Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ab4224f-645b-3ded-8843-3e3871d2fa08.roa
File: 5ab4224f-645b-3ded-8843-3e3871d2fa08.roa (raw, json)
Hash identifier: HCSzRJO7c5Qpvfhj1UI6fnrQdV1FcIo0ml7LIAMoDF0=
Subject key identifier: 97:83:54:93:F8:A9:0E:DC:2B:5A:34:62:C4:79:60:0F:A1:FB:E6:4F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FD0E081E7BA9EB49CE6AE39C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ab4224f-645b-3ded-8843-3e3871d2fa08.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.85.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d0:e0:81:e7:ba:9e:b4:9c:e6:ae:39:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=393f95e9-b7de-4a6f-99cb-fb757f5e302e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e3:17:49:e7:25:f4:e4:21:20:18:59:05:a3:
88:49:cf:4f:40:b2:8f:86:3a:89:c0:1d:8a:bc:a8:
81:fd:86:3a:b2:ca:97:cd:c7:e0:1e:bf:46:56:f8:
3e:c6:9c:87:65:77:d4:14:e4:5d:75:13:7b:5d:fa:
11:a7:c4:cc:9a:ac:ca:3f:6d:9c:c5:6e:ac:77:8f:
ae:69:b5:b6:f9:ce:b4:0a:21:6f:6e:51:f7:53:3b:
cd:51:a8:1e:f2:da:7e:bb:18:f3:da:33:52:54:47:
87:d5:c8:b1:4a:59:62:f8:17:6f:09:ef:d2:bf:3f:
91:04:1d:47:c0:c2:3f:fa:c4:0f:3d:b7:92:7e:54:
e4:80:57:44:b7:9f:bb:7d:ad:a6:c0:dc:3c:a8:ff:
d1:81:31:22:a1:3f:76:24:23:f4:6a:6e:65:4a:5e:
27:83:03:6b:43:5d:08:fe:d2:1e:3f:2a:cb:3c:3a:
f0:32:65:8c:f4:18:a1:5b:6f:bd:c6:b0:d7:ca:3e:
d8:22:d2:ea:26:e7:03:97:62:b0:d9:1f:f1:5c:11:
8d:a8:05:d9:1e:34:cf:45:ee:4b:1c:8a:6d:49:42:
4c:3a:d4:fe:66:20:1d:5b:de:e7:00:bf:b6:1f:c9:
09:29:ff:56:d3:d5:4e:b9:29:2f:59:e1:2b:73:36:
99:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:83:54:93:F8:A9:0E:DC:2B:5A:34:62:C4:79:60:0F:A1:FB:E6:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ab4224f-645b-3ded-8843-3e3871d2fa08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.85.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:78:ce:a6:c0:be:89:49:79:ce:6e:a8:7b:3e:12:57:43:7e:
b6:6c:ed:73:98:82:ff:e4:ef:d6:21:18:b0:57:3e:d9:59:d2:
91:70:13:f4:b0:c9:ed:8b:d9:13:59:3d:78:92:8f:34:a5:2e:
20:77:f2:2f:6a:dc:38:bf:5e:35:86:a1:ff:f8:b4:41:ca:9b:
55:9a:11:43:33:f4:77:f7:1d:29:3e:45:4b:ca:1a:5b:57:64:
3f:01:d1:ef:9b:cf:b5:dd:86:00:f7:3c:f5:f2:65:9f:b2:55:
09:1e:3c:32:d6:b0:2a:6e:0e:89:59:86:41:86:46:0e:4e:fa:
38:9d:bb:70:e4:2c:d1:bf:be:cf:3b:95:bd:e3:13:b4:d0:fc:
17:e4:00:f5:d8:8c:dc:cf:89:9b:e8:2d:67:de:ff:8a:d9:b2:
1e:aa:bb:1b:d4:f0:a5:c9:d2:ca:9b:05:4d:64:00:57:68:b6:
e6:fb:6f:14:ef:1e:12:a5:bb:96:fb:f2:a7:bf:36:d6:62:c5:
7d:1c:e5:fe:06:6c:23:79:fb:2b:67:4a:33:0e:12:af:3f:01:
b1:17:0c:82:89:96:46:41:32:a3:59:9a:7f:8e:56:98:26:6f:
c5:50:6a:df:e2:19:a0:72:28:ed:2d:6d:95:23:b2:54:96:89:
1b:39:7c:ef
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/Q4IHnup60nOauOcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEwNTEyMDAwMFoXDTIyMTIxMTA1MDAwMFowLzEtMCsGA1UEAxMk
MzkzZjk1ZTktYjdkZS00YTZmLTk5Y2ItZmI3NTdmNWUzMDJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeMXSecl9OQhIBhZBaOISc9PQLKPhjqJwB2K
vKiB/YY6ssqXzcfgHr9GVvg+xpyHZXfUFORddRN7XfoRp8TMmqzKP22cxW6sd4+u
abW2+c60CiFvblH3UzvNUage8tp+uxjz2jNSVEeH1cixSlli+BdvCe/Svz+RBB1H
wMI/+sQPPbeSflTkgFdEt5+7fa2mwNw8qP/RgTEioT92JCP0am5lSl4ngwNrQ10I
/tIePyrLPDrwMmWM9BihW2+9xrDXyj7YItLqJucDl2Kw2R/xXBGNqAXZHjTPRe5L
HIptSUJMOtT+ZiAdW97nAL+2H8kJKf9W09VOuSkvWeErczaZbQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJeDVJP4qQ7cK1o0YsR5YA+h++ZPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNWFiNDIyNGYtNjQ1Yi0z
ZGVkLTg4NDMtM2UzODcxZDJmYTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAElUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAcXjOpsC+iUl5zm6oez4SV0N+tmztc5iC/+Tv1iEYsFc+2VnSkXAT9LDJ
7YvZE1k9eJKPNKUuIHfyL2rcOL9eNYah//i0QcqbVZoRQzP0d/cdKT5FS8oaW1dk
PwHR75vPtd2GAPc89fJln7JVCR48MtawKm4OiVmGQYZGDk76OJ27cOQs0b++zzuV
veMTtND8F+QA9diM3M+Jm+gtZ97/itmyHqq7G9TwpcnSypsFTWQAV2i25vtvFO8e
EqW7lvvyp7821mLFfRzl/gZsI3n7K2dKMw4Srz8BsRcMgomWRkEyo1maf45WmCZv
xVBq3+IZoHIo7S1tlSOyVJaJGzl87w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:13:18 2025 by rpki-client