Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b708e42-4a93-3e12-a5ec-1f7cc5bd7bbd.roa
File: 8b708e42-4a93-3e12-a5ec-1f7cc5bd7bbd.roa (raw, json)
Hash identifier: bM8lTW4gBW+6VM7BVoRkaOTtwIFz+Nmoo5w3EFlIisw=
Subject key identifier: 8D:EB:32:80:FE:2C:CF:C7:33:A3:9E:77:AD:D9:66:C3:5D:3E:B6:B7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA716AB1BD515B685726005C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b708e42-4a93-3e12-a5ec-1f7cc5bd7bbd.roa
Signing time: Fri 21 Oct 2022 12:00:00 +0000
ROA not before: Fri 21 Oct 2022 12:00:00 +0000
ROA not after: Sat 26 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.153.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a7:16:ab:1b:d5:15:b6:85:72:60:05:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 12:00:00 2022 GMT
Not After : Nov 26 05:00:00 2022 GMT
Subject: CN=0d527419-0d2e-44fd-be43-548e3747eddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:82:8e:76:83:8a:60:22:13:79:57:58:32:30:
1a:5c:6a:de:cd:61:fb:eb:05:2b:e4:d9:f7:32:d0:
f1:b8:02:93:50:f2:9c:52:4d:6e:a3:0e:92:af:4e:
5d:37:5b:c0:5f:13:1e:c5:db:08:14:2a:fb:18:9c:
2a:e2:51:f7:4d:80:0a:a5:a5:a3:32:44:5b:23:c2:
ac:54:02:9b:06:7c:29:48:2c:98:bf:40:ce:af:24:
02:d4:94:60:c3:48:aa:c1:58:f3:2e:f2:65:78:94:
fb:22:ed:5a:51:6a:5b:5c:61:10:e0:9b:e1:ae:d6:
34:85:bc:e2:5e:6b:f5:57:eb:04:58:0f:b2:3a:83:
bc:0d:79:94:f5:de:2a:35:b4:ae:91:dd:a5:2a:2f:
5a:f3:5e:cb:ab:fd:21:2e:12:3c:e7:21:14:69:06:
dc:41:b0:83:19:05:30:d6:34:15:c5:e1:19:01:4b:
1c:28:a8:a0:2b:7f:ae:cd:c7:f3:c0:25:75:09:05:
3a:bb:45:c5:73:8f:d0:29:38:98:fe:10:bd:ac:c7:
ec:11:cc:92:be:7f:e8:fa:7e:ca:a4:f6:6c:ba:8a:
bd:c2:58:3a:3a:8d:85:4b:78:3e:28:a2:16:49:e8:
e6:56:29:04:db:96:d5:32:bd:75:5d:e0:af:ab:7e:
bb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EB:32:80:FE:2C:CF:C7:33:A3:9E:77:AD:D9:66:C3:5D:3E:B6:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b708e42-4a93-3e12-a5ec-1f7cc5bd7bbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.153.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:2d:c7:5b:e0:ee:4a:83:a2:ff:5e:d6:28:37:e0:b4:02:f5:
76:f3:90:86:a9:85:69:75:ab:20:63:85:9d:86:d8:6f:9f:fc:
4b:5f:52:44:40:fa:eb:3e:7a:58:2f:44:d4:e8:3b:47:ce:23:
24:7b:d1:99:04:fe:48:55:ba:fa:f5:af:c0:24:b2:1b:01:90:
d2:b4:92:18:11:dc:0a:1b:0e:2e:9a:6e:0d:23:07:e8:06:e3:
b5:cc:04:08:20:d0:aa:cd:22:84:cb:10:5f:60:27:d4:33:b0:
8e:49:09:e0:54:71:ad:7b:87:a2:18:e1:c7:ec:d2:98:c0:d8:
2b:4d:3a:ec:74:84:79:56:21:b7:30:2d:8f:c7:8e:6e:b3:22:
fe:6e:6f:72:83:1c:4c:39:10:e6:82:ab:9c:2f:3d:16:63:11:
08:84:3e:16:62:ec:aa:ca:93:cb:c6:35:60:46:f3:f5:5c:83:
a8:fe:42:5a:a1:1f:12:9d:22:e2:6b:68:ba:2d:13:ea:72:a0:
fa:24:8d:9f:ce:2b:3f:3b:07:9b:0a:60:9f:b0:f9:e4:4e:3e:
a0:6b:4f:39:d7:e2:9d:28:36:48:37:3c:73:11:78:81:3d:5f:
68:cc:c8:da:c3:df:26:bb:49:6f:b6:9a:c0:2a:25:fc:28:8a:
f0:a3:3d:45
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+nFqsb1RW2hXJgBcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAyMTEyMDAwMFoXDTIyMTEyNjA1MDAwMFowLzEtMCsGA1UEAxMk
MGQ1Mjc0MTktMGQyZS00NGZkLWJlNDMtNTQ4ZTM3NDdlZGRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoKOdoOKYCITeVdYMjAaXGrezWH76wUr5Nn3
MtDxuAKTUPKcUk1uow6Sr05dN1vAXxMexdsIFCr7GJwq4lH3TYAKpaWjMkRbI8Ks
VAKbBnwpSCyYv0DOryQC1JRgw0iqwVjzLvJleJT7Iu1aUWpbXGEQ4JvhrtY0hbzi
Xmv1V+sEWA+yOoO8DXmU9d4qNbSukd2lKi9a817Lq/0hLhI85yEUaQbcQbCDGQUw
1jQVxeEZAUscKKigK3+uzcfzwCV1CQU6u0XFc4/QKTiY/hC9rMfsEcySvn/o+n7K
pPZsuoq9wlg6Oo2FS3g+KKIWSejmVikE25bVMr11XeCvq367kwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFI3rMoD+LM/HM6Oed63ZZsNdPra3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOGI3MDhlNDItNGE5My0z
ZTEyLWE1ZWMtMWY3Y2M1YmQ3YmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEpkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPi3HW+DuSoOi/17WKDfgtAL1dvOQhqmFaXWrIGOFnYbYb5/8S19SRED6
6z56WC9E1Og7R84jJHvRmQT+SFW6+vWvwCSyGwGQ0rSSGBHcChsOLppuDSMH6Abj
tcwECCDQqs0ihMsQX2An1DOwjkkJ4FRxrXuHohjhx+zSmMDYK0067HSEeVYhtzAt
j8eObrMi/m5vcoMcTDkQ5oKrnC89FmMRCIQ+FmLsqsqTy8Y1YEbz9VyDqP5CWqEf
Ep0i4mtoui0T6nKg+iSNn84rPzsHmwpgn7D55E4+oGtPOdfinSg2SDc8cxF4gT1f
aMzI2sPfJrtJb7aawCol/CiK8KM9RQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 21:40:41 2025 by rpki-client