Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/61ea91ea-7d4f-320b-adab-0d0fe8eef5cb.roa
File: 61ea91ea-7d4f-320b-adab-0d0fe8eef5cb.roa (raw, json)
Hash identifier: jgvsjs9lAwUi8zlvwNYzvcr4Kxwj/EVWHiRNvqucyho=
Subject key identifier: FF:3D:B4:6B:8D:7D:EF:78:BE:BD:8B:57:47:97:59:ED:B6:7F:96:BD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D32B07A75219F668A1CC83A60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/61ea91ea-7d4f-320b-adab-0d0fe8eef5cb.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.253.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:b0:7a:75:21:9f:66:8a:1c:c8:3a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=83ce7ba7-7995-4696-ab58-1353529ecac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:28:c6:8f:e7:08:e4:97:69:71:cb:08:9a:
a5:24:14:7c:cf:4f:f6:e0:e5:ae:15:65:77:0e:dd:
26:8e:40:3d:c4:52:a8:12:c4:c0:2a:0c:a2:52:b1:
9c:6b:83:e2:26:78:bc:d8:56:a9:85:17:74:cb:7a:
0b:36:65:9e:cc:4f:8c:69:f0:74:52:ff:b5:25:d5:
9a:04:41:c0:f4:72:cf:bb:36:ce:54:08:ee:3f:00:
e6:cc:5a:fc:09:59:9c:fe:38:3f:9c:cd:a9:d6:8e:
5b:8c:49:85:c9:33:7a:f5:f7:bd:ee:7e:95:a9:61:
a6:66:f0:ba:3f:fe:19:4b:dd:92:bf:9e:ec:4d:e8:
65:35:09:80:1c:52:44:99:1f:00:de:04:3d:89:b8:
b6:7c:1f:50:7e:85:16:4a:98:00:81:04:43:04:a2:
0e:06:07:97:30:c9:a5:c9:a1:51:64:9d:1d:e2:49:
fc:5a:ce:8e:b0:ec:3d:23:20:d1:20:23:25:d2:8e:
80:f9:2b:a5:07:4d:f9:c2:31:50:2b:9a:21:a0:72:
f5:fd:e7:1c:62:99:6a:f3:49:cc:93:22:80:17:3a:
c3:cc:39:29:87:aa:32:fe:06:d4:2b:e9:d7:8b:16:
61:db:fc:a8:80:23:49:df:01:d2:70:d6:2c:8b:86:
1a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3D:B4:6B:8D:7D:EF:78:BE:BD:8B:57:47:97:59:ED:B6:7F:96:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/61ea91ea-7d4f-320b-adab-0d0fe8eef5cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.253.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:a7:ca:7b:52:e2:f1:00:5a:c4:69:fe:77:cb:29:25:92:1e:
d4:21:cd:fe:b2:86:ea:1c:14:af:6f:6f:c7:ac:e0:bb:5e:6c:
9f:ed:95:c8:8e:d4:47:7e:1f:2d:dc:29:7e:f8:2e:05:0f:34:
db:bc:11:01:4c:e9:24:61:17:ce:a1:44:b0:d5:16:6f:c4:a6:
0f:be:4b:56:13:41:94:5b:e2:5e:46:88:46:59:dc:27:38:9d:
f4:6d:28:67:7c:42:27:73:13:44:77:cc:12:00:8f:4f:98:8a:
9d:9d:3b:fc:55:72:d5:85:21:e6:70:45:c6:44:8f:8d:06:fb:
31:9f:78:b3:c5:13:20:16:1c:01:81:09:0b:32:0e:ac:c3:3a:
c2:4b:a6:d6:c3:79:8d:31:db:d0:49:73:06:9f:42:0c:95:50:
e8:6e:83:44:8f:50:e8:45:e6:5c:84:2e:bb:ba:94:4c:0d:2f:
35:41:a8:2c:f7:0d:ed:21:86:5f:81:de:0d:4f:44:89:10:41:
a1:20:c1:9a:a0:5a:06:9c:44:93:0d:17:f8:b0:5d:08:f3:ef:
84:a5:92:16:54:7d:92:bf:97:e8:ee:ee:07:85:f7:7c:a7:fd:
fb:ce:bb:d1:37:b9:dd:24:99:7d:2e:6e:f6:d9:8f:59:46:25:
6b:2a:8e:7e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0ysHp1IZ9mihzIOmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
ODNjZTdiYTctNzk5NS00Njk2LWFiNTgtMTM1MzUyOWVjYWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsUoxo/nCOSXaXHLCJqlJBR8z0/24OWuFWV3
Dt0mjkA9xFKoEsTAKgyiUrGca4PiJni82FaphRd0y3oLNmWezE+MafB0Uv+1JdWa
BEHA9HLPuzbOVAjuPwDmzFr8CVmc/jg/nM2p1o5bjEmFyTN69fe97n6VqWGmZvC6
P/4ZS92Sv57sTehlNQmAHFJEmR8A3gQ9ibi2fB9QfoUWSpgAgQRDBKIOBgeXMMml
yaFRZJ0d4kn8Ws6OsOw9IyDRICMl0o6A+SulB035wjFQK5ohoHL1/eccYplq80nM
kyKAFzrDzDkph6oy/gbUK+nXixZh2/yogCNJ3wHScNYsi4YaZwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFP89tGuNfe94vr2LV0eXWe22f5a9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNjFlYTkxZWEtN2Q0Zi0z
MjBiLWFkYWItMGQwZmU4ZWVmNWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEv0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZqfKe1Li8QBaxGn+d8spJZIe1CHN/rKG6hwUr29vx6zgu15sn+2VyI7U
R34fLdwpfvguBQ8027wRAUzpJGEXzqFEsNUWb8SmD75LVhNBlFviXkaIRlncJzid
9G0oZ3xCJ3MTRHfMEgCPT5iKnZ07/FVy1YUh5nBFxkSPjQb7MZ94s8UTIBYcAYEJ
CzIOrMM6wkum1sN5jTHb0ElzBp9CDJVQ6G6DRI9Q6EXmXIQuu7qUTA0vNUGoLPcN
7SGGX4HeDU9EiRBBoSDBmqBaBpxEkw0X+LBdCPPvhKWSFlR9kr+X6O7uB4X3fKf9
+8670Te53SSZfS5u9tmPWUYlayqOfg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:29:02 2025 by rpki-client