Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5c10282f-2573-3ed5-8e82-6ca9cf355eea.roa
File: 5c10282f-2573-3ed5-8e82-6ca9cf355eea.roa (raw, json)
Hash identifier: ZDR/jBHUsmlGIlfLShWlnwMG95Rl8a4p9CGGcMeKV94=
Subject key identifier: BF:3B:ED:86:B0:B4:02:39:7D:9A:B2:A4:E3:E2:3B:04:AA:B2:D9:7C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF7B2E8F6FBE6EB3D5D0FA480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5c10282f-2573-3ed5-8e82-6ca9cf355eea.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.35.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f7:b2:e8:f6:fb:e6:eb:3d:5d:0f:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=b62de48c-b984-4d6a-8348-ff7e1ec52140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:02:51:61:b4:71:5c:ec:cd:38:bb:39:9e:3e:
3d:6c:8a:bd:f5:7e:27:a0:ae:78:d0:d4:2d:45:ce:
bd:3e:5e:a0:37:3c:46:87:9b:66:82:8d:48:e2:f9:
f0:67:c7:4f:53:34:91:ba:cf:08:55:90:61:f1:9a:
46:c3:e5:f7:65:6a:e3:76:03:cd:2a:af:69:da:69:
ab:17:45:fb:17:90:c9:d4:a7:fc:c8:cb:32:55:b8:
25:4f:d0:49:86:9e:6a:ff:79:a2:b1:37:41:bd:80:
ea:ce:98:48:63:9e:51:1d:cf:cb:95:9c:ff:73:2d:
d8:c2:ca:86:39:e2:5a:49:02:16:a4:c1:ef:1d:2f:
99:ff:9d:f8:7b:9f:78:28:0b:f8:e9:60:cf:36:fc:
f9:ee:4f:ba:67:05:99:9d:29:30:8e:ce:1c:57:d3:
e6:98:7d:3f:49:a2:2f:62:a0:bb:1e:65:0c:f9:19:
84:d2:f1:29:4b:fd:61:f8:90:a4:61:2d:71:e3:b9:
f6:1d:18:b8:78:0f:14:a5:09:a2:ee:8a:ee:c4:1a:
c6:ca:0d:79:d4:8e:8c:c1:0a:f4:ee:93:12:28:27:
6b:99:04:84:22:8d:9c:36:ed:cb:a6:13:9c:8c:8e:
28:69:02:53:06:48:22:30:ed:8d:ee:80:f5:28:f8:
4c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3B:ED:86:B0:B4:02:39:7D:9A:B2:A4:E3:E2:3B:04:AA:B2:D9:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5c10282f-2573-3ed5-8e82-6ca9cf355eea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.35.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:f0:65:9b:88:dc:9c:70:35:7a:a2:6e:cf:3b:bc:31:5e:f7:
fa:f5:e1:db:8d:6a:5f:58:51:61:7c:42:18:ad:5f:67:93:c0:
63:6e:f5:e9:ea:8c:50:ae:b1:45:2f:71:f5:92:51:12:0d:65:
87:59:16:9b:bf:c4:17:3d:4d:e7:df:53:68:44:b7:94:2f:3e:
fb:37:9f:86:ee:98:72:7a:ab:5f:52:38:6e:39:82:06:ea:81:
ab:ee:30:3b:ab:c8:26:26:a4:e1:2f:88:38:5f:80:5c:c4:c6:
9c:61:6b:20:40:51:ad:d7:d5:b8:cb:65:25:cd:44:07:ac:48:
86:24:99:79:80:26:ed:e2:56:45:fc:b9:04:87:0a:fc:69:3d:
c6:d3:b5:21:13:df:d1:7c:af:e6:06:69:0c:59:f9:fc:ca:50:
2a:7a:cc:bb:b0:23:41:f1:fd:36:84:70:37:d7:b6:44:f0:22:
3e:20:b1:58:60:f5:75:7d:42:e3:46:70:a7:fc:59:f8:b6:8c:
66:48:bb:4f:69:a7:26:4c:97:21:69:ce:5a:dd:0b:6d:09:ce:
6d:68:e5:f7:8f:2d:63:9c:4d:c8:3b:29:f7:b9:64:02:29:df:
53:b0:b3:a4:9a:5d:15:a5:d3:e6:08:4f:63:66:4f:e8:04:59:
af:9a:8d:e8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/3suj2++brPV0PpIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTExOTEyMDAwMFoXDTIyMTIyNTA1MDAwMFowLzEtMCsGA1UEAxMk
YjYyZGU0OGMtYjk4NC00ZDZhLTgzNDgtZmY3ZTFlYzUyMTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigJRYbRxXOzNOLs5nj49bIq99X4noK540NQt
Rc69Pl6gNzxGh5tmgo1I4vnwZ8dPUzSRus8IVZBh8ZpGw+X3ZWrjdgPNKq9p2mmr
F0X7F5DJ1Kf8yMsyVbglT9BJhp5q/3misTdBvYDqzphIY55RHc/LlZz/cy3YwsqG
OeJaSQIWpMHvHS+Z/534e594KAv46WDPNvz57k+6ZwWZnSkwjs4cV9PmmH0/SaIv
YqC7HmUM+RmE0vEpS/1h+JCkYS1x47n2HRi4eA8UpQmi7oruxBrGyg151I6MwQr0
7pMSKCdrmQSEIo2cNu3LphOcjI4oaQJTBkgiMO2N7oD1KPhMlQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFL877YawtAI5fZqypOPiOwSqstl8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNWMxMDI4MmYtMjU3My0z
ZWQ1LThlODItNmNhOWNmMzU1ZWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEiMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfPBlm4jcnHA1eqJuzzu8MV73+vXh241qX1hRYXxCGK1fZ5PAY2716eqM
UK6xRS9x9ZJREg1lh1kWm7/EFz1N599TaES3lC8++zefhu6YcnqrX1I4bjmCBuqB
q+4wO6vIJiak4S+IOF+AXMTGnGFrIEBRrdfVuMtlJc1EB6xIhiSZeYAm7eJWRfy5
BIcK/Gk9xtO1IRPf0Xyv5gZpDFn5/MpQKnrMu7AjQfH9NoRwN9e2RPAiPiCxWGD1
dX1C40Zwp/xZ+LaMZki7T2mnJkyXIWnOWt0LbQnObWjl948tY5xNyDsp97lkAinf
U7CzpJpdFaXT5ghPY2ZP6ARZr5qN6A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:51:22 2025 by rpki-client