Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8316ac84-3259-3aeb-b380-2b0c8e1e782a.roa
File: 8316ac84-3259-3aeb-b380-2b0c8e1e782a.roa (raw, json)
Hash identifier: i8oH3VSefC2+ozCrkTC1QJSiV32jaK82TOFT3aQPp8o=
Subject key identifier: E6:4D:1E:A6:28:39:AD:80:1E:4A:B9:1F:86:BD:EC:FE:CA:A2:D5:EE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D324F52EFA16E46F2A93DB000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8316ac84-3259-3aeb-b380-2b0c8e1e782a.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.86.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:4f:52:ef:a1:6e:46:f2:a9:3d:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=b9f8e9cc-895f-4c5a-8854-4424755d2549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:03:9c:be:77:1b:5f:e7:f2:17:a7:0f:09:e0:
a0:12:40:59:8f:08:eb:ed:88:af:d5:04:20:e8:97:
96:a6:43:f1:c3:9b:4c:46:cd:c7:a5:66:40:ed:ff:
4d:3f:41:85:02:03:63:e4:37:9e:cf:13:75:ae:0d:
a5:d3:ae:83:7a:2c:10:b2:97:d2:73:07:50:13:48:
b6:89:53:84:bf:21:82:b0:a8:e2:f2:73:6e:50:75:
c0:47:88:c0:6c:09:b3:f1:1d:8d:56:23:27:c0:b4:
ef:d1:0f:6c:d0:6b:23:0d:6b:a9:39:55:86:d7:e6:
22:52:d7:70:83:94:5d:fb:06:e2:c5:55:34:e6:fa:
04:52:6f:32:d7:b1:33:40:2a:9f:ac:bc:fa:2f:8f:
82:08:10:37:66:6d:1b:6a:a5:97:6f:23:8d:65:42:
e5:8c:85:72:c0:89:c6:9f:78:94:6a:a6:2b:4b:6e:
34:6f:08:a7:66:25:48:4d:fd:85:73:36:82:3e:7d:
78:25:03:2c:87:5d:d7:10:ed:e8:18:ec:db:ad:b1:
7a:85:94:5a:62:38:ef:b2:4b:86:66:36:eb:2c:fa:
d0:27:4a:7b:30:25:45:cd:50:bd:e5:f2:2a:32:0e:
eb:81:48:db:99:d2:41:ff:95:92:1f:da:5a:35:de:
d1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4D:1E:A6:28:39:AD:80:1E:4A:B9:1F:86:BD:EC:FE:CA:A2:D5:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8316ac84-3259-3aeb-b380-2b0c8e1e782a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:ad:1a:ef:aa:84:d3:3f:6a:7b:6d:c8:f6:d7:4d:21:ba:ed:
55:56:2c:8d:78:21:cd:70:ad:66:c9:39:00:63:2f:fa:60:e1:
fe:fb:43:c9:19:86:b5:38:12:db:6c:fc:24:e1:08:23:50:33:
22:d5:22:3c:8e:26:23:6f:e0:c8:2f:ca:d1:8a:33:84:d6:01:
56:8c:ac:3b:0e:e2:1a:c3:c6:4d:1e:20:59:20:da:39:a6:9e:
23:7e:12:3d:99:8f:e5:64:37:37:c8:50:26:9f:69:53:38:c1:
c2:7c:5a:fb:70:38:c2:d0:38:18:1b:1e:1f:6b:f3:6e:81:31:
78:ae:ab:4f:fc:48:28:45:52:b0:63:ac:89:43:a3:30:e1:56:
c3:ae:7f:e4:85:b8:bf:49:fc:78:f7:02:ed:8a:79:d9:22:20:
6e:f9:f5:fc:3e:c9:95:12:ff:03:f8:41:94:53:d8:73:a7:6a:
71:59:39:7e:2b:10:ec:c4:04:be:b4:86:b1:da:cc:9d:4e:65:
99:3e:7d:ea:29:7c:30:6c:77:8a:a2:b7:3f:94:08:07:a5:dd:
ae:59:37:fb:12:60:0e:ca:67:05:58:a0:67:92:f1:7c:d0:85:
ea:6f:30:89:25:a0:aa:38:8b:1f:51:0b:d4:b7:78:6c:ec:96:
b5:fe:fd:24
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0yT1LvoW5G8qk9sAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
YjlmOGU5Y2MtODk1Zi00YzVhLTg4NTQtNDQyNDc1NWQyNTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQOcvncbX+fyF6cPCeCgEkBZjwjr7Yiv1QQg
6JeWpkPxw5tMRs3HpWZA7f9NP0GFAgNj5DeezxN1rg2l066DeiwQspfScwdQE0i2
iVOEvyGCsKji8nNuUHXAR4jAbAmz8R2NViMnwLTv0Q9s0GsjDWupOVWG1+YiUtdw
g5Rd+wbixVU05voEUm8y17EzQCqfrLz6L4+CCBA3Zm0baqWXbyONZULljIVywInG
n3iUaqYrS240bwinZiVITf2FczaCPn14JQMsh13XEO3oGOzbrbF6hZRaYjjvskuG
ZjbrLPrQJ0p7MCVFzVC95fIqMg7rgUjbmdJB/5WSH9paNd7R3QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOZNHqYoOa2AHkq5H4a97P7KotXuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvODMxNmFjODQtMzI1OS0z
YWViLWIzODAtMmIwYzhlMWU3ODJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAElYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAdK0a76qE0z9qe23I9tdNIbrtVVYsjXghzXCtZsk5AGMv+mDh/vtDyRmG
tTgS22z8JOEII1AzItUiPI4mI2/gyC/K0YozhNYBVoysOw7iGsPGTR4gWSDaOaae
I34SPZmP5WQ3N8hQJp9pUzjBwnxa+3A4wtA4GBseH2vzboExeK6rT/xIKEVSsGOs
iUOjMOFWw65/5IW4v0n8ePcC7Yp52SIgbvn1/D7JlRL/A/hBlFPYc6dqcVk5fisQ
7MQEvrSGsdrMnU5lmT596il8MGx3iqK3P5QIB6Xdrlk3+xJgDspnBVigZ5LxfNCF
6m8wiSWgqjiLH1EL1Ld4bOyWtf79JA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:41:45 2025 by rpki-client