Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49f30b72-524f-322b-8fca-2c5531065085.roa
File: 49f30b72-524f-322b-8fca-2c5531065085.roa (raw, json)
Hash identifier: jg7x1Vsejm+h9ZgVqKjk8kxIQz4zWKXim1BaesjFrDA=
Subject key identifier: 5E:98:29:12:E0:68:85:A5:1D:4F:D8:CA:9A:16:8D:3E:4D:D2:74:BF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401EAAC8DCEB1D2DFDB7A62F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49f30b72-524f-322b-8fca-2c5531065085.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.46.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1e:aa:c8:dc:eb:1d:2d:fd:b7:a6:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=da3b5bde-5134-4db0-8bdb-c0480aa7c858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:d8:05:e7:f7:6a:5b:0b:76:c7:71:34:ee:
d7:15:3e:21:ed:b4:ca:99:ef:7a:3e:32:54:25:fd:
e3:bb:fc:63:b1:62:dc:85:1a:38:e6:50:f4:cb:c2:
f3:fc:13:4d:99:1d:0a:f8:6c:d4:40:66:8a:92:6d:
b3:82:57:34:a7:73:fa:0e:61:b1:b3:54:7a:a0:67:
42:f8:8a:1f:a5:f6:66:be:3d:47:68:a4:eb:9f:a8:
43:a2:8c:0a:04:59:d0:cb:9f:fa:50:f9:85:29:ce:
1b:47:01:42:e0:f4:1a:e2:d8:f3:93:9d:e1:57:22:
24:f3:37:b4:e5:77:3e:d3:c6:51:1c:72:5c:76:c3:
7d:cf:aa:f2:1b:41:a7:df:7f:28:53:58:0c:26:32:
d4:86:c0:1b:71:92:fa:89:db:2c:38:04:85:43:c8:
fe:a8:64:5c:c6:d8:5d:d3:4c:5f:23:65:ec:48:bb:
13:86:9b:fe:e7:2d:16:87:9f:b9:5e:7e:37:e0:d9:
b0:d3:0a:43:7a:a3:d5:bb:07:16:a9:40:d1:96:83:
ba:19:fd:5f:d1:ee:4d:be:68:12:85:b7:b3:e3:5c:
f4:0b:88:38:58:dd:df:c0:1d:0d:0d:10:44:d1:05:
ca:d7:26:c9:96:df:24:83:58:26:67:57:93:8d:a4:
06:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:98:29:12:E0:68:85:A5:1D:4F:D8:CA:9A:16:8D:3E:4D:D2:74:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49f30b72-524f-322b-8fca-2c5531065085.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.46.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:07:e0:33:a7:4b:f0:55:6e:3b:50:c1:89:e1:10:cc:d3:6d:
37:2d:cd:6a:04:a1:cb:53:b3:1e:7d:c7:6a:e4:d9:1d:2d:77:
86:aa:93:2e:c9:08:17:66:fe:5a:6b:7b:1b:21:ff:b9:62:d2:
69:92:8c:8b:55:29:22:cc:6d:dc:43:d8:af:88:5e:69:18:fc:
97:88:07:63:63:91:25:f0:a7:30:05:04:3a:61:5e:0e:c5:65:
03:44:72:c9:28:21:1e:42:f1:9b:8c:13:b5:d7:e6:46:93:c2:
2b:4c:47:a7:84:46:1b:7e:03:1c:7d:37:81:84:11:c6:35:bb:
83:cc:c4:a6:ee:07:cf:af:34:8b:a2:53:0f:37:b6:c3:fd:b0:
36:a1:b3:6d:5f:17:ca:e1:71:1e:6a:3e:14:78:ec:be:a6:1a:
64:ad:5c:c2:43:d7:1c:e8:98:46:9f:aa:2d:ec:ea:07:28:62:
1d:3d:6d:86:0d:36:c7:20:1d:af:13:12:12:06:c2:2c:58:9b:
4c:49:03:3d:45:3a:1c:1c:3e:60:f3:52:42:75:3a:d1:8a:ae:
c6:07:c3:49:88:05:ba:99:c9:af:a5:a5:16:a5:74:de:70:c7:
bd:49:2e:a5:5f:ba:f8:25:3c:d5:3c:37:ef:8a:50:c8:ae:da:
59:3d:09:72
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAeqsjc6x0t/bemLwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIwMzEyMDAwMFoXDTIzMDEwODA1MDAwMFowLzEtMCsGA1UEAxMk
ZGEzYjViZGUtNTEzNC00ZGIwLThiZGItYzA0ODBhYTdjODU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRXYBef3alsLdsdxNO7XFT4h7bTKme96PjJU
Jf3ju/xjsWLchRo45lD0y8Lz/BNNmR0K+GzUQGaKkm2zglc0p3P6DmGxs1R6oGdC
+IofpfZmvj1HaKTrn6hDoowKBFnQy5/6UPmFKc4bRwFC4PQa4tjzk53hVyIk8ze0
5Xc+08ZRHHJcdsN9z6ryG0Gn338oU1gMJjLUhsAbcZL6idssOASFQ8j+qGRcxthd
00xfI2XsSLsThpv+5y0Wh5+5Xn434Nmw0wpDeqPVuwcWqUDRloO6Gf1f0e5NvmgS
hbez41z0C4g4WN3fwB0NDRBE0QXK1ybJlt8kg1gmZ1eTjaQGfwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFF6YKRLgaIWlHU/YypoWjT5N0nS/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNDlmMzBiNzItNTI0Zi0z
MjJiLThmY2EtMmM1NTMxMDY1MDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEi4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAIAfgM6dL8FVuO1DBieEQzNNtNy3NagShy1OzHn3HauTZHS13hqqTLskI
F2b+Wmt7GyH/uWLSaZKMi1UpIsxt3EPYr4heaRj8l4gHY2ORJfCnMAUEOmFeDsVl
A0RyySghHkLxm4wTtdfmRpPCK0xHp4RGG34DHH03gYQRxjW7g8zEpu4Hz680i6JT
Dze2w/2wNqGzbV8XyuFxHmo+FHjsvqYaZK1cwkPXHOiYRp+qLezqByhiHT1thg02
xyAdrxMSEgbCLFibTEkDPUU6HBw+YPNSQnU60YquxgfDSYgFupnJr6WlFqV03nDH
vUkupV+6+CU81Tw374pQyK7aWT0Jcg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 07:49:17 2025 by rpki-client