Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/43a19751-4966-37fa-b513-90c3e5620da5.roa
File: 43a19751-4966-37fa-b513-90c3e5620da5.roa (raw, json)
Hash identifier: oUJBelyI7582ZFYGycVP1SsLer6SRYqcPv6EgP+b3C8=
Subject key identifier: 33:D9:A5:23:C6:77:EB:76:E6:3E:39:35:D3:F0:FF:93:D9:FA:F7:2B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FAA0E10ACD1A182872CCC8180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/43a19751-4966-37fa-b513-90c3e5620da5.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.54.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:aa:0e:10:ac:d1:a1:82:87:2c:cc:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=3188aa81-13c0-4337-bc7f-bbdd0e37f679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:81:47:b5:8d:97:73:fa:b0:34:4d:fd:6c:
d1:85:00:ec:bc:f6:e1:34:50:9f:a7:0b:35:c8:56:
a7:ff:be:1b:8d:a3:0c:5c:f3:fa:8f:6e:16:b7:e6:
52:17:cd:d3:fd:4f:c3:11:8a:d9:7c:1b:8f:fd:0f:
d9:be:b3:9a:f6:2e:90:0e:f2:14:d7:10:75:61:24:
a7:34:ac:a3:bf:5e:bf:34:0f:91:74:43:dd:97:50:
27:32:fa:3e:00:3f:d7:5b:1c:f3:44:de:fa:0b:4c:
45:d3:da:b8:f2:6c:8c:9b:c0:45:48:3f:62:43:83:
dd:11:6e:6e:cc:7d:09:56:ba:f1:ff:12:c9:24:4e:
c4:33:2c:2b:54:38:83:dd:28:da:94:28:40:40:d5:
1f:9a:50:c6:ec:46:14:59:3f:97:1d:cb:f7:94:e0:
2f:7b:8b:c4:6b:f1:c8:2f:62:09:60:71:aa:87:33:
1d:cf:73:3a:d2:d4:37:3b:ea:2f:86:5b:af:ec:28:
8e:10:33:56:30:39:c9:7a:1a:1d:cb:56:35:f5:3d:
13:3f:96:bf:c5:77:88:13:ad:91:bb:4a:85:44:13:
b7:1c:bb:5c:10:f7:c1:3f:2e:69:f9:b0:23:fd:a0:
9d:68:5d:55:e3:36:a8:24:6f:b3:45:d1:bf:36:cd:
ee:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D9:A5:23:C6:77:EB:76:E6:3E:39:35:D3:F0:FF:93:D9:FA:F7:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/43a19751-4966-37fa-b513-90c3e5620da5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.54.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:76:3a:7e:34:b9:04:c0:57:15:a1:95:f4:18:3c:7e:60:d2:
e8:8b:2d:23:26:f8:02:92:aa:07:d6:b6:8e:d6:a2:1e:c4:ed:
05:72:91:02:29:fd:a0:07:70:f3:eb:b4:c7:4e:e7:3d:65:1b:
8e:ca:d2:9f:f6:e6:cf:bd:22:e1:ea:d8:6a:12:63:c4:e8:e5:
3c:41:95:e5:7f:ec:31:b8:70:f1:ef:fb:53:0c:b0:75:b5:5f:
7a:82:88:fc:7b:7b:26:49:0d:a2:d5:5f:b2:47:ad:4b:e0:26:
14:f9:fc:3e:a6:36:3e:99:09:6e:41:e9:9e:df:cf:09:5f:6f:
f3:31:43:0c:c7:f0:c3:75:8b:df:69:2a:b2:b2:4d:bf:8d:8a:
61:4a:95:37:2e:6e:11:ad:28:ff:40:d0:e9:4e:49:01:74:db:
c5:a7:36:3c:0c:e5:93:69:ad:fe:fd:c8:d5:59:bf:d9:59:dc:
59:61:17:0a:94:2b:e9:d0:b9:60:f8:e6:ed:2f:36:e0:04:4b:
b5:9b:a1:30:3e:f4:cd:7c:86:6b:4f:b6:ef:29:39:21:4d:cb:
e7:bd:ec:c9:d4:c3:22:70:50:bb:1a:6a:5e:f4:e1:d4:99:cf:
0c:07:e1:d5:6c:8b:18:6d:9c:09:2b:29:3c:55:5e:ac:87:09:
81:93:3f:4a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+qDhCs0aGChyzMgYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAyMjEyMDAwMFoXDTIyMTEyNzA1MDAwMFowLzEtMCsGA1UEAxMk
MzE4OGFhODEtMTNjMC00MzM3LWJjN2YtYmJkZDBlMzdmNjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd6BR7WNl3P6sDRN/WzRhQDsvPbhNFCfpws1
yFan/74bjaMMXPP6j24Wt+ZSF83T/U/DEYrZfBuP/Q/ZvrOa9i6QDvIU1xB1YSSn
NKyjv16/NA+RdEPdl1AnMvo+AD/XWxzzRN76C0xF09q48myMm8BFSD9iQ4PdEW5u
zH0JVrrx/xLJJE7EMywrVDiD3SjalChAQNUfmlDG7EYUWT+XHcv3lOAve4vEa/HI
L2IJYHGqhzMdz3M60tQ3O+ovhluv7CiOEDNWMDnJehody1Y19T0TP5a/xXeIE62R
u0qFRBO3HLtcEPfBPy5p+bAj/aCdaF1V4zaoJG+zRdG/Ns3ujQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDPZpSPGd+t25j45NdPw/5PZ+vcrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNDNhMTk3NTEtNDk2Ni0z
N2ZhLWI1MTMtOTBjM2U1NjIwZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEjYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAvnY6fjS5BMBXFaGV9Bg8fmDS6IstIyb4ApKqB9a2jtaiHsTtBXKRAin9
oAdw8+u0x07nPWUbjsrSn/bmz70i4erYahJjxOjlPEGV5X/sMbhw8e/7UwywdbVf
eoKI/Ht7JkkNotVfsketS+AmFPn8PqY2PpkJbkHpnt/PCV9v8zFDDMfww3WL32kq
srJNv42KYUqVNy5uEa0o/0DQ6U5JAXTbxac2PAzlk2mt/v3I1Vm/2VncWWEXCpQr
6dC5YPjm7S824ARLtZuhMD70zXyGa0+27yk5IU3L573sydTDInBQuxpqXvTh1JnP
DAfh1WyLGG2cCSspPFVerIcJgZM/Sg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 18:00:43 2025 by rpki-client