Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/76bcd421-f60b-36cd-861c-df651e553fa3.roa
File: 76bcd421-f60b-36cd-861c-df651e553fa3.roa (raw, json)
Hash identifier: 4A9tcaB90dcLWrdZGtvC3NQzo6NQnQyEcW63NuGednk=
Subject key identifier: 96:F3:33:36:6F:62:62:C0:2A:D6:15:65:FF:48:14:57:32:39:60:FA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E706BBB9B58BE0166526FA600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/76bcd421-f60b-36cd-861c-df651e553fa3.roa
Signing time: Sat 02 Jul 2022 12:00:00 +0000
ROA not before: Sat 02 Jul 2022 12:00:00 +0000
ROA not after: Sun 07 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.90.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:70:6b:bb:9b:58:be:01:66:52:6f:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 2 12:00:00 2022 GMT
Not After : Aug 7 04:00:00 2022 GMT
Subject: CN=794fb1b8-7916-443c-9400-8c198b7f74a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7f:d5:22:b3:6d:c7:07:62:c6:d8:fc:1b:6e:
03:38:a6:25:18:cb:c8:71:ab:48:89:2b:94:b9:f8:
1e:93:2d:79:d4:d5:ed:a7:f0:67:11:1d:07:4b:d1:
17:59:3b:9b:71:b5:3b:5c:f1:68:4d:ee:4f:57:7b:
24:19:b1:3d:1a:c1:cc:55:0c:c7:95:e4:19:03:89:
8f:d3:0f:f4:33:b1:4b:85:f2:ff:47:6e:00:ec:e9:
38:12:d5:3f:eb:91:e0:3e:56:fe:1a:b5:8b:09:cc:
22:96:95:a4:af:2d:0b:5f:17:79:4a:d7:6d:9d:33:
3d:7a:16:50:5a:bb:0e:ff:89:d9:5a:ce:cd:a9:f9:
e6:e6:e9:07:f8:72:11:4d:17:79:d8:c0:5c:ff:28:
a7:4e:40:26:40:19:90:f4:71:c6:2e:7d:e2:25:8e:
19:cd:d9:c9:dc:97:f7:ab:9b:5f:ac:7c:b4:21:83:
65:0e:91:7b:ef:bd:fc:a9:46:ca:97:ab:84:7f:ce:
e6:a3:c7:ed:d3:7d:90:e9:09:29:6a:67:1e:00:50:
6f:70:5c:60:e5:d5:0f:a4:fa:ce:d3:29:50:56:82:
52:b8:01:6a:60:d1:e7:57:32:97:54:38:79:ea:5b:
a4:b4:85:67:0d:60:31:ac:a3:54:10:8e:7d:ed:f1:
3d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F3:33:36:6F:62:62:C0:2A:D6:15:65:FF:48:14:57:32:39:60:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/76bcd421-f60b-36cd-861c-df651e553fa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.90.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:4d:1e:33:26:ea:0e:ea:e5:2e:a1:01:cd:c6:20:ef:86:fe:
80:45:dd:50:41:91:20:2a:4d:78:c4:5d:46:d6:8e:03:57:ea:
52:23:d6:4b:69:68:7a:37:74:81:43:27:37:c4:d5:32:22:ab:
73:e5:e1:a0:04:f1:99:93:eb:e1:e2:a6:46:38:e9:df:85:42:
b1:61:c1:ac:44:58:60:f9:7b:bd:bc:39:0a:a1:12:3a:7f:e0:
2b:f8:a4:97:24:0c:e7:36:4b:83:21:44:b2:97:16:6e:d8:77:
16:bf:2a:0a:59:1a:3e:c4:2d:38:78:92:5f:12:2b:19:80:33:
33:22:9b:e5:31:eb:b7:69:b2:19:7e:a9:15:b8:f6:8e:79:4f:
89:53:34:8a:3e:88:21:ca:a3:64:b1:f8:2d:40:02:5c:e4:64:
f1:03:ed:7a:21:58:54:07:9e:25:a9:c2:31:37:cc:4d:8b:16:
65:e5:ed:cc:fe:c6:91:f2:e8:3a:a8:ad:5c:53:9b:c0:ac:82:
02:1d:f6:f9:2a:e6:24:cc:7b:99:3c:be:49:18:f9:d2:10:ad:
e5:a0:e4:20:0f:a9:a8:72:9b:01:a9:c8:6b:1e:03:d5:4a:00:
34:8c:73:5a:16:bd:8e:c3:a4:87:c6:23:14:68:e2:96:08:1c:
fc:52:4e:81
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5wa7ubWL4BZlJvpgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcwMjEyMDAwMFoXDTIyMDgwNzA0MDAwMFowLzEtMCsGA1UEAxMk
Nzk0ZmIxYjgtNzkxNi00NDNjLTk0MDAtOGMxOThiN2Y3NGE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH/VIrNtxwdixtj8G24DOKYlGMvIcatIiSuU
ufgeky151NXtp/BnER0HS9EXWTubcbU7XPFoTe5PV3skGbE9GsHMVQzHleQZA4mP
0w/0M7FLhfL/R24A7Ok4EtU/65HgPlb+GrWLCcwilpWkry0LXxd5StdtnTM9ehZQ
WrsO/4nZWs7Nqfnm5ukH+HIRTRd52MBc/yinTkAmQBmQ9HHGLn3iJY4ZzdnJ3Jf3
q5tfrHy0IYNlDpF77738qUbKl6uEf87mo8ft032Q6QkpamceAFBvcFxg5dUPpPrO
0ylQVoJSuAFqYNHnVzKXVDh56luktIVnDWAxrKNUEI597fE9WQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJbzMzZvYmLAKtYVZf9IFFcyOWD6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNzZiY2Q0MjEtZjYwYi0z
NmNkLTg2MWMtZGY2NTFlNTUzZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAElowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEASU0eMybqDurlLqEBzcYg74b+gEXdUEGRICpNeMRdRtaOA1fqUiPWS2lo
ejd0gUMnN8TVMiKrc+XhoATxmZPr4eKmRjjp34VCsWHBrERYYPl7vbw5CqESOn/g
K/iklyQM5zZLgyFEspcWbth3Fr8qClkaPsQtOHiSXxIrGYAzMyKb5THrt2myGX6p
Fbj2jnlPiVM0ij6IIcqjZLH4LUACXORk8QPteiFYVAeeJanCMTfMTYsWZeXtzP7G
kfLoOqitXFObwKyCAh32+SrmJMx7mTy+SRj50hCt5aDkIA+pqHKbAanIax4D1UoA
NIxzWha9jsOkh8YjFGjilggc/FJOgQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 06:13:23 2025 by rpki-client