Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7cc9015a-81ad-3a39-9ff6-cb203226115d.roa
File: 7cc9015a-81ad-3a39-9ff6-cb203226115d.roa (raw, json)
Hash identifier: Wh6mpa5vrQ0j2nNt951puvjdO+zAy/bsPKyFvtKw4cE=
Subject key identifier: 16:D5:BA:42:67:2E:C0:05:35:A3:DC:F9:BB:8C:CA:70:18:26:14:7E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7D10FD9C823D3558D3149400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7cc9015a-81ad-3a39-9ff6-cb203226115d.roa
Signing time: Thu 06 Oct 2022 12:00:00 +0000
ROA not before: Thu 06 Oct 2022 12:00:00 +0000
ROA not after: Fri 11 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.229.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7d:10:fd:9c:82:3d:35:58:d3:14:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 6 12:00:00 2022 GMT
Not After : Nov 11 05:00:00 2022 GMT
Subject: CN=bfd3b152-1230-41c8-be31-73c130e0d021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1f:3f:39:1f:f3:02:56:7d:9b:13:db:bd:81:
88:23:4c:c4:cb:4b:b1:de:54:bb:2c:00:ef:0e:80:
2e:e9:ee:46:25:e5:21:b3:27:74:a1:37:58:3d:f0:
e4:4b:e3:74:ef:7d:6c:27:1e:e2:0a:3d:47:67:62:
66:86:b0:64:89:68:9c:67:82:36:5e:eb:c7:c3:c3:
04:0d:fb:b8:57:fe:e6:c8:c9:37:77:36:1f:94:19:
0b:cc:3d:a3:8e:60:4d:0a:e7:59:e6:6a:24:d7:16:
2a:98:8f:dd:6a:b7:36:4f:14:ca:0a:16:de:8d:c3:
9b:9a:b3:a9:a5:ad:a0:26:f6:88:64:dd:0a:83:71:
bd:10:41:9c:30:15:d2:60:37:5a:c4:05:c2:94:dc:
38:5e:d4:d8:2e:41:4c:d9:dd:8f:7d:56:f8:24:0f:
1e:83:c6:d2:c4:0a:91:a0:f6:29:b2:2d:ce:08:ec:
ec:51:18:ca:cf:87:cd:e6:c2:48:df:15:d2:4c:38:
df:c8:52:02:5f:33:c8:45:71:21:cf:cc:3e:a7:03:
1c:23:77:e1:52:94:9a:19:70:09:41:b3:12:5b:9f:
98:6b:2e:82:34:0a:e0:06:13:4b:05:c8:bc:f6:26:
bd:92:f5:6d:70:c0:2e:98:de:96:37:d0:89:d8:5c:
92:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D5:BA:42:67:2E:C0:05:35:A3:DC:F9:BB:8C:CA:70:18:26:14:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7cc9015a-81ad-3a39-9ff6-cb203226115d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.229.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:5c:ab:13:5a:82:b5:68:52:ef:6a:4e:1e:ee:6c:35:a9:3a:
70:fd:68:1b:18:92:b4:88:af:d7:66:9c:90:65:d5:1f:6a:1c:
35:cc:d6:b9:96:bd:9a:a2:38:b2:5c:2f:5b:e8:f4:04:9b:b2:
53:34:a8:0f:5c:6f:6f:eb:88:94:e8:c0:a4:80:85:dc:e2:c6:
a7:98:b4:88:62:88:30:58:17:0a:41:ed:d4:20:d7:9a:7c:df:
7f:21:e5:d4:6b:ec:6c:4c:03:52:4e:26:d4:4b:4d:f3:ec:47:
42:4e:9f:15:6f:0e:94:20:53:a0:fe:a7:4f:4e:5a:76:55:e1:
c1:81:32:2c:67:5a:ed:1f:b4:a0:ad:68:92:cf:c2:9d:1c:a3:
48:2b:35:5d:a6:bb:6e:8d:f1:dd:db:0f:67:97:3f:e0:07:da:
47:d0:ba:05:62:34:71:b9:98:bb:03:d0:32:bb:ad:71:bd:e4:
6d:60:cc:4e:88:6b:55:06:15:7e:3f:9c:51:ae:40:1d:7b:36:
83:d7:5a:9c:39:07:37:cb:6d:84:d0:34:60:5f:ec:d1:d1:d1:
84:0a:9f:bd:25:8f:ba:00:57:64:c9:ec:f8:03:ca:65:e0:14:
4f:99:5d:83:e4:f1:4a:90:0e:7d:65:dd:e3:09:cf:b8:91:21:
48:f9:ae:f6
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD99EP2cgj01WNMUlAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAwNjEyMDAwMFoXDTIyMTExMTA1MDAwMFowLzEtMCsGA1UEAxMk
YmZkM2IxNTItMTIzMC00MWM4LWJlMzEtNzNjMTMwZTBkMDIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB8/OR/zAlZ9mxPbvYGII0zEy0ux3lS7LADv
DoAu6e5GJeUhsyd0oTdYPfDkS+N0731sJx7iCj1HZ2JmhrBkiWicZ4I2XuvHw8ME
Dfu4V/7myMk3dzYflBkLzD2jjmBNCudZ5mok1xYqmI/darc2TxTKChbejcObmrOp
pa2gJvaIZN0Kg3G9EEGcMBXSYDdaxAXClNw4XtTYLkFM2d2PfVb4JA8eg8bSxAqR
oPYpsi3OCOzsURjKz4fN5sJI3xXSTDjfyFICXzPIRXEhz8w+pwMcI3fhUpSaGXAJ
QbMSW5+Yay6CNArgBhNLBci89ia9kvVtcMAumN6WN9CJ2FySzwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBbVukJnLsAFNaPc+buMynAYJhR+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvN2NjOTAxNWEtODFhZC0z
YTM5LTlmZjYtY2IyMDMyMjYxMTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEuUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAElyrE1qCtWhS72pOHu5sNak6cP1oGxiStIiv12ackGXVH2ocNczWuZa9
mqI4slwvW+j0BJuyUzSoD1xvb+uIlOjApICF3OLGp5i0iGKIMFgXCkHt1CDXmnzf
fyHl1GvsbEwDUk4m1EtN8+xHQk6fFW8OlCBToP6nT05adlXhwYEyLGda7R+0oK1o
ks/CnRyjSCs1Xaa7bo3x3dsPZ5c/4AfaR9C6BWI0cbmYuwPQMrutcb3kbWDMTohr
VQYVfj+cUa5AHXs2g9danDkHN8tthNA0YF/s0dHRhAqfvSWPugBXZMns+APKZeAU
T5ldg+TxSpAOfWXd4wnPuJEhSPmu9g==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:52:17 2025 by rpki-client