Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/843b6abe-f6b6-384c-a205-f552e0723108.roa
File: 843b6abe-f6b6-384c-a205-f552e0723108.roa (raw, json)
Hash identifier: +PBNKgMp/rtYabBt9+YEL1nc5CqB0IbWNT6zt+jQ4fo=
Subject key identifier: 89:11:21:1C:5C:C2:26:40:D5:E1:D8:6C:5D:E5:F1:E4:95:A9:F4:08
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD3D27A09D7F1D850314714C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/843b6abe-f6b6-384c-a205-f552e0723108.roa
Signing time: Sat 07 May 2022 12:00:00 +0000
ROA not before: Sat 07 May 2022 12:00:00 +0000
ROA not after: Sun 12 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.95.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d3:d2:7a:09:d7:f1:d8:50:31:47:14:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 7 12:00:00 2022 GMT
Not After : Jun 12 04:00:00 2022 GMT
Subject: CN=e4eb1351-bc37-48c9-9f66-1b3683ff31dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:57:a2:62:00:3c:6a:ed:cf:2f:08:da:59:7e:
a6:64:87:68:00:21:35:1e:d4:84:85:92:b8:11:ff:
64:92:0c:fd:9e:89:77:e1:64:8b:23:56:27:a9:32:
86:cf:ca:3c:e0:df:aa:dd:ba:62:3b:71:91:d6:d3:
b3:77:86:80:d6:06:c7:95:8a:d4:a5:a0:82:76:5d:
80:48:9a:5e:33:87:4a:48:b5:62:7d:7b:56:5e:67:
43:72:2a:2b:e5:85:8f:00:f5:fa:d7:9c:07:e0:83:
4e:e1:1a:58:95:98:4f:15:71:6e:75:7b:9f:c0:8e:
71:9c:7f:37:7f:21:1d:dc:46:57:8d:28:84:26:d5:
75:f0:4c:97:b9:6b:bc:90:dd:fd:a7:b8:62:e7:59:
c3:a5:f8:8d:57:f7:e2:3b:ab:9a:b5:ba:f1:75:b4:
69:44:18:fb:0c:13:e8:55:59:de:96:60:a4:13:32:
d7:4d:63:94:c8:e4:dc:ae:32:18:6e:d5:06:80:0a:
4a:53:b7:c7:49:89:75:22:b9:38:8a:f8:99:72:f4:
5f:23:bf:b7:c6:31:12:1b:44:9a:bc:67:8d:c8:31:
5d:bb:d9:08:7b:cd:8c:4c:ab:d1:d9:bb:24:f8:f4:
af:81:8d:a6:bf:c8:bb:7f:b1:b5:99:a2:d1:dc:ed:
13:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:11:21:1C:5C:C2:26:40:D5:E1:D8:6C:5D:E5:F1:E4:95:A9:F4:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/843b6abe-f6b6-384c-a205-f552e0723108.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.95.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:fd:b1:04:4c:11:9a:94:e9:7c:3e:49:2a:fb:a5:0b:fd:54:
08:75:70:d1:1f:d2:4e:d4:5a:d4:aa:52:24:cd:ff:9b:1c:f9:
fc:5f:99:79:cc:5f:7b:73:f9:9c:49:d1:60:f8:f3:9e:e3:38:
4b:de:2c:ac:7c:78:7b:c3:01:1f:2e:40:bf:4d:a0:e2:29:9c:
73:e3:d4:43:e1:49:9e:b6:0c:04:5a:40:45:82:0f:81:8a:3f:
12:09:d9:53:ec:c2:b3:69:58:42:71:24:79:ed:8e:27:b4:6e:
50:28:cb:37:8a:8b:de:35:09:2f:bc:34:fc:a1:7c:ed:38:1d:
a2:bf:8b:09:0c:6c:2f:aa:23:85:9c:f0:08:f4:3f:c7:da:5a:
bb:48:c0:24:ed:ef:84:0f:66:38:c4:bc:71:dd:a3:9a:cf:8e:
6f:b0:85:96:a3:17:5e:4e:59:cd:2a:84:5e:1f:b6:80:5c:56:
f4:75:4c:7f:d1:5f:17:3d:56:1d:e1:6c:79:37:67:c2:f9:37:
3a:cf:57:43:92:ae:ef:96:bb:42:90:d4:dd:a8:dc:73:c7:20:
0d:19:f7:38:53:cd:b3:1d:1e:88:cc:30:ec:b1:5c:f8:d2:03:
26:21:9b:86:ef:db:a1:ce:22:2c:fb:ba:fc:0d:1d:6b:b5:70:
b9:68:1d:0c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3T0noJ1/HYUDFHFMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUwNzEyMDAwMFoXDTIyMDYxMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZTRlYjEzNTEtYmMzNy00OGM5LTlmNjYtMWIzNjgzZmYzMWRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAileiYgA8au3PLwjaWX6mZIdoACE1HtSEhZK4
Ef9kkgz9nol34WSLI1YnqTKGz8o84N+q3bpiO3GR1tOzd4aA1gbHlYrUpaCCdl2A
SJpeM4dKSLVifXtWXmdDcior5YWPAPX615wH4INO4RpYlZhPFXFudXufwI5xnH83
fyEd3EZXjSiEJtV18EyXuWu8kN39p7hi51nDpfiNV/fiO6uatbrxdbRpRBj7DBPo
VVnelmCkEzLXTWOUyOTcrjIYbtUGgApKU7fHSYl1Irk4iviZcvRfI7+3xjESG0Sa
vGeNyDFdu9kIe82MTKvR2bsk+PSvgY2mv8i7f7G1maLR3O0TcQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIkRIRxcwiZA1eHYbF3l8eSVqfQIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvODQzYjZhYmUtZjZiNi0z
ODRjLWEyMDUtZjU1MmUwNzIzMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEl8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAj/2xBEwRmpTpfD5JKvulC/1UCHVw0R/STtRa1KpSJM3/mxz5/F+Zecxf
e3P5nEnRYPjznuM4S94srHx4e8MBHy5Av02g4imcc+PUQ+FJnrYMBFpARYIPgYo/
EgnZU+zCs2lYQnEkee2OJ7RuUCjLN4qL3jUJL7w0/KF87Tgdor+LCQxsL6ojhZzw
CPQ/x9pau0jAJO3vhA9mOMS8cd2jms+Ob7CFlqMXXk5ZzSqEXh+2gFxW9HVMf9Ff
Fz1WHeFseTdnwvk3Os9XQ5Ku75a7QpDU3ajcc8cgDRn3OFPNsx0eiMww7LFc+NID
JiGbhu/boc4iLPu6/A0da7VwuWgdDA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:42:09 2025 by rpki-client