Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/80503608-0107-3d0e-a517-f5ad5bb45b5c.roa
File: 80503608-0107-3d0e-a517-f5ad5bb45b5c.roa (raw, json)
Hash identifier: WMkkujdIeEUmXE6NWrvFU/+xbUY+2aV2UdQSt5nK7PE=
Subject key identifier: 36:DB:9E:37:0A:23:49:05:80:66:E9:12:E8:85:28:5A:75:31:BF:BA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF32226199D35BF3BFDF5AC80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/80503608-0107-3d0e-a517-f5ad5bb45b5c.roa
Signing time: Thu 17 Nov 2022 12:00:00 +0000
ROA not before: Thu 17 Nov 2022 12:00:00 +0000
ROA not after: Fri 23 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.132.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f3:22:26:19:9d:35:bf:3b:fd:f5:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 17 12:00:00 2022 GMT
Not After : Dec 23 05:00:00 2022 GMT
Subject: CN=9c254b0f-9474-4af5-b62f-a216f76c4c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7e:fd:61:ea:7f:98:56:0c:eb:cc:56:f3:ac:
34:0b:90:07:cc:50:ca:76:8d:3c:d2:14:8d:78:37:
d0:ee:56:8b:87:67:e2:2b:ed:8b:da:73:31:34:32:
62:b5:86:68:77:0d:39:9e:e4:84:7a:8e:87:d0:47:
02:26:c8:cf:27:95:01:43:98:88:f5:2d:67:9b:40:
8d:7d:98:a8:2e:11:fe:bf:a6:97:24:e1:83:54:c2:
65:6f:49:2f:7e:f7:54:75:48:36:7c:f3:9a:0d:0a:
69:2f:27:1a:7e:6c:41:e1:11:3c:28:96:76:f0:dd:
20:f6:50:7f:cc:14:67:d6:b8:44:b9:9c:80:c0:99:
89:1d:f0:82:fa:0e:ee:98:8c:5e:1d:29:5c:54:2c:
bb:ca:98:35:8c:10:3c:a8:56:47:d6:11:90:81:ea:
46:9e:e2:63:65:ee:75:4d:4a:17:c6:01:a6:e7:7d:
9a:34:9a:15:47:94:26:2d:17:9f:34:4e:ae:c0:4d:
6c:17:e6:a0:c9:29:2c:ca:cf:3b:dd:97:81:ac:4e:
35:c2:38:46:5f:4f:d2:25:9a:bf:8c:47:0f:e3:c4:
61:ff:1f:f7:b4:da:1f:19:62:ed:e0:4a:fb:dd:84:
a1:bd:b0:aa:50:7f:34:d5:c6:aa:ee:b5:50:7c:47:
54:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DB:9E:37:0A:23:49:05:80:66:E9:12:E8:85:28:5A:75:31:BF:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/80503608-0107-3d0e-a517-f5ad5bb45b5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.132.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:cd:7f:10:35:ec:92:fc:60:49:d2:af:1f:72:4b:56:52:9e:
76:39:ff:0d:b8:22:7c:26:7f:ec:24:fc:1b:94:f3:f9:98:38:
b9:d4:e1:16:55:b4:a3:49:61:5f:f7:11:2e:4a:b1:88:e4:b4:
e8:a8:5a:d9:7d:40:c7:8b:66:11:c4:1a:f0:db:0d:0b:65:af:
02:00:01:b6:17:2a:8b:e1:f5:81:b8:47:91:05:21:b1:c5:9a:
e3:5e:5c:8f:9a:b0:83:62:59:79:4c:5f:16:b4:7e:b3:ec:c7:
87:06:aa:bb:33:15:0c:e6:00:69:38:58:9f:89:72:df:d0:db:
c9:02:a4:8e:65:4a:d5:7a:ec:2b:d0:4b:8e:c5:1c:5d:c4:64:
86:92:01:8f:b8:af:b7:84:ea:98:57:4e:1e:d2:7f:88:fd:3a:
0a:72:36:00:2a:0b:12:67:05:98:dd:b0:2f:1a:04:4d:50:9a:
e4:5f:81:5e:ee:56:94:80:b2:b3:a4:0a:39:7e:c2:54:85:fa:
83:a6:63:d6:a6:62:22:43:ea:06:ca:87:3b:f1:c9:0c:fd:85:
87:ba:60:72:c4:19:03:86:a4:6b:cf:8b:f3:84:19:07:bb:3e:
7f:0a:11:ca:e0:10:e4:10:ae:ef:06:f4:0f:18:05:6b:a5:be:
ca:eb:d8:d5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/zIiYZnTW/O/31rIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTExNzEyMDAwMFoXDTIyMTIyMzA1MDAwMFowLzEtMCsGA1UEAxMk
OWMyNTRiMGYtOTQ3NC00YWY1LWI2MmYtYTIxNmY3NmM0YzMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6X79Yep/mFYM68xW86w0C5AHzFDKdo080hSN
eDfQ7laLh2fiK+2L2nMxNDJitYZodw05nuSEeo6H0EcCJsjPJ5UBQ5iI9S1nm0CN
fZioLhH+v6aXJOGDVMJlb0kvfvdUdUg2fPOaDQppLycafmxB4RE8KJZ28N0g9lB/
zBRn1rhEuZyAwJmJHfCC+g7umIxeHSlcVCy7ypg1jBA8qFZH1hGQgepGnuJjZe51
TUoXxgGm532aNJoVR5QmLRefNE6uwE1sF+agySksys873ZeBrE41wjhGX0/SJZq/
jEcP48Rh/x/3tNofGWLt4Er73YShvbCqUH801caq7rVQfEdUxQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDbbnjcKI0kFgGbpEuiFKFp1Mb+6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvODA1MDM2MDgtMDEwNy0z
ZDBlLWE1MTctZjVhZDViYjQ1YjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEoQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAdM1/EDXskvxgSdKvH3JLVlKedjn/DbgifCZ/7CT8G5Tz+Zg4udThFlW0
o0lhX/cRLkqxiOS06Kha2X1Ax4tmEcQa8NsNC2WvAgABthcqi+H1gbhHkQUhscWa
415cj5qwg2JZeUxfFrR+s+zHhwaquzMVDOYAaThYn4ly39DbyQKkjmVK1XrsK9BL
jsUcXcRkhpIBj7ivt4TqmFdOHtJ/iP06CnI2ACoLEmcFmN2wLxoETVCa5F+BXu5W
lICys6QKOX7CVIX6g6Zj1qZiIkPqBsqHO/HJDP2Fh7pgcsQZA4aka8+L84QZB7s+
fwoRyuAQ5BCu7wb0DxgFa6W+yuvY1Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:11:10 2025 by rpki-client