Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/876c02d4-0efb-38ba-a4ae-27882fe5237b.roa
File: 876c02d4-0efb-38ba-a4ae-27882fe5237b.roa (raw, json)
Hash identifier: c6Ex3qyNStzYX3QQq+FAsuUQOH4MUU0kuGaa+Eo55nE=
Subject key identifier: 45:F4:D3:18:1D:3B:9E:01:9D:C2:A6:06:DD:49:68:17:1B:00:E5:78
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E96B81A5A3EB4DFBFA520D8F0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/876c02d4-0efb-38ba-a4ae-27882fe5237b.roa
Signing time: Fri 15 Jul 2022 12:00:00 +0000
ROA not before: Fri 15 Jul 2022 12:00:00 +0000
ROA not after: Sat 20 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.190.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:96:b8:1a:5a:3e:b4:df:bf:a5:20:d8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 15 12:00:00 2022 GMT
Not After : Aug 20 04:00:00 2022 GMT
Subject: CN=68312aeb-4abb-4956-8784-0c83f1714500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d8:fc:e3:b7:c3:70:eb:33:92:26:7e:46:f7:
dd:24:47:49:97:d0:a1:10:ac:ee:00:38:d5:80:b2:
d9:ab:3d:cb:ca:21:b5:ea:26:03:84:ff:1e:05:54:
fe:f3:93:10:0e:35:61:6f:b6:8b:d4:16:e2:fb:11:
f1:07:08:ec:c6:f5:2f:53:30:f0:15:0b:be:f8:0b:
d2:50:af:8f:ac:83:bf:bc:e6:7c:6f:4b:28:31:5b:
c4:5a:58:24:71:3f:49:df:25:75:18:da:9a:40:26:
8a:90:0d:ba:b9:cf:e7:7b:a0:4b:79:77:a1:93:69:
5a:f0:29:1a:4c:83:07:7d:99:e6:1b:c6:64:22:36:
55:6f:c8:d5:74:ac:b8:d0:b2:5c:6d:85:d6:1c:1f:
d4:73:99:b3:66:f7:7e:0a:10:c9:0a:e8:8c:0e:ba:
1e:35:3e:72:b0:52:6d:a9:86:36:c8:68:42:fe:21:
4b:12:3f:d4:33:39:25:25:5a:87:49:17:68:b6:05:
fe:fa:18:65:61:27:c5:1f:83:e2:dc:5b:89:2d:d1:
9c:23:c8:78:85:c7:e9:8f:a0:a9:df:ed:25:a7:7e:
ba:32:b7:6e:ba:f5:c6:fc:80:fb:d1:15:62:c8:28:
56:0d:b8:2a:f5:b3:fd:fe:01:04:12:3c:79:4c:bb:
ca:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F4:D3:18:1D:3B:9E:01:9D:C2:A6:06:DD:49:68:17:1B:00:E5:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/876c02d4-0efb-38ba-a4ae-27882fe5237b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.190.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:1a:24:89:f5:e7:26:85:4c:b8:e6:4d:37:db:e0:a8:3f:25:
52:0b:d7:fe:ea:9e:54:f5:6c:95:bc:d1:2d:e5:23:ca:f7:a7:
6d:e4:bf:e2:42:5f:94:dd:a6:7b:80:67:03:3b:2c:c6:bb:23:
63:1d:01:37:f5:7e:27:0e:9e:3b:0c:e8:66:64:dd:59:82:d3:
48:0c:87:da:87:f8:a8:d6:c0:f9:5e:5b:95:e0:6b:f1:cc:9b:
5e:19:e9:1d:5d:66:c9:f2:93:1d:45:e7:42:7f:57:47:07:ea:
36:52:18:6c:ec:86:ca:d3:3c:db:66:13:04:70:2d:d6:93:b9:
7e:c9:cb:9f:9e:20:05:6d:f3:6d:98:b0:a0:8a:62:2c:c8:33:
62:03:1d:e9:81:5c:ff:26:eb:b9:83:6c:d1:c0:04:82:17:48:
95:45:af:eb:cf:ab:5a:34:7e:b8:5c:85:83:f3:31:4d:1e:8e:
75:88:98:d8:4b:e2:23:19:ba:f0:5c:e8:1f:cb:3c:50:89:41:
1c:08:04:6c:bc:9b:ef:80:b0:44:8e:c3:f1:21:7f:e5:3b:18:
87:76:a6:df:e5:13:64:46:7e:42:81:4d:28:4c:ba:d3:2c:2f:
f6:bf:0a:16:66:b7:3e:ac:f7:f0:14:95:bf:ff:3a:55:67:31:
ff:c0:48:37
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6WuBpaPrTfv6Ug2PAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcxNTEyMDAwMFoXDTIyMDgyMDA0MDAwMFowLzEtMCsGA1UEAxMk
NjgzMTJhZWItNGFiYi00OTU2LTg3ODQtMGM4M2YxNzE0NTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9j847fDcOszkiZ+RvfdJEdJl9ChEKzuADjV
gLLZqz3LyiG16iYDhP8eBVT+85MQDjVhb7aL1Bbi+xHxBwjsxvUvUzDwFQu++AvS
UK+PrIO/vOZ8b0soMVvEWlgkcT9J3yV1GNqaQCaKkA26uc/ne6BLeXehk2la8Cka
TIMHfZnmG8ZkIjZVb8jVdKy40LJcbYXWHB/Uc5mzZvd+ChDJCuiMDroeNT5ysFJt
qYY2yGhC/iFLEj/UMzklJVqHSRdotgX++hhlYSfFH4Pi3FuJLdGcI8h4hcfpj6Cp
3+0lp366MrduuvXG/ID70RViyChWDbgq9bP9/gEEEjx5TLvKfwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEX00xgdO54BncKmBt1JaBcbAOV4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvODc2YzAyZDQtMGVmYi0z
OGJhLWE0YWUtMjc4ODJmZTUyMzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEr4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbRokifXnJoVMuOZNN9vgqD8lUgvX/uqeVPVslbzRLeUjyvenbeS/4kJf
lN2me4BnAzssxrsjYx0BN/V+Jw6eOwzoZmTdWYLTSAyH2of4qNbA+V5bleBr8cyb
XhnpHV1myfKTHUXnQn9XRwfqNlIYbOyGytM822YTBHAt1pO5fsnLn54gBW3zbZiw
oIpiLMgzYgMd6YFc/ybruYNs0cAEghdIlUWv68+rWjR+uFyFg/MxTR6OdYiY2Evi
Ixm68FzoH8s8UIlBHAgEbLyb74CwRI7D8SF/5TsYh3am3+UTZEZ+QoFNKEy60ywv
9r8KFma3Pqz38BSVv/86VWcx/8BINw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:34:08 2025 by rpki-client