Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7552da65-a7c1-3afc-91fe-3f363e594e05.roa
File: 7552da65-a7c1-3afc-91fe-3f363e594e05.roa (raw, json)
Hash identifier: TAyrY5GnpkqQ1bdYJDkDujjjC2qs9Sz8o/hQIp6BLHo=
Subject key identifier: 4E:4D:C7:03:BC:BF:31:51:9F:70:AD:CE:76:6E:55:5F:3B:4B:E2:D0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E1D38AB2B1A18968284FCD600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7552da65-a7c1-3afc-91fe-3f363e594e05.roa
Signing time: Thu 02 Jun 2022 12:00:00 +0000
ROA not before: Thu 02 Jun 2022 12:00:00 +0000
ROA not after: Fri 08 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.176.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1d:38:ab:2b:1a:18:96:82:84:fc:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 2 12:00:00 2022 GMT
Not After : Jul 8 04:00:00 2022 GMT
Subject: CN=ceaa9fdb-3e0c-4630-9ca3-31f07262cba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:15:f5:21:34:3f:43:41:45:2b:03:b9:db:49:
0a:a0:55:9c:b9:6b:5c:76:87:ad:eb:0b:c6:e6:c4:
55:58:81:95:4b:1a:f8:84:55:4a:f4:d1:00:71:21:
f6:35:99:40:f2:b4:7b:72:81:c4:09:94:97:b4:e6:
ce:dc:88:40:77:46:c8:05:50:c5:07:e7:92:77:ed:
67:e7:87:f6:59:2e:b8:ba:92:c2:04:b0:82:5c:9a:
11:43:ed:4a:9f:20:7d:0e:e4:f9:bf:fa:f6:1d:94:
ab:8f:b6:07:11:3f:2c:47:8a:df:76:1a:9b:79:a8:
dc:28:74:8e:86:5d:03:43:c1:07:d4:0b:da:da:5c:
99:4d:6a:3e:3f:7c:5a:54:eb:c0:fa:bb:b7:72:3f:
e9:5a:50:93:56:52:5e:32:1b:21:d0:c7:2d:ec:bc:
26:86:b6:ed:f9:de:a6:dc:50:63:88:5b:2e:06:0a:
b7:cd:fe:08:af:63:48:8b:f2:81:65:e4:dd:db:48:
87:26:df:33:51:a5:02:9f:71:41:79:5a:6d:f5:12:
3e:b8:bd:29:6e:a8:88:a3:03:6c:61:47:67:01:45:
5d:9f:7f:22:22:cf:b3:c6:a1:68:d1:65:bf:c5:27:
7f:25:f3:a9:90:59:5a:ad:18:7c:e7:6d:cd:59:eb:
0b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4D:C7:03:BC:BF:31:51:9F:70:AD:CE:76:6E:55:5F:3B:4B:E2:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7552da65-a7c1-3afc-91fe-3f363e594e05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.176.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:2d:a7:d5:77:5f:0c:cd:7e:4c:60:25:b5:56:6e:3e:b0:5c:
4f:6b:bb:d9:f3:3b:1f:1d:2b:be:3a:db:07:e6:84:25:a2:10:
24:32:3c:ef:19:35:b7:8e:41:fb:63:07:27:25:f0:9e:74:db:
c1:85:3d:3b:7c:b1:85:64:93:e3:b0:57:01:01:ea:83:81:92:
06:0d:27:dc:df:8c:51:9d:cf:c4:2a:bd:ef:ee:fb:f2:81:53:
aa:6f:84:4d:3c:b2:48:fa:4d:fb:27:64:9c:80:19:4e:35:49:
5b:47:9c:79:81:7a:3d:df:2b:8f:68:0f:fc:78:c5:d1:48:f6:
5d:cc:93:e7:30:a1:b9:8a:04:bf:65:df:ea:43:9d:ee:bb:1f:
00:57:71:41:2d:3a:f0:3e:44:46:b9:d6:69:17:69:d6:7f:35:
82:78:50:34:8a:27:e4:1e:1e:81:de:55:78:12:f7:bc:d6:7c:
f9:1e:6a:70:b4:ab:be:35:36:0c:14:7f:02:55:38:62:f1:e3:
0e:1f:0f:6f:80:64:a9:2a:d9:98:f0:13:d9:7d:e7:e5:77:13:
08:d4:c4:b6:08:ee:e8:91:5f:20:0e:3b:74:86:13:e4:43:41:
0c:e1:11:4e:24:2c:66:cd:e2:4f:b7:78:d2:61:44:c4:0b:50:
06:91:6f:e8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4dOKsrGhiWgoT81gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYwMjEyMDAwMFoXDTIyMDcwODA0MDAwMFowLzEtMCsGA1UEAxMk
Y2VhYTlmZGItM2UwYy00NjMwLTljYTMtMzFmMDcyNjJjYmE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohX1ITQ/Q0FFKwO520kKoFWcuWtcdoet6wvG
5sRVWIGVSxr4hFVK9NEAcSH2NZlA8rR7coHECZSXtObO3IhAd0bIBVDFB+eSd+1n
54f2WS64upLCBLCCXJoRQ+1KnyB9DuT5v/r2HZSrj7YHET8sR4rfdhqbeajcKHSO
hl0DQ8EH1Ava2lyZTWo+P3xaVOvA+ru3cj/pWlCTVlJeMhsh0Mct7Lwmhrbt+d6m
3FBjiFsuBgq3zf4Ir2NIi/KBZeTd20iHJt8zUaUCn3FBeVpt9RI+uL0pbqiIowNs
YUdnAUVdn38iIs+zxqFo0WW/xSd/JfOpkFlarRh8523NWesLbwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFE5NxwO8vzFRn3CtznZuVV87S+LQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNzU1MmRhNjUtYTdjMS0z
YWZjLTkxZmUtM2YzNjNlNTk0ZTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBErAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAHi2n1XdfDM1+TGAltVZuPrBcT2u72fM7Hx0rvjrbB+aEJaIQJDI87xk1
t45B+2MHJyXwnnTbwYU9O3yxhWST47BXAQHqg4GSBg0n3N+MUZ3PxCq97+778oFT
qm+ETTyySPpN+ydknIAZTjVJW0eceYF6Pd8rj2gP/HjF0Uj2XcyT5zChuYoEv2Xf
6kOd7rsfAFdxQS068D5ERrnWaRdp1n81gnhQNIon5B4egd5VeBL3vNZ8+R5qcLSr
vjU2DBR/AlU4YvHjDh8Pb4BkqSrZmPAT2X3n5XcTCNTEtgju6JFfIA47dIYT5ENB
DOERTiQsZs3iT7d40mFExAtQBpFv6A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:48:26 2025 by rpki-client