpp9PcHSrYF6aRUhJ+4DJoQJ6fS
vtzEtPOXRmn30Z2TD0KZllOh+V0ChWPmtXZej9itSZGhOVCEqekN6ofhQXDLwEBs
JBTGV9Kc9e33yOiDpaacvYSRqDlyMCFMuz144jB3+6kME5nhAJmgbJ/h7mEnIgeS
ucS22wkpGqi2bWClh4I6jfIINVA5dg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:42:00 2025 by rpki-client