Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/45655fc4-5542-3d89-94d6-150ac601ce42.roa
File: 45655fc4-5542-3d89-94d6-150ac601ce42.roa (raw, json)
Hash identifier: KZgNKLtaTw+bOK+UQ7xVmxooCa0tN35nauNg574VPBo=
Subject key identifier: 94:E4:6C:3B:33:90:E3:AD:E8:72:6A:B1:E7:9B:6A:46:83:F3:4E:C7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584041B5BAA66D70B509A693DAE0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/45655fc4-5542-3d89-94d6-150ac601ce42.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.240.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:41:b5:ba:a6:6d:70:b5:09:a6:93:da:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=ea944dd8-9538-4514-ace0-9fb8898403ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:27:60:ce:5e:0d:4e:24:89:bc:60:16:07:21:
4b:55:16:00:41:73:53:a0:11:dc:45:1d:59:8f:2f:
a7:be:9a:cd:c2:d4:cb:c2:45:fd:2e:d6:c9:6d:dd:
7b:5e:b3:2a:8e:23:06:e6:19:0f:e3:f0:05:b6:9f:
5d:29:0d:78:6a:12:25:c8:f2:39:dc:5e:5f:0a:db:
0f:54:b3:c6:ff:5a:a6:8b:0e:dd:59:78:ad:ab:09:
64:0f:c9:d1:95:fe:3a:dd:1a:a5:54:17:1f:a3:b5:
aa:32:51:73:16:89:ed:93:3c:df:68:84:1b:40:c1:
d9:ce:04:f1:58:55:ef:c4:f9:66:e5:7a:16:51:45:
fb:38:30:d5:49:c5:9f:7e:7b:d2:77:1e:2e:69:20:
69:92:7f:1f:89:09:ed:d8:1b:6d:d8:0e:95:e9:b5:
12:56:80:05:be:f8:75:a5:4b:a1:a3:da:cb:61:e8:
ef:4e:38:d4:8d:4b:84:4e:02:a2:01:fb:8c:47:9f:
e5:5e:3b:ce:9b:9d:2d:9b:96:30:5b:12:d8:53:95:
04:aa:ed:2b:da:5a:82:03:46:af:90:c8:63:a3:6f:
6d:83:f3:ca:00:91:d8:ad:d9:ed:9c:f7:dc:58:f9:
bc:06:0a:94:07:a1:83:3e:01:45:19:ab:d2:11:e0:
ee:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E4:6C:3B:33:90:E3:AD:E8:72:6A:B1:E7:9B:6A:46:83:F3:4E:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/45655fc4-5542-3d89-94d6-150ac601ce42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.240.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:86:76:9b:76:2b:fd:07:a8:a6:11:ae:cf:99:84:74:db:2f:
ba:0f:52:5d:61:83:20:32:43:97:79:d6:01:cf:30:75:1e:db:
8a:f8:ed:f6:ca:f9:db:ae:4d:6e:72:a9:d6:ad:f6:45:6c:4d:
e2:7a:e4:1d:9f:cf:06:f0:d4:f0:77:0d:8b:bb:df:a7:b9:95:
f6:5d:ac:c9:a9:72:24:00:e9:ef:d8:cf:a6:63:09:e9:c6:0c:
3f:32:89:06:a1:70:e3:68:72:52:a4:56:e1:92:8c:b0:e6:44:
e1:7f:6b:b8:78:d3:da:40:d5:17:d7:3c:e3:32:ca:14:ee:83:
8f:07:c0:8a:41:68:2f:f7:78:2d:cb:ca:f6:72:ff:5f:61:4a:
ed:0c:37:c6:57:c9:a9:13:62:84:14:76:bb:15:e2:b1:cc:a6:
74:fd:45:5a:c3:f3:73:02:d4:bc:df:53:e5:e8:63:6c:be:1d:
89:bb:f5:42:b6:e4:33:48:bc:c6:fc:88:75:a9:04:61:e4:94:
e2:15:28:e3:e7:24:ea:87:64:5b:5b:e0:22:49:00:58:8e:6f:
22:e4:a1:6f:19:1a:8a:56:a8:9c:76:37:20:2d:10:5b:44:2c:
ac:c4:b8:17:01:66:0a:fe:16:81:1f:a3:60:24:8c:9b:94:67:
c2:60:b2:5c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBBtbqmbXC1CaaT2uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNTEyMDAwMFoXDTIzMDEyMDA1MDAwMFowLzEtMCsGA1UEAxMk
ZWE5NDRkZDgtOTUzOC00NTE0LWFjZTAtOWZiODg5ODQwM2FiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzidgzl4NTiSJvGAWByFLVRYAQXNToBHcRR1Z
jy+nvprNwtTLwkX9LtbJbd17XrMqjiMG5hkP4/AFtp9dKQ14ahIlyPI53F5fCtsP
VLPG/1qmiw7dWXitqwlkD8nRlf463RqlVBcfo7WqMlFzFontkzzfaIQbQMHZzgTx
WFXvxPlm5XoWUUX7ODDVScWffnvSdx4uaSBpkn8fiQnt2Btt2A6V6bUSVoAFvvh1
pUuho9rLYejvTjjUjUuETgKiAfuMR5/lXjvOm50tm5YwWxLYU5UEqu0r2lqCA0av
kMhjo29tg/PKAJHYrdntnPfcWPm8BgqUB6GDPgFFGavSEeDuqwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJTkbDszkOOt6HJqseebakaD807HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNDU2NTVmYzQtNTU0Mi0z
ZDg5LTk0ZDYtMTUwYWM2MDFjZTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEvAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAe4Z2m3Yr/QeophGuz5mEdNsvug9SXWGDIDJDl3nWAc8wdR7bivjt9sr5
265NbnKp1q32RWxN4nrkHZ/PBvDU8HcNi7vfp7mV9l2syalyJADp79jPpmMJ6cYM
PzKJBqFw42hyUqRW4ZKMsOZE4X9ruHjT2kDVF9c84zLKFO6DjwfAikFoL/d4LcvK
9nL/X2FK7Qw3xlfJqRNihBR2uxXiscymdP1FWsPzcwLUvN9T5ehjbL4dibv1Qrbk
M0i8xvyIdakEYeSU4hUo4+ck6odkW1vgIkkAWI5vIuShbxkailaonHY3IC0QW0Qs
rMS4FwFmCv4WgR+jYCSMm5RnwmCyXA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 09:39:16 2025 by rpki-client