Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7fa7352f-b461-3111-98f3-12bf20d13fe9.roa
File: 7fa7352f-b461-3111-98f3-12bf20d13fe9.roa (raw, json)
Hash identifier: nmULcIi+cHphL9hTMCBdfp5FGTE8KpcHXMdtZ7juJps=
Subject key identifier: 86:21:61:8A:6F:10:9D:EA:0F:CB:EE:C0:EB:4F:26:6F:72:76:37:5E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA8C6767B4FC2E011A2567C40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7fa7352f-b461-3111-98f3-12bf20d13fe9.roa
Signing time: Fri 21 Oct 2022 12:00:00 +0000
ROA not before: Fri 21 Oct 2022 12:00:00 +0000
ROA not after: Sat 26 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.168.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a8:c6:76:7b:4f:c2:e0:11:a2:56:7c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 12:00:00 2022 GMT
Not After : Nov 26 05:00:00 2022 GMT
Subject: CN=3ebe7cb4-2f09-46fc-85db-f1ec361879b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:94:59:02:d8:4a:1e:7a:a1:8b:06:79:78:
12:6d:c9:16:ea:ba:2e:9f:ba:69:4c:76:a8:6d:5e:
74:a8:aa:51:ea:90:df:7e:71:a7:73:a8:bd:c4:af:
d1:f7:34:63:59:97:ae:7c:48:8b:79:2f:ae:be:e3:
5b:9d:96:5d:fa:ff:f0:d3:e2:8d:15:3d:42:25:5f:
ab:ca:d0:ca:66:93:27:4a:f6:98:40:69:aa:0b:48:
a6:85:7b:58:62:49:58:67:87:b5:f5:d0:04:4b:09:
8a:e0:37:5a:e4:db:e2:bd:04:1c:38:24:3c:dd:ec:
2b:2e:b3:0a:f0:8d:06:7b:8b:f7:96:91:5a:2e:d0:
0c:20:07:63:f3:b7:a5:ac:24:9c:57:b2:fe:4c:4d:
99:68:9c:50:e4:be:54:a7:09:26:d4:7f:38:ee:2f:
0b:83:51:bb:7a:30:5b:63:24:e6:ea:53:c1:c6:df:
1f:18:55:ff:e1:b9:54:b0:ad:46:a4:75:a6:36:0a:
0a:f1:2b:77:c8:f1:5b:f2:dc:d9:28:8c:55:04:ba:
6a:e6:eb:64:ef:37:e6:81:2a:e8:42:05:1b:a0:7e:
f0:8d:a7:64:df:65:9b:4b:ce:31:a9:48:ea:4f:e2:
57:27:5a:23:77:4e:41:e0:78:c3:32:3b:75:45:8e:
22:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:21:61:8A:6F:10:9D:EA:0F:CB:EE:C0:EB:4F:26:6F:72:76:37:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7fa7352f-b461-3111-98f3-12bf20d13fe9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.168.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:e8:b2:75:24:4e:d0:c8:73:ab:fb:b6:e0:cb:ad:63:7d:82:
13:9a:ad:1d:62:f0:d8:8a:4a:e9:d9:11:62:f8:aa:e5:4c:ec:
66:b0:48:da:6e:5a:c6:1d:ba:6d:41:e0:87:6d:ee:76:20:b5:
54:21:dc:d9:bf:cb:18:19:e1:69:bc:20:69:73:0a:af:67:bc:
85:6d:28:fe:fe:93:67:ad:a3:0b:f9:20:27:f5:ef:fb:ba:eb:
9b:b1:95:c5:dc:ed:96:c8:be:9f:3e:ab:c4:10:38:e6:db:80:
9c:94:97:8b:11:d5:d1:b5:4f:d5:ef:55:9c:12:5c:d4:33:fd:
48:0f:1b:30:4e:ff:de:5a:78:e8:18:ff:b1:ed:73:7a:55:3d:
22:c9:ca:5d:64:7c:fd:a2:e6:77:0c:25:d8:a7:a8:04:68:3c:
d3:6b:e8:91:99:42:6f:58:1e:b5:f4:c3:66:dc:bb:e5:cc:34:
04:aa:99:b2:22:ab:4c:8b:2b:5d:b5:b7:20:f0:c1:e6:04:85:
1d:3b:f0:15:85:e0:1d:b9:cc:de:03:ef:96:5d:d9:ae:b6:44:
3a:83:12:89:0c:99:7d:71:37:09:90:7d:97:9c:05:b3:2a:fe:
b8:69:71:e1:98:25:da:f8:96:c0:7c:31:ad:0a:2e:21:61:14:
9d:ca:eb:1a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+oxnZ7T8LgEaJWfEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAyMTEyMDAwMFoXDTIyMTEyNjA1MDAwMFowLzEtMCsGA1UEAxMk
M2ViZTdjYjQtMmYwOS00NmZjLTg1ZGItZjFlYzM2MTg3OWIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1KUWQLYSh56oYsGeXgSbckW6roun7ppTHao
bV50qKpR6pDffnGnc6i9xK/R9zRjWZeufEiLeS+uvuNbnZZd+v/w0+KNFT1CJV+r
ytDKZpMnSvaYQGmqC0imhXtYYklYZ4e19dAESwmK4Dda5NvivQQcOCQ83ewrLrMK
8I0Ge4v3lpFaLtAMIAdj87elrCScV7L+TE2ZaJxQ5L5Upwkm1H847i8Lg1G7ejBb
YyTm6lPBxt8fGFX/4blUsK1GpHWmNgoK8St3yPFb8tzZKIxVBLpq5utk7zfmgSro
QgUboH7wjadk32WbS84xqUjqT+JXJ1ojd05B4HjDMjt1RY4iPwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIYhYYpvEJ3qD8vuwOtPJm9ydjdeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvN2ZhNzM1MmYtYjQ2MS0z
MTExLTk4ZjMtMTJiZjIwZDEzZmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEqgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEANeiydSRO0Mhzq/u24MutY32CE5qtHWLw2IpK6dkRYviq5UzsZrBI2m5a
xh26bUHgh23udiC1VCHc2b/LGBnhabwgaXMKr2e8hW0o/v6TZ62jC/kgJ/Xv+7rr
m7GVxdztlsi+nz6rxBA45tuAnJSXixHV0bVP1e9VnBJc1DP9SA8bME7/3lp46Bj/
se1zelU9IsnKXWR8/aLmdwwl2KeoBGg802vokZlCb1getfTDZty75cw0BKqZsiKr
TIsrXbW3IPDB5gSFHTvwFYXgHbnM3gPvll3ZrrZEOoMSiQyZfXE3CZB9l5wFsyr+
uGlx4Zgl2viWwHwxrQouIWEUncrrGg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:52:27 2025 by rpki-client