Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/653fa28c-cf75-35b2-a940-d1d8b0a8b1df.roa
File: 653fa28c-cf75-35b2-a940-d1d8b0a8b1df.roa (raw, json)
Hash identifier: iG2CrlFmeg3tJKbMY9DdN9kfyo3Dp0WHRjNbOR59Qog=
Subject key identifier: 2D:8A:12:F1:58:E2:D6:D5:FC:97:45:DE:E4:CD:B0:30:4C:CB:78:E5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F59FEC3F1F00B612921928200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/653fa28c-cf75-35b2-a940-d1d8b0a8b1df.roa
Signing time: Fri 23 Sep 2022 12:00:00 +0000
ROA not before: Fri 23 Sep 2022 12:00:00 +0000
ROA not after: Sat 29 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:59:fe:c3:f1:f0:0b:61:29:21:92:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 23 12:00:00 2022 GMT
Not After : Oct 29 04:00:00 2022 GMT
Subject: CN=2defe1f2-0ad2-4910-aa0a-2f4604b772cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:17:cd:20:a6:b2:48:0f:0f:f3:bf:6b:b6:2b:
31:51:5b:e1:59:6e:c5:e0:45:e0:e4:bd:fa:ec:de:
40:f6:80:28:86:80:a2:0e:09:3a:8f:de:dd:07:55:
a8:14:3c:4f:3b:f2:f9:44:3e:35:ab:95:65:6b:50:
0d:ed:7d:3e:c5:2f:60:d3:be:6e:47:9a:2f:5e:21:
65:42:9c:f7:a7:14:71:11:24:11:13:e1:2e:0e:9e:
0c:1a:5e:08:4f:f0:3b:f3:f4:d8:ba:2b:aa:6d:a0:
b7:e5:64:e5:14:de:d0:fa:83:d7:04:7a:34:97:2d:
6e:5b:7a:d3:34:b3:34:3b:3c:de:70:fe:3b:3c:31:
08:49:ad:9b:b0:27:94:c6:f5:9d:53:cb:d3:8f:7a:
67:c6:f9:77:2d:a3:1a:95:93:ea:f9:44:86:9d:f9:
8c:1d:f0:d8:8c:e3:94:10:db:31:69:69:33:09:ca:
c9:1f:23:24:91:34:d3:af:b8:28:9f:be:4a:9d:5a:
8f:c2:12:19:56:28:61:bc:16:15:9a:40:ea:c6:3c:
06:8a:59:50:7a:1e:42:5c:97:be:2f:b1:62:58:d9:
e7:80:b9:48:81:d4:43:ab:59:e3:2e:47:24:01:33:
39:2f:f3:ee:e0:32:e4:91:16:1b:2c:32:cf:35:e5:
97:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8A:12:F1:58:E2:D6:D5:FC:97:45:DE:E4:CD:B0:30:4C:CB:78:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/653fa28c-cf75-35b2-a940-d1d8b0a8b1df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:ef:fd:7e:5b:bd:92:d9:c9:4b:cf:99:25:a3:d2:3a:d6:9a:
15:73:76:d0:57:da:84:e3:51:d9:f7:64:d6:15:99:5d:d6:4f:
29:d7:16:fd:5b:5f:a2:2b:07:6a:05:68:bf:6a:63:65:9f:d6:
a2:0b:ef:3a:31:2c:08:4c:75:11:ae:4b:06:8b:49:b8:b2:9c:
d2:21:42:f3:3b:4c:eb:35:af:d8:bd:34:63:dc:2b:8c:0d:e7:
fd:b0:b1:d1:9c:30:c8:ef:93:e0:2a:2b:89:5f:5f:e2:4e:b8:
39:9a:1f:8f:dd:26:a4:60:3a:8d:d3:e3:b1:af:5a:14:0a:f8:
af:0d:c3:91:18:2f:00:d5:89:6b:0d:76:0b:1c:27:be:c6:e0:
b0:fc:99:16:14:c1:10:fc:e5:4a:b3:42:b2:75:70:00:a3:6b:
c5:a9:44:a6:03:6b:1e:72:d8:e1:d0:2e:7a:ef:4e:24:65:ad:
b1:9b:14:ad:42:44:c8:65:42:d6:04:02:1c:6c:aa:ae:50:ca:
ca:b9:79:13:7a:76:b0:16:fe:8b:c5:f2:4b:8d:ac:3e:d4:d2:
12:e0:06:5c:3d:62:70:ff:a2:df:62:7a:d0:fa:5d:75:b5:10:
e2:9b:ae:84:92:b4:66:e6:c3:22:e5:b1:72:2a:62:48:84:fd:
09:c7:bd:f2
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9Z/sPx8AthKSGSggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkyMzEyMDAwMFoXDTIyMTAyOTA0MDAwMFowLzEtMCsGA1UEAxMk
MmRlZmUxZjItMGFkMi00OTEwLWFhMGEtMmY0NjA0Yjc3MmNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhfNIKaySA8P879rtisxUVvhWW7F4EXg5L36
7N5A9oAohoCiDgk6j97dB1WoFDxPO/L5RD41q5Vla1AN7X0+xS9g075uR5ovXiFl
Qpz3pxRxESQRE+EuDp4MGl4IT/A78/TYuiuqbaC35WTlFN7Q+oPXBHo0ly1uW3rT
NLM0OzzecP47PDEISa2bsCeUxvWdU8vTj3pnxvl3LaMalZPq+USGnfmMHfDYjOOU
ENsxaWkzCcrJHyMkkTTTr7gon75KnVqPwhIZVihhvBYVmkDqxjwGillQeh5CXJe+
L7FiWNnngLlIgdRDq1njLkckATM5L/Pu4DLkkRYbLDLPNeWXrwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFC2KEvFY4tbV/JdF3uTNsDBMy3jlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNjUzZmEyOGMtY2Y3NS0z
NWIyLWE5NDAtZDFkOGIwYThiMWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEpwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAG+/9flu9ktnJS8+ZJaPSOtaaFXN20FfahONR2fdk1hWZXdZPKdcW/Vtf
oisHagVov2pjZZ/WogvvOjEsCEx1Ea5LBotJuLKc0iFC8ztM6zWv2L00Y9wrjA3n
/bCx0ZwwyO+T4CoriV9f4k64OZofj90mpGA6jdPjsa9aFAr4rw3DkRgvANWJaw12
CxwnvsbgsPyZFhTBEPzlSrNCsnVwAKNrxalEpgNrHnLY4dAueu9OJGWtsZsUrUJE
yGVC1gQCHGyqrlDKyrl5E3p2sBb+i8XyS42sPtTSEuAGXD1icP+i32J60PpddbUQ
4puuhJK0ZubDIuWxcipiSIT9Cce98g==
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:11:12 2025 by rpki-client