Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b129b35-3c12-34f3-915d-a4a260470b1f.roa
File: 8b129b35-3c12-34f3-915d-a4a260470b1f.roa (raw, json)
Hash identifier: XzlKdWLHHLLiddUS995Tv4uaMe+FvnWv6rMR7MrCyu8=
Subject key identifier: 25:3A:8E:F4:AF:CC:0A:49:0D:8B:22:AA:D3:99:96:7A:41:B7:21:BA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE45852FC4C4D5C7A46CE6380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b129b35-3c12-34f3-915d-a4a260470b1f.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.180.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:58:52:fc:4c:4d:5c:7a:46:ce:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=74e40446-528e-4fa4-9dfa-a2e330b88277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:ba:19:43:8c:be:84:4d:35:8d:0c:52:a4:
e7:e6:22:7c:c9:d3:d8:e6:91:e2:12:7e:96:27:ae:
df:17:0a:64:57:1f:3f:84:01:7d:21:1a:0a:c9:d3:
77:97:42:9b:e5:27:cd:48:ec:35:b5:1a:dd:72:d3:
dd:3c:f4:43:25:01:aa:31:c9:23:73:42:4e:2c:9d:
af:df:76:c1:b3:c9:0b:e6:82:1e:0f:10:3c:3a:3d:
06:e9:4c:f3:ae:ab:aa:77:40:9d:d6:d4:95:4a:79:
88:15:1d:e7:7c:e0:2b:33:90:53:52:21:82:e6:8e:
c3:f4:1f:05:40:a9:19:c5:e6:2d:8b:b2:de:c7:e1:
4c:f3:10:6e:42:84:9b:d4:6d:b1:65:ad:09:d7:95:
55:2e:38:5b:18:23:31:f2:77:50:5c:18:0c:84:3c:
d5:b0:b3:6c:c3:02:46:cb:5e:5f:3f:14:1b:68:b8:
32:5d:de:d2:0e:a7:2b:2f:fd:5a:d1:0e:ec:16:64:
eb:d6:0b:9f:e6:6c:0d:77:5e:be:eb:db:a0:3c:f1:
b8:1b:bc:92:77:06:b9:4a:62:d7:09:0c:aa:d9:ce:
52:24:77:7f:cf:6a:39:3d:a6:8b:68:f5:e0:db:09:
ba:04:e8:ea:7b:2b:c4:3c:cd:32:b8:f8:d1:1a:8b:
56:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3A:8E:F4:AF:CC:0A:49:0D:8B:22:AA:D3:99:96:7A:41:B7:21:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b129b35-3c12-34f3-915d-a4a260470b1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.180.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:19:2c:92:3f:1e:ad:05:c5:0a:92:10:c8:7d:21:de:71:ac:
ab:82:4f:3a:7e:ab:eb:c5:13:84:ef:8c:55:1c:a7:e9:d2:89:
7c:39:ee:a7:23:b8:67:93:cf:bb:b3:c7:22:62:3b:d2:5d:55:
2e:78:f2:5d:c1:43:41:e9:1e:89:35:71:99:30:9f:6f:d1:92:
ef:0a:96:6d:a3:08:ab:f5:d6:8c:f7:2a:84:9c:cb:e1:88:84:
7a:f7:ec:28:c9:4b:4e:aa:15:20:b6:9e:e9:1b:2a:fa:53:44:
97:b6:f6:dc:52:be:5f:0c:a4:84:52:0a:55:e3:db:c0:b7:cb:
66:aa:51:6a:64:9b:f3:43:97:40:a9:e4:66:07:dc:81:77:db:
0d:dc:df:33:39:70:f1:34:23:f7:5a:b2:15:89:8c:b8:a5:2e:
19:36:f7:bf:13:dc:55:d3:35:f0:9e:5b:62:86:97:e4:eb:92:
15:27:e5:d7:4b:48:23:7e:59:1a:03:b0:28:fa:dd:a1:e1:e4:
7f:c8:dd:ee:6a:b8:c1:ce:b0:c7:6a:ce:0f:e6:e1:7d:52:67:
45:33:a7:e5:38:38:03:b3:93:4c:6a:b4:e9:0a:bc:8f:b1:e3:
32:13:13:f9:65:33:4a:2f:09:e0:32:6f:db:89:7b:99:ac:f4:
91:f9:02:46
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzkWFL8TE1cekbOY4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIxMTA1MDAwMFoXDTIyMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
NzRlNDA0NDYtNTI4ZS00ZmE0LTlkZmEtYTJlMzMwYjg4Mjc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXu6GUOMvoRNNY0MUqTn5iJ8ydPY5pHiEn6W
J67fFwpkVx8/hAF9IRoKydN3l0Kb5SfNSOw1tRrdctPdPPRDJQGqMckjc0JOLJ2v
33bBs8kL5oIeDxA8Oj0G6Uzzrquqd0Cd1tSVSnmIFR3nfOArM5BTUiGC5o7D9B8F
QKkZxeYti7Lex+FM8xBuQoSb1G2xZa0J15VVLjhbGCMx8ndQXBgMhDzVsLNswwJG
y15fPxQbaLgyXd7SDqcrL/1a0Q7sFmTr1guf5mwNd16+69ugPPG4G7ySdwa5SmLX
CQyq2c5SJHd/z2o5PaaLaPXg2wm6BOjqeyvEPM0yuPjRGotWDwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCU6jvSvzApJDYsiqtOZlnpBtyG6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOGIxMjliMzUtM2MxMi0z
NGYzLTkxNWQtYTRhMjYwNDcwYjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBErQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAUxkskj8erQXFCpIQyH0h3nGsq4JPOn6r68UThO+MVRyn6dKJfDnupyO4
Z5PPu7PHImI70l1VLnjyXcFDQekeiTVxmTCfb9GS7wqWbaMIq/XWjPcqhJzL4YiE
evfsKMlLTqoVILae6Rsq+lNEl7b23FK+XwykhFIKVePbwLfLZqpRamSb80OXQKnk
ZgfcgXfbDdzfMzlw8TQj91qyFYmMuKUuGTb3vxPcVdM18J5bYoaX5OuSFSfl10tI
I35ZGgOwKPrdoeHkf8jd7mq4wc6wx2rOD+bhfVJnRTOn5Tg4A7OTTGq06Qq8j7Hj
MhMT+WUzSi8J4DJv24l7maz0kfkCRg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:26 2025 by rpki-client