Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4e7c5c00-c180-31a1-988a-39dd81174533.roa
File: 4e7c5c00-c180-31a1-988a-39dd81174533.roa (raw, json)
Hash identifier: kiAllMPZ42kM/aN7iq4VAjBe2WbC/4f5R0p7lxYqB0g=
Subject key identifier: 26:CD:42:4C:D3:22:3A:96:3C:A3:41:10:3D:76:68:B6:8B:E7:DC:C1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D80D3710DAE7183C477E35240
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4e7c5c00-c180-31a1-988a-39dd81174533.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.201.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:d3:71:0d:ae:71:83:c4:77:e3:52:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=346c9e18-13dd-4c4d-a398-4de4d774d307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:58:28:16:21:44:0c:4d:e0:3f:cb:f0:f4:df:
bc:1c:5a:c2:3f:10:12:bd:db:c4:8f:21:03:bb:0d:
37:35:49:47:5b:48:e2:59:bf:ac:17:fc:27:c7:19:
e3:ba:31:3a:fb:b0:5a:f3:6d:ef:d3:33:53:f6:8b:
bb:d8:80:05:8e:27:41:70:0b:4e:35:73:75:ca:ce:
b6:ce:b2:a3:94:d7:58:38:5f:4c:0a:a5:c5:f9:f5:
11:1b:92:ff:4c:bf:4f:94:19:f8:21:94:84:a3:4e:
ba:ad:d2:51:06:59:69:38:52:9f:3b:8a:e8:6d:c3:
59:64:bb:ca:d0:6b:87:dc:c3:51:13:2f:41:0e:ec:
0f:02:a6:3f:83:d9:ab:75:49:bb:a7:65:71:0c:b3:
2b:cb:1e:7c:23:4b:a1:3d:d3:e3:f3:84:c4:8a:54:
0a:64:67:25:d9:35:35:fb:21:1b:34:20:57:f6:3c:
88:03:65:33:63:26:be:10:f0:b0:e4:b0:e9:f9:4b:
bc:bb:4f:2d:76:a2:58:68:26:e0:a6:3d:cb:91:63:
c6:13:33:0b:bb:f6:1e:ce:f8:29:69:a5:ca:79:c2:
b3:cf:70:20:0a:52:e9:a3:96:52:01:3d:cb:13:cc:
7c:a2:78:bc:d6:a5:df:54:67:79:bf:cb:73:b3:fa:
e6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CD:42:4C:D3:22:3A:96:3C:A3:41:10:3D:76:68:B6:8B:E7:DC:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4e7c5c00-c180-31a1-988a-39dd81174533.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.201.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:3a:50:11:e9:a5:30:29:79:de:dc:de:9c:fc:fd:eb:99:a3:
e7:9c:d8:3d:fe:13:30:cb:8a:b3:4f:33:52:2b:8f:43:85:8d:
f0:9b:db:ee:ee:48:8b:65:23:61:f1:dc:1d:68:7e:ca:aa:f2:
f4:55:aa:e4:21:90:5f:57:37:2a:67:7d:36:61:ab:a2:9e:b1:
f8:c0:10:5c:2e:56:ed:06:99:44:d3:71:2f:5d:5a:0c:da:e6:
46:0e:c0:b4:7f:fb:3b:a1:a3:7f:3d:15:36:2d:e6:2c:fc:36:
6e:0e:b7:e3:c9:87:35:f9:44:08:9c:a6:d8:5b:9a:3b:2f:bd:
6e:1a:9f:09:f4:c1:2e:d1:92:c8:eb:2b:5b:88:74:79:16:b5:
b0:be:26:55:3a:76:38:42:01:33:ce:01:dd:ff:74:db:da:50:
6a:de:6b:84:93:42:1e:7a:b2:8f:8c:5e:81:24:5b:72:06:93:
c0:66:85:67:3f:bd:b6:80:07:d7:f9:f1:a1:4e:c7:63:19:cb:
dc:56:ea:64:fd:25:6e:3f:d4:cf:55:7e:b4:a8:91:08:3d:1c:
d2:7a:03:04:61:61:e3:44:04:98:3e:97:52:8e:10:3f:9f:83:
a2:0d:ba:19:c6:38:a9:83:58:1b:b4:9e:ff:6f:63:50:03:19:
45:4a:95:9b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2A03ENrnGDxHfjUkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQwODA0MDAwMFoXDTIyMDUxMzA0MDAwMFowLzEtMCsGA1UEAxMk
MzQ2YzllMTgtMTNkZC00YzRkLWEzOTgtNGRlNGQ3NzRkMzA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlgoFiFEDE3gP8vw9N+8HFrCPxASvdvEjyED
uw03NUlHW0jiWb+sF/wnxxnjujE6+7Ba823v0zNT9ou72IAFjidBcAtONXN1ys62
zrKjlNdYOF9MCqXF+fURG5L/TL9PlBn4IZSEo066rdJRBllpOFKfO4robcNZZLvK
0GuH3MNREy9BDuwPAqY/g9mrdUm7p2VxDLMryx58I0uhPdPj84TEilQKZGcl2TU1
+yEbNCBX9jyIA2UzYya+EPCw5LDp+Uu8u08tdqJYaCbgpj3LkWPGEzMLu/Yezvgp
aaXKecKzz3AgClLpo5ZSAT3LE8x8oni81qXfVGd5v8tzs/rm7wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCbNQkzTIjqWPKNBED12aLaL59zBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNGU3YzVjMDAtYzE4MC0z
MWExLTk4OGEtMzlkZDgxMTc0NTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEskwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKDpQEemlMCl53tzenPz965mj55zYPf4TMMuKs08zUiuPQ4WN8Jvb7u5I
i2UjYfHcHWh+yqry9FWq5CGQX1c3Kmd9NmGrop6x+MAQXC5W7QaZRNNxL11aDNrm
Rg7AtH/7O6Gjfz0VNi3mLPw2bg6348mHNflECJym2FuaOy+9bhqfCfTBLtGSyOsr
W4h0eRa1sL4mVTp2OEIBM84B3f9029pQat5rhJNCHnqyj4xegSRbcgaTwGaFZz+9
toAH1/nxoU7HYxnL3FbqZP0lbj/Uz1V+tKiRCD0c0noDBGFh40QEmD6XUo4QP5+D
og26GcY4qYNYG7Se/29jUAMZRUqVmw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:36:57 2025 by rpki-client