Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/51761702-b1cd-383f-8af1-bbb21f786cb0.roa
File: 51761702-b1cd-383f-8af1-bbb21f786cb0.roa (raw, json)
Hash identifier: 7CmTW0gv4YOEDcuCADK08YxTp0r0d1VJLKoS98jqjIU=
Subject key identifier: 77:F8:EB:22:BF:29:DD:11:11:CE:22:2A:9D:C3:A2:B8:AB:4B:11:7D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858409478F41B3FC56A0EDA8EF400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/51761702-b1cd-383f-8af1-bbb21f786cb0.roa
Signing time: Sat 14 Jan 2023 12:00:00 +0000
ROA not before: Sat 14 Jan 2023 12:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.45.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:94:78:f4:1b:3f:c5:6a:0e:da:8e:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 12:00:00 2023 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=0b2511fe-010b-4a5f-8783-92eadd25fbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:1f:e3:15:57:0c:fd:1e:08:c1:32:63:39:
29:8c:57:3d:15:c1:e3:9c:72:f2:42:25:c2:e8:87:
99:94:cd:52:b0:7c:03:5e:6d:79:b8:83:a7:3b:21:
6d:f2:f7:27:9c:8a:fd:58:f6:5a:da:2a:16:bd:2d:
9c:3d:1c:c2:ce:00:73:95:d2:76:9c:5d:1d:a6:07:
c3:e7:b8:e4:cb:f6:7b:1a:0a:6c:25:8f:44:d5:4e:
1d:6f:82:63:e5:5c:93:13:61:82:57:ee:6a:2d:6e:
d3:3e:15:58:a7:f5:f2:ec:09:e1:6c:c3:8d:23:e3:
3b:c0:43:5d:69:a5:3b:9a:6f:b8:a4:29:62:59:36:
46:f8:38:ab:7c:df:86:94:cb:33:9c:dc:b2:5b:15:
47:fb:21:9c:de:6b:97:68:4c:1b:3f:63:10:41:f8:
59:f6:de:fa:46:84:ee:a9:c7:ce:68:4b:79:97:57:
b7:8e:8d:13:4a:38:af:a6:d2:e5:a9:95:0a:1c:8a:
e1:75:17:19:47:ea:7b:e3:d5:a7:70:7e:e6:31:43:
5e:e7:fc:99:bb:62:75:ff:cf:cd:99:62:5b:6e:4f:
b4:3e:ae:94:03:17:a1:f1:34:0c:03:e9:13:77:4b:
1d:b3:10:6c:f5:95:cd:51:0c:be:99:5f:78:b2:40:
03:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F8:EB:22:BF:29:DD:11:11:CE:22:2A:9D:C3:A2:B8:AB:4B:11:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/51761702-b1cd-383f-8af1-bbb21f786cb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.45.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:d9:92:c5:26:3b:38:ec:29:8d:15:87:18:a8:d2:f0:9c:ec:
53:5b:2a:89:24:c6:d7:7c:94:14:03:3b:b1:47:10:36:ac:d8:
a1:ba:47:1d:46:ca:34:c7:5d:eb:d9:29:8f:3a:fb:31:05:26:
02:c9:a6:c3:b6:af:24:d2:e9:dd:d5:8b:92:77:02:38:fc:97:
cc:15:64:4d:94:3e:a5:51:49:99:f5:e6:48:2e:7a:0f:16:44:
6b:7e:b3:03:61:5c:c3:59:88:f6:5b:1e:34:7b:b8:c8:8f:1b:
47:12:6a:fb:cc:ae:5b:0a:cf:46:7c:c2:9e:06:b7:5b:b5:69:
8e:97:49:b1:7a:26:eb:ce:61:c7:d6:20:4a:93:1b:9f:6d:be:
6f:27:e3:a4:46:f0:45:13:b4:04:b5:25:46:6b:ed:42:bc:36:
95:69:a5:be:6d:6b:76:24:04:2f:7d:4d:dc:a3:01:e8:fb:4c:
b9:e1:08:5a:c9:63:ea:2d:92:f8:51:81:5f:e7:d9:9f:9c:3e:
ad:11:88:d7:99:20:e6:0f:11:4b:01:d9:24:e0:9f:e8:ce:79:
91:fe:ee:95:84:56:e2:18:77:c3:e3:10:7d:90:b3:b0:c6:3e:
70:e7:97:3c:38:a7:f7:b8:08:31:5a:4d:f5:6b:11:d6:2e:07:
d8:5c:35:1c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECUePQbP8VqDtqO9AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExNDEyMDAwMFoXDTIzMDIxOTA1MDAwMFowLzEtMCsGA1UEAxMk
MGIyNTExZmUtMDEwYi00YTVmLTg3ODMtOTJlYWRkMjVmYmQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG8f4xVXDP0eCMEyYzkpjFc9FcHjnHLyQiXC
6IeZlM1SsHwDXm15uIOnOyFt8vcnnIr9WPZa2ioWvS2cPRzCzgBzldJ2nF0dpgfD
57jky/Z7GgpsJY9E1U4db4Jj5VyTE2GCV+5qLW7TPhVYp/Xy7AnhbMONI+M7wENd
aaU7mm+4pCliWTZG+DirfN+GlMsznNyyWxVH+yGc3muXaEwbP2MQQfhZ9t76RoTu
qcfOaEt5l1e3jo0TSjivptLlqZUKHIrhdRcZR+p749WncH7mMUNe5/yZu2J1/8/N
mWJbbk+0Pq6UAxeh8TQMA+kTd0sdsxBs9ZXNUQy+mV94skADPwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHf46yK/Kd0REc4iKp3DorirSxF9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNTE3NjE3MDItYjFjZC0z
ODNmLThhZjEtYmJiMjFmNzg2Y2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEi0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAW9mSxSY7OOwpjRWHGKjS8JzsU1sqiSTG13yUFAM7sUcQNqzYobpHHUbK
NMdd69kpjzr7MQUmAsmmw7avJNLp3dWLkncCOPyXzBVkTZQ+pVFJmfXmSC56DxZE
a36zA2Fcw1mI9lseNHu4yI8bRxJq+8yuWwrPRnzCnga3W7VpjpdJsXom685hx9Yg
SpMbn22+byfjpEbwRRO0BLUlRmvtQrw2lWmlvm1rdiQEL31N3KMB6PtMueEIWslj
6i2S+FGBX+fZn5w+rRGI15kg5g8RSwHZJOCf6M55kf7ulYRW4hh3w+MQfZCzsMY+
cOeXPDin97gIMVpN9WsR1i4H2Fw1HA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:35:37 2025 by rpki-client