Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7882baba-df0e-36b9-8828-fd0f3f7da18d.roa
File: 7882baba-df0e-36b9-8828-fd0f3f7da18d.roa (raw, json)
Hash identifier: Bi3jSrjMj7P79hB+iqVDXIQQv5dFRjPZVNa8VDHyz/M=
Subject key identifier: D7:9E:97:7F:E0:19:C3:07:D4:E6:74:A4:83:FC:EA:4A:E0:3D:84:77
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858404383498F0B52EEE2FD9055A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7882baba-df0e-36b9-8828-fd0f3f7da18d.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.153.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:43:83:49:8f:0b:52:ee:e2:fd:90:55:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=81266695-76c1-48c3-b4e2-2276fdc35872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:dd:fe:1e:7a:11:bf:c3:61:db:29:27:cb:
58:a0:22:9b:f9:58:cf:a8:a2:51:2b:c7:3b:21:bd:
6a:ee:ef:1c:39:93:f5:d2:e7:aa:77:70:0c:21:e7:
d4:f1:5a:61:75:c8:dc:ab:08:3e:af:6d:4c:fa:23:
eb:90:a4:3d:42:2d:1f:70:1e:d6:65:1e:12:af:33:
fc:00:c7:c3:9b:b4:c0:84:86:11:58:af:3c:77:d4:
40:87:2b:5d:fc:24:20:83:2e:0d:6b:a4:b9:3e:df:
0f:02:ae:d9:f6:12:56:23:df:f3:ea:15:74:39:0d:
de:e0:90:a4:ba:4f:bf:25:0e:73:e6:9f:7e:77:3c:
98:72:72:f7:37:e8:a1:a0:c6:3f:47:64:73:d4:ce:
2c:65:e6:1f:7b:a4:d9:a2:50:49:60:7c:96:e0:e6:
dd:e6:c7:b5:d9:78:0d:6c:ea:0c:21:f8:42:39:54:
52:2b:83:fe:50:40:de:e8:4f:cd:c1:51:c8:e8:aa:
b7:43:21:91:3c:c6:c0:c9:1e:2c:b5:e5:df:b6:eb:
44:1b:a8:e8:72:03:f5:20:ff:1b:b9:48:be:31:73:
5b:6f:95:78:4a:3f:eb:3f:17:18:60:c3:5e:ee:51:
2e:b7:cd:83:b2:a5:79:77:c5:ed:4d:3c:ac:26:99:
ff:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9E:97:7F:E0:19:C3:07:D4:E6:74:A4:83:FC:EA:4A:E0:3D:84:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7882baba-df0e-36b9-8828-fd0f3f7da18d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.153.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:9e:c8:c9:a8:f8:37:bb:86:6a:42:f4:03:89:dc:77:70:db:
e5:a3:41:03:06:3f:79:29:4c:66:1f:4e:15:47:0c:7e:32:d1:
ff:1d:8a:6c:1d:43:b3:f9:21:a0:11:06:c3:2f:89:99:15:79:
6d:f0:06:28:b3:bd:17:11:5e:b1:a8:70:17:7c:c5:9f:37:51:
ed:21:1b:25:32:79:52:db:29:f1:61:6d:d9:19:41:2c:5a:72:
27:c6:9b:a0:da:cd:43:02:20:87:a5:0a:08:81:37:31:d1:59:
c5:cc:18:cd:1c:7b:1b:e5:87:a4:9e:4e:9a:f5:3b:2b:3b:5b:
c3:fc:2a:c0:81:e0:96:e5:83:68:09:73:de:43:69:54:b3:b1:
74:a4:71:c8:21:83:90:9a:1c:cc:fc:52:0f:a6:c9:36:7f:e8:
9b:bb:0b:99:04:a9:71:82:5a:78:dc:14:2c:53:5a:f6:a7:69:
92:32:4a:af:7c:ac:6a:27:53:ad:f2:f3:27:86:bf:8d:49:1d:
c2:d6:39:4a:0a:a1:bb:cc:12:f1:33:36:2b:3b:e1:d1:0a:01:
5d:04:52:73:1b:76:9f:95:6b:f2:17:d8:95:ec:b4:ea:42:77:
4f:fc:c5:fe:05:22:4c:49:bf:72:98:ec:d3:1b:2b:6e:db:ab:
53:10:56:8b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBDg0mPC1Lu4v2QVaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNjEyMDAwMFoXDTIzMDEyMTA1MDAwMFowLzEtMCsGA1UEAxMk
ODEyNjY2OTUtNzZjMS00OGMzLWI0ZTItMjI3NmZkYzM1ODcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwnd/h56Eb/DYdspJ8tYoCKb+VjPqKJRK8c7
Ib1q7u8cOZP10ueqd3AMIefU8Vphdcjcqwg+r21M+iPrkKQ9Qi0fcB7WZR4SrzP8
AMfDm7TAhIYRWK88d9RAhytd/CQggy4Na6S5Pt8PAq7Z9hJWI9/z6hV0OQ3e4JCk
uk+/JQ5z5p9+dzyYcnL3N+ihoMY/R2Rz1M4sZeYfe6TZolBJYHyW4Obd5se12XgN
bOoMIfhCOVRSK4P+UEDe6E/NwVHI6Kq3QyGRPMbAyR4steXftutEG6jocgP1IP8b
uUi+MXNbb5V4Sj/rPxcYYMNe7lEut82DsqV5d8XtTTysJpn/NwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNeel3/gGcMH1OZ0pIP86krgPYR3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNzg4MmJhYmEtZGYwZS0z
NmI5LTg4MjgtZmQwZjNmN2RhMThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEpkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAdZ7Iyaj4N7uGakL0A4ncd3Db5aNBAwY/eSlMZh9OFUcMfjLR/x2KbB1D
s/khoBEGwy+JmRV5bfAGKLO9FxFesahwF3zFnzdR7SEbJTJ5Utsp8WFt2RlBLFpy
J8aboNrNQwIgh6UKCIE3MdFZxcwYzRx7G+WHpJ5OmvU7Kztbw/wqwIHgluWDaAlz
3kNpVLOxdKRxyCGDkJoczPxSD6bJNn/om7sLmQSpcYJaeNwULFNa9qdpkjJKr3ys
aidTrfLzJ4a/jUkdwtY5Sgqhu8wS8TM2Kzvh0QoBXQRScxt2n5Vr8hfYley06kJ3
T/zF/gUiTEm/cpjs0xsrbturUxBWiw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:18:17 2025 by rpki-client