Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/587ee102-99de-37da-a669-dea03982212e.roa
File: 587ee102-99de-37da-a669-dea03982212e.roa (raw, json)
Hash identifier: B/8lnvyxF5k6NOsi/Sb5TPdatVIfOmAq2WRE6yWOlpk=
Subject key identifier: 32:F3:BB:35:A9:C4:18:33:70:28:8C:8F:CC:5D:4A:65:86:75:87:B4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F07D7DEE3BA7FB57DA07A66C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/587ee102-99de-37da-a669-dea03982212e.roa
Signing time: Thu 25 Aug 2022 12:00:00 +0000
ROA not before: Thu 25 Aug 2022 12:00:00 +0000
ROA not after: Fri 30 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.132.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:07:d7:de:e3:ba:7f:b5:7d:a0:7a:66:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 25 12:00:00 2022 GMT
Not After : Sep 30 04:00:00 2022 GMT
Subject: CN=c3f9c81f-5a0f-43be-84c2-db0f22823bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:a3:5d:d1:91:06:f8:0f:99:58:be:7a:58:
62:ca:4f:99:8f:e1:4b:81:da:20:a4:a7:62:f2:70:
62:ba:23:85:ca:b9:59:39:3f:35:87:33:9f:0e:f1:
ef:e5:25:b7:14:0a:c6:cf:db:ca:20:92:10:a3:6f:
23:00:a2:bf:50:fb:d9:c9:0c:66:fb:78:f4:49:2b:
c4:59:49:59:71:a4:fa:e7:a1:26:42:9e:13:25:d5:
e5:49:e5:ea:cd:78:6e:c9:ec:0b:42:c6:25:a4:db:
91:32:59:6b:ed:0f:8f:dd:f3:61:5e:08:5e:dd:57:
01:f1:82:80:22:44:05:f1:82:ae:ce:b3:b0:75:88:
2b:e3:43:e0:14:1d:d7:69:5b:a1:8d:e7:86:d8:6f:
b0:40:7b:1c:7e:ce:f9:26:d8:b1:48:ff:46:4a:da:
3e:c7:e4:9d:c2:e6:f2:5c:a9:ff:27:77:b8:dd:25:
d8:29:9f:72:2f:5c:2e:d9:4a:44:4f:fc:91:b3:ec:
4f:b2:6d:69:7a:ab:a5:57:be:e0:0e:fc:aa:97:ab:
68:28:28:1a:cb:48:b9:30:bd:7e:8c:c3:1c:d0:24:
c7:96:06:2b:97:f6:f4:92:7b:a1:0b:a8:6e:be:9a:
07:9c:a2:07:14:ef:79:ff:96:c5:b5:29:39:8f:00:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F3:BB:35:A9:C4:18:33:70:28:8C:8F:CC:5D:4A:65:86:75:87:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/587ee102-99de-37da-a669-dea03982212e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.132.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:77:51:af:e7:7a:41:af:5f:b9:81:a4:61:3f:a4:cb:20:86:
44:d9:48:33:cc:c6:a3:1c:18:8a:0f:82:9a:66:d5:d8:6c:e2:
a3:d2:2d:d7:e8:24:3b:90:36:12:21:33:30:05:dc:be:b8:72:
d5:41:33:5f:62:17:1d:0c:c4:01:07:bf:75:2b:0e:a0:3f:0c:
7b:bc:84:b0:72:2e:6b:0c:ab:2f:f7:a4:ca:d6:f9:21:e4:ac:
73:c4:94:40:c6:91:36:2c:3c:3b:9a:c3:7b:4c:3f:ad:e7:ff:
54:50:64:03:14:a9:44:0c:b7:a9:31:6f:b1:34:0f:1a:bd:35:
5a:86:2d:9c:ca:0b:28:5a:f7:69:4e:2c:06:98:13:52:1d:0f:
be:d4:0c:44:33:2c:c5:80:ea:88:7e:f9:38:56:08:4c:d7:d4:
70:dd:b4:e1:a3:62:e6:dd:3e:df:a7:b0:14:06:7d:6b:b0:aa:
ce:ac:3a:d1:f0:e9:be:c3:3d:6b:f8:0d:f2:ea:56:5e:15:55:
0e:f1:5b:bc:4e:b0:d1:d0:58:b8:8b:9b:aa:4a:d7:9b:6f:c2:
9d:89:9d:af:5f:22:40:16:81:29:73:e1:30:d2:2d:3c:ec:ca:
5c:bf:cd:38:e6:b4:39:27:95:17:1a:74:d2:85:f6:3d:ca:61:
80:82:56:c8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8H197jun+1faB6ZsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgyNTEyMDAwMFoXDTIyMDkzMDA0MDAwMFowLzEtMCsGA1UEAxMk
YzNmOWM4MWYtNWEwZi00M2JlLTg0YzItZGIwZjIyODIzYmQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5KjXdGRBvgPmVi+elhiyk+Zj+FLgdogpKdi
8nBiuiOFyrlZOT81hzOfDvHv5SW3FArGz9vKIJIQo28jAKK/UPvZyQxm+3j0SSvE
WUlZcaT656EmQp4TJdXlSeXqzXhuyewLQsYlpNuRMllr7Q+P3fNhXghe3VcB8YKA
IkQF8YKuzrOwdYgr40PgFB3XaVuhjeeG2G+wQHscfs75JtixSP9GSto+x+Sdwuby
XKn/J3e43SXYKZ9yL1wu2UpET/yRs+xPsm1pequlV77gDvyql6toKCgay0i5ML1+
jMMc0CTHlgYrl/b0knuhC6huvpoHnKIHFO95/5bFtSk5jwBAPwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDLzuzWpxBgzcCiMj8xdSmWGdYe0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNTg3ZWUxMDItOTlkZS0z
N2RhLWE2NjktZGVhMDM5ODIyMTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEoQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAQndRr+d6Qa9fuYGkYT+kyyCGRNlIM8zGoxwYig+CmmbV2Gzio9It1+gk
O5A2EiEzMAXcvrhy1UEzX2IXHQzEAQe/dSsOoD8Me7yEsHIuawyrL/ekytb5IeSs
c8SUQMaRNiw8O5rDe0w/ref/VFBkAxSpRAy3qTFvsTQPGr01WoYtnMoLKFr3aU4s
BpgTUh0PvtQMRDMsxYDqiH75OFYITNfUcN204aNi5t0+36ewFAZ9a7Cqzqw60fDp
vsM9a/gN8upWXhVVDvFbvE6w0dBYuIubqkrXm2/CnYmdr18iQBaBKXPhMNItPOzK
XL/NOOa0OSeVFxp00oX2PcphgIJWyA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 18:06:59 2025 by rpki-client