Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4596d898-a7ca-3be2-9b2a-88ec94cc56bb.roa
File: 4596d898-a7ca-3be2-9b2a-88ec94cc56bb.roa (raw, json)
Hash identifier: jrbXYEXzhDQsjF5aHawRYOLzb2PNx/USyK6QCykHsI4=
Subject key identifier: B4:D7:0E:CE:01:AB:5C:25:63:36:89:53:9C:D3:62:ED:BF:CB:FA:54
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF80C518BD2935E96B2222A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4596d898-a7ca-3be2-9b2a-88ec94cc56bb.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.95.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f8:0c:51:8b:d2:93:5e:96:b2:22:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=6a74b0fa-c1fd-4e3c-a975-28e75ab7a868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:53:9a:51:71:05:30:2a:4f:9f:e7:61:39:e4:
22:06:2f:e1:b2:da:41:0e:6c:71:2d:e4:1a:31:04:
87:7a:89:87:f0:79:b1:05:b0:59:11:c0:e6:b8:83:
17:10:a5:45:04:09:56:87:bd:89:a6:dd:9e:1a:d4:
29:ed:b8:29:36:25:7d:dc:cd:82:3e:ba:17:9c:fd:
c3:bf:08:73:3c:de:21:e0:0b:76:28:45:eb:ca:35:
3d:d0:b6:13:74:73:15:a6:51:78:e3:10:8f:ad:c6:
09:4f:48:c7:28:8b:6b:4e:4a:cf:5f:d8:50:cb:a7:
15:1e:5c:04:30:2e:12:3b:a6:83:2a:78:5c:bf:18:
90:4b:b7:22:60:63:0a:ba:79:c1:26:6d:40:81:74:
cf:b3:8a:cc:ff:58:0c:0f:4d:54:1b:d3:cb:6a:95:
ba:81:69:9c:e3:9b:9f:08:43:b7:63:fa:0e:20:8e:
14:b5:81:f6:9a:c6:96:40:b0:1f:fd:02:c4:22:cd:
62:f5:86:0d:f9:73:7d:b1:f5:38:ea:85:28:2b:af:
21:fb:35:19:35:83:d2:22:5c:03:c5:28:db:8d:bc:
03:58:13:1f:56:04:8b:c5:ad:df:19:c0:b4:fc:11:
80:e9:c3:2e:82:e8:ce:48:8c:c4:8c:d7:03:7f:79:
f5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D7:0E:CE:01:AB:5C:25:63:36:89:53:9C:D3:62:ED:BF:CB:FA:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4596d898-a7ca-3be2-9b2a-88ec94cc56bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.95.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:e2:c9:4e:35:60:c1:df:55:6a:39:c9:73:2d:fe:b1:95:ba:
f0:b0:6a:56:34:42:98:d3:d7:4c:d9:54:3f:a5:f8:37:4f:07:
fa:04:e2:08:18:68:72:e9:15:a3:e0:0f:c5:cf:ef:ab:47:cf:
8c:de:06:25:04:0f:44:ff:12:cd:a8:ed:e4:6c:57:a9:2b:93:
17:ea:bb:46:04:34:a7:08:a5:a1:82:a4:20:41:c8:10:52:16:
51:91:4b:00:3a:c1:4f:29:6a:53:f3:ca:a6:9e:dd:72:36:f0:
58:cf:0b:4c:92:9e:59:c5:b5:12:41:72:93:1a:a2:d2:f7:1c:
f2:29:3e:1b:6d:b1:f5:8f:0e:66:39:e5:7b:57:5f:03:0c:f6:
df:ea:5c:33:98:45:56:ba:ec:3e:ee:ea:31:e6:34:f9:5f:10:
c8:f1:29:d2:53:c5:6e:48:b5:10:37:ba:3d:ce:d5:a3:ba:f4:
9c:0f:5e:0b:c1:f5:14:8b:05:88:2e:72:89:33:fe:4f:14:5f:
2b:2e:b9:6e:58:eb:0c:36:c1:98:82:fb:0e:d6:3a:1a:98:71:
33:75:03:c7:82:87:33:f6:4f:ff:88:39:84:38:1b:f3:5d:3e:
52:64:a3:c3:03:70:f8:33:3f:1a:97:f9:ca:1a:19:c7:ad:a9:
02:c2:4c:df
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/4DFGL0pNelrIiKoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTExOTEyMDAwMFoXDTIyMTIyNTA1MDAwMFowLzEtMCsGA1UEAxMk
NmE3NGIwZmEtYzFmZC00ZTNjLWE5NzUtMjhlNzVhYjdhODY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lOaUXEFMCpPn+dhOeQiBi/hstpBDmxxLeQa
MQSHeomH8HmxBbBZEcDmuIMXEKVFBAlWh72Jpt2eGtQp7bgpNiV93M2CProXnP3D
vwhzPN4h4At2KEXryjU90LYTdHMVplF44xCPrcYJT0jHKItrTkrPX9hQy6cVHlwE
MC4SO6aDKnhcvxiQS7ciYGMKunnBJm1AgXTPs4rM/1gMD01UG9PLapW6gWmc45uf
CEO3Y/oOII4UtYH2msaWQLAf/QLEIs1i9YYN+XN9sfU46oUoK68h+zUZNYPSIlwD
xSjbjbwDWBMfVgSLxa3fGcC0/BGA6cMugujOSIzEjNcDf3n1mwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLTXDs4Bq1wlYzaJU5zTYu2/y/pUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNDU5NmQ4OTgtYTdjYS0z
YmUyLTliMmEtODhlYzk0Y2M1NmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEl8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGeLJTjVgwd9VajnJcy3+sZW68LBqVjRCmNPXTNlUP6X4N08H+gTiCBho
cukVo+APxc/vq0fPjN4GJQQPRP8Szajt5GxXqSuTF+q7RgQ0pwiloYKkIEHIEFIW
UZFLADrBTylqU/PKpp7dcjbwWM8LTJKeWcW1EkFykxqi0vcc8ik+G22x9Y8OZjnl
e1dfAwz23+pcM5hFVrrsPu7qMeY0+V8QyPEp0lPFbki1EDe6Pc7Vo7r0nA9eC8H1
FIsFiC5yiTP+TxRfKy65bljrDDbBmIL7DtY6GphxM3UDx4KHM/ZP/4g5hDgb810+
UmSjwwNw+DM/Gpf5yhoZx62pAsJM3w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:44:41 2025 by rpki-client