Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/68d64b73-65c7-30c7-baaa-115511001b35.roa
File: 68d64b73-65c7-30c7-baaa-115511001b35.roa (raw, json)
Hash identifier: r7eI5m3bPRno/v06RNT1aaethG5/B6YG2C0Ur7CrGEc=
Subject key identifier: DE:38:AC:58:2A:D8:47:53:F7:F7:C5:07:7D:A9:7C:89:7A:82:82:55
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6EE2FA0AFA2427C3463F1B00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/68d64b73-65c7-30c7-baaa-115511001b35.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.113.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6e:e2:fa:0a:fa:24:27:c3:46:3f:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=fd234d6f-2310-4fb1-9f2d-11c84ec98673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:97:8c:31:9c:0f:e7:95:c8:e4:42:96:7f:a9:
a6:b0:63:83:38:7f:1c:04:38:1f:4b:4b:e7:cd:02:
de:4a:87:ed:f4:0b:b2:11:6f:39:41:17:a8:15:46:
5d:74:2b:9a:7e:ce:73:e2:e1:f1:de:96:07:00:c7:
e0:56:ca:a2:6d:71:1c:61:65:b5:b2:91:7f:68:6b:
ee:ae:ed:07:39:fb:6a:54:85:06:31:84:c2:dd:ac:
8c:f3:5c:b0:cd:50:60:6e:07:bf:43:db:e2:99:81:
b5:16:c9:53:5d:73:cf:71:eb:a1:cc:d6:fd:9c:14:
2a:26:35:78:86:2e:95:0d:bc:f1:be:ac:a2:1b:2d:
a6:48:60:19:90:3c:a3:49:c6:6a:c7:54:49:7a:61:
66:41:22:79:fe:8f:3d:6e:ba:79:18:fc:88:37:3b:
2d:fb:76:94:72:c4:00:97:23:f4:04:25:a4:59:ed:
c1:07:e2:ad:72:93:d3:c7:e0:ac:5b:db:1b:50:de:
37:d3:36:71:2e:85:32:0f:64:2a:a4:47:76:9b:8b:
84:41:27:e4:6e:56:40:0e:a0:c6:44:34:6c:c3:fc:
fb:03:b0:3c:59:8a:bc:e6:80:32:65:1e:06:31:24:
03:e6:fa:a5:b8:28:d2:fc:8a:92:c8:2e:61:3f:35:
7c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:38:AC:58:2A:D8:47:53:F7:F7:C5:07:7D:A9:7C:89:7A:82:82:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/68d64b73-65c7-30c7-baaa-115511001b35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.113.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:1d:41:f9:3b:3e:8a:61:bc:2b:56:c7:17:45:9e:75:18:e9:
7d:28:4e:a6:e3:ff:50:4f:60:02:42:49:ac:2a:c9:08:dd:a7:
49:a7:a0:29:9f:54:93:c3:9b:9c:85:39:14:d4:e5:24:e0:37:
69:b9:e4:5a:dc:87:d1:0d:11:aa:12:7d:fc:24:8b:f4:33:62:
98:cb:94:8e:a3:8b:a1:2e:24:95:fc:3b:6c:9d:99:b0:36:fc:
bf:5b:11:f6:31:24:a0:27:77:43:98:fa:f8:bd:65:57:c0:ba:
7d:4a:32:46:28:0f:cc:56:de:4b:fa:3b:22:a4:51:71:c9:39:
92:f7:38:86:99:c9:3d:13:65:65:58:4f:b9:12:39:e3:41:0d:
cb:89:7a:fb:78:fd:5b:d0:0a:ae:3e:47:33:97:32:78:81:d3:
25:4d:31:0e:50:47:6f:92:98:cb:ec:df:7b:16:e6:8f:b3:99:
6e:7e:e1:e9:a9:db:4f:fc:c7:26:e5:8e:0c:7b:2e:35:3e:1f:
0a:39:8d:5e:7a:df:24:97:b2:b0:40:fe:3f:ca:fd:84:ee:26:
2c:43:75:96:c0:3e:bb:62:dc:14:72:54:68:21:4d:3d:26:ed:
a6:b1:0f:20:41:c9:8f:47:22:ff:37:0f:fa:ba:e5:df:7b:48:
8a:5a:95:78
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDxu4voK+iQnw0Y/GwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIxMTIzMTA1MDAwMFoXDTIyMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
ZmQyMzRkNmYtMjMxMC00ZmIxLTlmMmQtMTFjODRlYzk4NjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5eMMZwP55XI5EKWf6mmsGODOH8cBDgfS0vn
zQLeSoft9AuyEW85QReoFUZddCuafs5z4uHx3pYHAMfgVsqibXEcYWW1spF/aGvu
ru0HOftqVIUGMYTC3ayM81ywzVBgbge/Q9vimYG1FslTXXPPceuhzNb9nBQqJjV4
hi6VDbzxvqyiGy2mSGAZkDyjScZqx1RJemFmQSJ5/o89brp5GPyINzst+3aUcsQA
lyP0BCWkWe3BB+KtcpPTx+CsW9sbUN430zZxLoUyD2QqpEd2m4uEQSfkblZADqDG
RDRsw/z7A7A8WYq85oAyZR4GMSQD5vqluCjS/IqSyC5hPzV8dwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFN44rFgq2EdT9/fFB32pfIl6goJVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNjhkNjRiNzMtNjVjNy0z
MGM3LWJhYWEtMTE1NTExMDAxYjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEnEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAnh1B+Ts+imG8K1bHF0WedRjpfShOpuP/UE9gAkJJrCrJCN2nSaegKZ9U
k8ObnIU5FNTlJOA3abnkWtyH0Q0RqhJ9/CSL9DNimMuUjqOLoS4klfw7bJ2ZsDb8
v1sR9jEkoCd3Q5j6+L1lV8C6fUoyRigPzFbeS/o7IqRRcck5kvc4hpnJPRNlZVhP
uRI540ENy4l6+3j9W9AKrj5HM5cyeIHTJU0xDlBHb5KYy+zfexbmj7OZbn7h6anb
T/zHJuWODHsuNT4fCjmNXnrfJJeysED+P8r9hO4mLEN1lsA+u2LcFHJUaCFNPSbt
prEPIEHJj0ci/zcP+rrl33tIilqVeA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 00:44:19 2025 by rpki-client