Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6cc84aa5-fa3d-3ae8-94d2-2059d00ab18a.roa
File: 6cc84aa5-fa3d-3ae8-94d2-2059d00ab18a.roa (raw, json)
Hash identifier: bccooFBE2Q4aDUHEPNdObI40mA1z4OV6YdTq9AFfA/k=
Subject key identifier: 6F:48:7C:A9:36:E5:56:7E:6B:B3:BC:86:AA:8D:CA:79:03:02:F4:32
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E975BF44B60ECC47D48B7AA40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6cc84aa5-fa3d-3ae8-94d2-2059d00ab18a.roa
Signing time: Sat 16 Jul 2022 12:00:00 +0000
ROA not before: Sat 16 Jul 2022 12:00:00 +0000
ROA not after: Sun 21 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.102.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:97:5b:f4:4b:60:ec:c4:7d:48:b7:aa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 16 12:00:00 2022 GMT
Not After : Aug 21 04:00:00 2022 GMT
Subject: CN=2c1ff386-56b3-4085-99c4-45c954af1f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8f:cd:25:21:98:34:83:b2:5f:11:67:5f:d2:
ef:f3:0d:a9:7a:e5:c3:be:fe:18:1c:a4:83:84:28:
8e:ba:89:8d:a8:93:d3:ea:b3:c6:1d:e3:11:10:6a:
42:b4:4b:aa:f4:dc:e7:fe:16:19:7c:37:29:0a:1c:
73:f8:d5:0d:34:f6:79:66:41:c6:86:d5:31:be:f5:
98:01:6d:c5:92:43:09:39:3d:5b:1a:42:b1:97:8a:
50:8a:5a:34:cf:3b:3f:dc:40:6d:cd:c9:f0:33:65:
7c:17:ee:ab:2b:ff:97:6a:aa:d6:d9:8e:f6:94:e1:
17:1c:ef:2a:bc:9f:e7:5d:e7:93:25:c3:f2:23:79:
d4:10:4d:a3:6a:79:b6:57:d8:a8:b3:fa:d8:e4:90:
e8:dd:93:31:8e:7f:fd:6a:2b:f2:ef:4e:cf:dc:ee:
41:a1:18:33:c2:9c:6c:39:ad:df:91:b4:3f:64:df:
04:90:c0:86:50:35:a9:8e:80:c0:40:83:94:d1:25:
2d:75:cc:1c:7f:92:29:99:fb:01:01:46:29:23:bd:
3d:3f:08:c8:34:91:28:dc:37:e5:ae:30:32:9e:fc:
36:b6:5e:ec:e9:70:8b:33:94:f6:46:86:5c:79:b2:
13:02:3d:cc:b3:3b:e5:b0:ed:65:8f:0c:5f:be:db:
ba:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:48:7C:A9:36:E5:56:7E:6B:B3:BC:86:AA:8D:CA:79:03:02:F4:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6cc84aa5-fa3d-3ae8-94d2-2059d00ab18a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.102.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:05:27:6e:f5:bd:e2:e4:ea:a3:94:a5:d3:e7:ca:66:21:d5:
eb:76:ef:9c:57:eb:6f:e8:d0:ea:a8:ed:06:d3:09:59:43:9a:
d7:1f:98:28:45:79:31:da:57:e3:27:9b:db:9b:06:cd:f8:8f:
5f:63:73:5f:c5:c8:04:0b:cd:d9:b7:ff:48:b5:a6:37:3e:95:
db:86:8e:ec:74:99:45:32:4b:74:fc:8d:30:12:64:9b:9b:32:
c3:d3:3b:7f:5d:79:6b:9e:8d:b9:c9:cd:f5:78:2d:27:26:56:
ae:8a:56:85:ec:35:87:4a:f6:80:db:0e:66:5c:57:37:7a:bc:
35:f9:45:40:3f:70:7f:79:81:d4:7f:f4:f4:26:81:27:f1:bf:
b5:15:3d:6f:c2:51:55:ce:35:6a:41:b0:a8:ba:d2:c3:16:c1:
3c:aa:58:54:1e:ba:79:65:29:e5:59:d3:05:a3:96:a9:59:fd:
67:f2:09:b0:4f:05:14:bc:52:7d:af:d2:20:2a:0c:be:ba:b8:
ea:bf:6f:25:37:f0:15:38:6b:dd:03:c1:72:30:6f:c4:82:ae:
9f:1e:ec:fd:73:30:60:8e:0a:0d:65:fb:0e:69:a5:20:9e:ad:
86:9e:63:07:b5:2c:01:96:c9:29:d1:1c:b2:26:d7:62:41:af:
ed:8b:eb:3d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6XW/RLYOzEfUi3qkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcxNjEyMDAwMFoXDTIyMDgyMTA0MDAwMFowLzEtMCsGA1UEAxMk
MmMxZmYzODYtNTZiMy00MDg1LTk5YzQtNDVjOTU0YWYxZjM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4/NJSGYNIOyXxFnX9Lv8w2peuXDvv4YHKSD
hCiOuomNqJPT6rPGHeMREGpCtEuq9Nzn/hYZfDcpChxz+NUNNPZ5ZkHGhtUxvvWY
AW3FkkMJOT1bGkKxl4pQilo0zzs/3EBtzcnwM2V8F+6rK/+XaqrW2Y72lOEXHO8q
vJ/nXeeTJcPyI3nUEE2janm2V9ios/rY5JDo3ZMxjn/9aivy707P3O5BoRgzwpxs
Oa3fkbQ/ZN8EkMCGUDWpjoDAQIOU0SUtdcwcf5IpmfsBAUYpI709PwjINJEo3Dfl
rjAynvw2tl7s6XCLM5T2RoZcebITAj3MszvlsO1ljwxfvtu62wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFG9IfKk25VZ+a7O8hqqNynkDAvQyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNmNjODRhYTUtZmEzZC0z
YWU4LTk0ZDItMjA1OWQwMGFiMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEmYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAtQUnbvW94uTqo5Sl0+fKZiHV63bvnFfrb+jQ6qjtBtMJWUOa1x+YKEV5
MdpX4yeb25sGzfiPX2NzX8XIBAvN2bf/SLWmNz6V24aO7HSZRTJLdPyNMBJkm5sy
w9M7f115a56NucnN9XgtJyZWropWhew1h0r2gNsOZlxXN3q8NflFQD9wf3mB1H/0
9CaBJ/G/tRU9b8JRVc41akGwqLrSwxbBPKpYVB66eWUp5VnTBaOWqVn9Z/IJsE8F
FLxSfa/SICoMvrq46r9vJTfwFThr3QPBcjBvxIKunx7s/XMwYI4KDWX7DmmlIJ6t
hp5jB7UsAZbJKdEcsibXYkGv7YvrPQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:01:39 2025 by rpki-client