Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5c1e258f-6905-3ce6-a934-8bcfcbd0773b.roa
File: 5c1e258f-6905-3ce6-a934-8bcfcbd0773b.roa (raw, json)
Hash identifier: MJukyXHRr/7wk6etEaSLOKQ1FB1qSauzCFFuHaCoyTI=
Subject key identifier: FE:7C:A6:72:57:EA:90:E8:23:B9:60:D1:BE:7E:00:24:49:35:A0:42
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E96A9293C8C9210C11EC97140
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5c1e258f-6905-3ce6-a934-8bcfcbd0773b.roa
Signing time: Fri 15 Jul 2022 12:00:00 +0000
ROA not before: Fri 15 Jul 2022 12:00:00 +0000
ROA not after: Sat 20 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.228.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:96:a9:29:3c:8c:92:10:c1:1e:c9:71:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 15 12:00:00 2022 GMT
Not After : Aug 20 04:00:00 2022 GMT
Subject: CN=7627eab1-f8de-4996-b43d-60a3688205c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:19:95:ea:69:08:71:cb:94:e6:cb:d3:60:5e:
3d:30:5d:49:dc:a5:91:4a:e1:56:5e:33:90:24:8b:
58:ce:61:81:71:33:7f:28:ee:d6:28:e8:d5:53:72:
07:46:93:6e:a0:87:b0:33:7f:d6:08:bf:4d:5e:af:
1e:79:01:1f:a0:c7:83:88:96:9d:ef:2b:2d:05:7d:
80:cd:13:55:a6:23:36:65:92:00:21:a5:2c:bf:05:
ce:52:ee:cb:dd:c4:ef:a4:df:f0:3c:6d:64:2e:1e:
6d:c5:16:57:6d:8a:c0:aa:26:ae:65:dc:fa:04:e6:
fa:2a:7e:04:68:78:73:73:61:db:aa:08:f6:58:fe:
b1:b1:69:3a:ba:96:dd:9c:f7:51:b0:f5:73:ce:f2:
3c:31:6d:e5:3e:89:b3:9d:4e:20:5a:24:3c:53:5a:
7c:a9:58:fa:78:16:0a:aa:e5:4e:e5:fd:d8:4e:88:
21:82:1d:b3:1e:f5:af:9a:36:a6:c2:2f:f3:3b:e3:
65:5a:80:11:28:c7:65:31:e1:13:21:3c:f9:ab:0a:
a8:45:25:df:27:ab:d0:b0:81:23:9b:25:a3:3e:ca:
46:63:78:4d:ea:c4:fe:a3:9e:88:18:09:1a:7c:12:
d3:ab:d6:d1:cb:03:36:28:6e:90:5d:88:00:d2:5d:
3a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7C:A6:72:57:EA:90:E8:23:B9:60:D1:BE:7E:00:24:49:35:A0:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5c1e258f-6905-3ce6-a934-8bcfcbd0773b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.228.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:cb:fb:b9:92:ae:64:ee:c1:cf:62:76:b7:b1:5e:a9:23:41:
8e:ca:e8:ad:7a:14:ac:35:38:9a:76:ea:4c:a2:c0:18:c7:ee:
bb:f4:be:74:78:9d:7b:8d:db:81:21:77:36:8d:c4:4d:51:27:
e4:70:08:28:ad:21:35:eb:d7:b1:aa:d0:c1:8c:d9:30:fb:1f:
60:2b:e2:8b:a6:f7:f5:1e:b3:a8:b2:15:d8:31:a1:53:8c:e0:
1d:09:3e:99:46:d3:e7:a1:c6:cc:ec:40:b5:bc:b7:e5:21:e5:
8e:8a:00:e3:92:ad:be:fd:e7:2b:6d:56:55:3e:27:b3:6d:e6:
f5:aa:7c:83:f6:53:88:c8:48:7a:27:f4:a8:e9:2f:dc:b6:ec:
ec:3e:89:c4:79:e6:49:96:a7:85:f5:06:a1:58:2a:0f:33:e4:
c8:fd:8a:e4:8d:46:c5:6f:04:7a:2e:de:4b:e9:05:04:9a:eb:
b6:cc:9a:07:85:cd:27:26:bf:07:25:d4:1a:41:9b:c3:44:f3:
ec:a7:ed:11:ce:be:22:62:82:8e:9a:6f:d3:f3:14:5e:bd:cb:
5b:67:c1:cc:05:39:f6:ea:63:95:06:de:7d:65:b2:9e:cb:68:
83:80:9a:35:f9:0f:3f:76:fc:e8:79:fb:51:cd:9a:d7:33:6f:
dc:5b:b4:fd
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6WqSk8jJIQwR7JcUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcxNTEyMDAwMFoXDTIyMDgyMDA0MDAwMFowLzEtMCsGA1UEAxMk
NzYyN2VhYjEtZjhkZS00OTk2LWI0M2QtNjBhMzY4ODIwNWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRmV6mkIccuU5svTYF49MF1J3KWRSuFWXjOQ
JItYzmGBcTN/KO7WKOjVU3IHRpNuoIewM3/WCL9NXq8eeQEfoMeDiJad7ystBX2A
zRNVpiM2ZZIAIaUsvwXOUu7L3cTvpN/wPG1kLh5txRZXbYrAqiauZdz6BOb6Kn4E
aHhzc2Hbqgj2WP6xsWk6upbdnPdRsPVzzvI8MW3lPomznU4gWiQ8U1p8qVj6eBYK
quVO5f3YToghgh2zHvWvmjamwi/zO+NlWoARKMdlMeETITz5qwqoRSXfJ6vQsIEj
myWjPspGY3hN6sT+o56IGAkafBLTq9bRywM2KG6QXYgA0l06OwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFP58pnJX6pDoI7lg0b5+ACRJNaBCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNWMxZTI1OGYtNjkwNS0z
Y2U2LWE5MzQtOGJjZmNiZDA3NzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEuQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAp8v7uZKuZO7Bz2J2t7FeqSNBjsrorXoUrDU4mnbqTKLAGMfuu/S+dHid
e43bgSF3No3ETVEn5HAIKK0hNevXsarQwYzZMPsfYCvii6b39R6zqLIV2DGhU4zg
HQk+mUbT56HGzOxAtby35SHljooA45Ktvv3nK21WVT4ns23m9ap8g/ZTiMhIeif0
qOkv3Lbs7D6JxHnmSZanhfUGoVgqDzPkyP2K5I1GxW8Eei7eS+kFBJrrtsyaB4XN
Jya/ByXUGkGbw0Tz7KftEc6+ImKCjppv0/MUXr3LW2fBzAU59upjlQbefWWynsto
g4CaNfkPP3b86Hn7Uc2a1zNv3Fu0/Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:10:58 2025 by rpki-client