Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/74fb0483-825c-3d97-92af-2daf30dad65f.roa
File: 74fb0483-825c-3d97-92af-2daf30dad65f.roa (raw, json)
Hash identifier: Ai12D/4ZudssN1nrpthX6BXDm1SnhNBqx51/iUnzqGw=
Subject key identifier: 1F:16:D7:7B:20:65:29:F4:61:C5:52:12:D9:AE:67:B4:BC:C8:19:D4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF78DE9FFCFF9BB1AA0FBED80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/74fb0483-825c-3d97-92af-2daf30dad65f.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.144.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f7:8d:e9:ff:cf:f9:bb:1a:a0:fb:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=907e23a1-a837-42b2-932b-4298e4d92aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:cd:9a:25:1b:c5:f3:a1:5b:72:e6:69:1a:
d9:53:8b:4c:25:36:44:4d:cc:da:23:f1:b7:12:ba:
9c:d4:ae:27:ac:1a:3d:d2:f5:1a:c4:a9:19:04:d2:
27:3d:ac:67:52:44:b7:da:62:20:4d:59:e8:ff:e3:
27:ec:a9:63:0a:38:db:c9:2a:1e:ce:df:6e:05:07:
8a:e9:2b:24:dc:c7:44:37:81:fd:1c:a0:37:01:04:
9b:28:cb:d5:21:53:61:04:bd:1d:3b:5a:65:87:05:
31:d3:2a:e1:69:b9:c5:41:7e:86:2b:6c:f7:3c:4e:
0a:13:d6:8e:ab:57:5e:2a:0c:50:86:6a:8a:e0:62:
ed:e3:4f:a3:0b:58:26:5b:a6:86:16:92:62:16:b7:
22:ed:34:74:bb:3f:a5:b8:72:bc:8f:33:8d:77:ad:
de:08:7c:ed:2f:ee:8e:11:b9:ce:19:65:7b:11:64:
8c:9c:e0:0d:f5:3f:aa:e3:df:27:51:1e:96:c2:97:
8e:1c:65:2e:c0:f0:56:15:ca:ab:c9:6c:fd:e4:4e:
ae:3d:5c:96:f5:a9:25:66:22:43:95:11:31:14:15:
3e:a9:c9:da:2d:40:31:a5:5b:8f:e7:10:3f:c1:b2:
b8:b4:9e:27:58:eb:4a:e0:55:0b:1e:01:33:00:ec:
5b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:16:D7:7B:20:65:29:F4:61:C5:52:12:D9:AE:67:B4:BC:C8:19:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/74fb0483-825c-3d97-92af-2daf30dad65f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.144.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:0a:0f:05:94:c8:0f:4d:fd:97:d1:5f:d3:cf:80:84:25:bb:
0d:3d:7f:9c:20:0b:b0:da:00:fa:b7:6b:95:86:4f:3b:ef:87:
9c:56:e4:98:96:c7:b9:1c:03:13:c8:19:83:bf:3a:eb:b8:96:
10:af:a9:68:74:cf:60:67:f1:82:59:f2:d8:15:bc:f7:05:6d:
01:57:2d:15:18:d7:57:d8:da:37:72:4e:90:6a:67:de:93:aa:
0a:4d:bb:19:0c:83:fa:87:cf:35:0c:f5:99:e4:36:ea:20:66:
db:d9:93:e1:90:9c:fc:4b:7e:b2:33:1c:88:70:3d:db:3e:dc:
2b:4a:fb:b2:97:db:67:f3:42:cf:fe:ea:d7:d3:ba:16:98:da:
9a:01:76:4c:22:87:72:e2:4e:8c:54:c8:9f:23:8b:a0:2e:a9:
f6:c5:31:84:15:71:2b:0d:4c:02:bf:d5:06:3e:60:35:8e:43:
34:f6:e8:5d:ab:cf:46:ea:7b:ad:67:79:e3:1d:e4:68:19:83:
3a:a4:30:b8:cf:af:c2:93:de:26:53:a5:b8:24:5e:0c:2c:d0:
65:d6:37:4e:d4:9d:e3:e5:c9:8d:47:90:94:25:65:7a:ca:d6:
17:a4:ff:23:18:74:5c:c6:d1:a3:f5:4c:ed:68:03:6b:bc:50:
9c:a1:cd:cc
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/3jen/z/m7GqD77YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTExOTEyMDAwMFoXDTIyMTIyNTA1MDAwMFowLzEtMCsGA1UEAxMk
OTA3ZTIzYTEtYTgzNy00MmIyLTkzMmItNDI5OGU0ZDkyYWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW/NmiUbxfOhW3LmaRrZU4tMJTZETczaI/G3
Erqc1K4nrBo90vUaxKkZBNInPaxnUkS32mIgTVno/+Mn7KljCjjbySoezt9uBQeK
6Ssk3MdEN4H9HKA3AQSbKMvVIVNhBL0dO1plhwUx0yrhabnFQX6GK2z3PE4KE9aO
q1deKgxQhmqK4GLt40+jC1gmW6aGFpJiFrci7TR0uz+luHK8jzONd63eCHztL+6O
EbnOGWV7EWSMnOAN9T+q498nUR6WwpeOHGUuwPBWFcqryWz95E6uPVyW9aklZiJD
lRExFBU+qcnaLUAxpVuP5xA/wbK4tJ4nWOtK4FULHgEzAOxb8QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFB8W13sgZSn0YcVSEtmuZ7S8yBnUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNzRmYjA0ODMtODI1Yy0z
ZDk3LTkyYWYtMmRhZjMwZGFkNjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEpAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMwoPBZTID039l9Ff08+AhCW7DT1/nCALsNoA+rdrlYZPO++HnFbkmJbH
uRwDE8gZg78667iWEK+paHTPYGfxglny2BW89wVtAVctFRjXV9jaN3JOkGpn3pOq
Ck27GQyD+ofPNQz1meQ26iBm29mT4ZCc/Et+sjMciHA92z7cK0r7spfbZ/NCz/7q
19O6FpjamgF2TCKHcuJOjFTInyOLoC6p9sUxhBVxKw1MAr/VBj5gNY5DNPboXavP
Rup7rWd54x3kaBmDOqQwuM+vwpPeJlOluCReDCzQZdY3TtSd4+XJjUeQlCVlesrW
F6T/Ixh0XMbRo/VM7WgDa7xQnKHNzA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:28 2025 by rpki-client