Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d92b232-1334-312e-8369-df86a1ac4160.roa
File: 8d92b232-1334-312e-8369-df86a1ac4160.roa (raw, json)
Hash identifier: AW+/12rxPACAkeqRKL/SYmBK+/I0NOfO+KxBYS3AtZQ=
Subject key identifier: D5:C0:7F:8B:C9:78:E3:0A:A2:16:8A:25:3F:74:4F:6F:A3:1F:DC:87
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD15BB2A30C0A3BDD5A8F500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d92b232-1334-312e-8369-df86a1ac4160.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.137.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:15:bb:2a:30:c0:a3:bd:d5:a8:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=c205f2aa-e992-4612-ac88-165d2dfdc053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9c:9a:04:2a:d6:8c:9e:9f:1f:72:88:70:1f:
06:11:42:7f:29:67:f0:87:43:00:01:81:8d:0e:07:
f9:7c:55:35:bb:f1:31:19:b2:ad:c8:c4:cb:cc:18:
87:27:78:64:1b:98:32:26:64:7c:b1:c6:4d:81:54:
2e:cb:95:dd:05:e6:37:2b:99:0d:a5:75:cd:ec:bc:
1c:43:9e:50:e6:4c:d1:79:99:a0:33:e3:7b:dc:69:
79:1a:a0:2c:11:82:36:99:12:6e:01:81:0c:b3:84:
81:47:38:84:7b:8c:33:49:fb:c3:5b:30:3b:2e:d4:
2e:40:ed:8d:59:a8:61:08:b8:16:32:d8:f3:31:ec:
53:60:84:0d:30:a1:90:8c:3d:1f:c5:59:cb:2c:5b:
d3:fa:45:34:f3:6b:78:ac:7b:df:96:6e:41:b6:fd:
84:5a:76:64:bf:19:ff:0a:6f:ac:81:db:8e:46:27:
e4:98:a1:b1:67:43:e0:fe:08:50:95:89:b9:7a:7d:
4d:ce:10:2e:d9:26:90:bf:87:3a:95:67:9b:43:1d:
55:e4:fa:f3:5a:6b:10:de:d1:fc:50:9d:75:e0:de:
91:3f:42:c7:ab:fd:8a:d1:d8:8a:dc:cf:15:1c:27:
6b:c1:b9:19:c2:39:6d:eb:d9:56:9e:2a:e2:f8:20:
0a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C0:7F:8B:C9:78:E3:0A:A2:16:8A:25:3F:74:4F:6F:A3:1F:DC:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d92b232-1334-312e-8369-df86a1ac4160.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:86:7a:cd:e5:45:08:99:eb:4a:07:95:10:cd:9f:aa:fc:73:
c0:0c:66:62:12:64:1e:11:be:7b:03:38:c4:99:e6:7c:4f:2f:
d6:89:a7:c6:46:44:84:de:d2:07:c7:38:2e:59:b6:63:97:a8:
f4:60:28:06:2c:7f:21:e1:41:84:0a:b9:ce:bd:83:93:3a:52:
3d:97:fd:77:de:9c:d2:c0:9f:35:5f:54:7d:9f:c2:52:38:6f:
61:74:33:15:8d:ee:55:bf:30:a4:e3:b5:1f:a2:19:ef:d9:af:
df:b5:8f:5d:5e:05:cf:2e:4a:ca:19:b8:5d:eb:35:28:d9:31:
bb:b1:3e:f8:0f:2b:19:49:20:63:26:b5:9f:84:2b:18:f6:6e:
2c:f1:0a:52:ea:f8:a5:2f:f5:51:af:42:2f:ae:9d:c3:49:ab:
71:73:69:3f:61:8b:4f:d6:7b:fc:0c:5c:18:f3:df:86:cb:9d:
36:6f:84:17:75:9b:69:da:03:1c:df:43:22:f6:f0:83:9d:24:
3b:08:04:e1:6d:f1:e5:35:b9:de:71:e7:db:8c:06:03:54:fe:
59:c9:b6:47:3a:4c:12:ac:cf:31:45:5d:1e:41:96:b3:0c:c7:
87:be:8c:d3:5b:b1:c4:1c:9e:09:cc:f5:ad:36:44:bb:fc:85:
19:16:12:28
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDy9FbsqMMCjvdWo9QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDEyODA1MDAwMFoXDTIyMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
YzIwNWYyYWEtZTk5Mi00NjEyLWFjODgtMTY1ZDJkZmRjMDUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJyaBCrWjJ6fH3KIcB8GEUJ/KWfwh0MAAYGN
Dgf5fFU1u/ExGbKtyMTLzBiHJ3hkG5gyJmR8scZNgVQuy5XdBeY3K5kNpXXN7Lwc
Q55Q5kzReZmgM+N73Gl5GqAsEYI2mRJuAYEMs4SBRziEe4wzSfvDWzA7LtQuQO2N
WahhCLgWMtjzMexTYIQNMKGQjD0fxVnLLFvT+kU082t4rHvflm5Btv2EWnZkvxn/
Cm+sgduORifkmKGxZ0Pg/ghQlYm5en1NzhAu2SaQv4c6lWebQx1V5PrzWmsQ3tH8
UJ114N6RP0LHq/2K0diK3M8VHCdrwbkZwjlt69lWniri+CAKnQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNXAf4vJeOMKohaKJT90T2+jH9yHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOGQ5MmIyMzItMTMzNC0z
MTJlLTgzNjktZGY4NmExYWM0MTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEokwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAQ4Z6zeVFCJnrSgeVEM2fqvxzwAxmYhJkHhG+ewM4xJnmfE8v1omnxkZE
hN7SB8c4Llm2Y5eo9GAoBix/IeFBhAq5zr2DkzpSPZf9d96c0sCfNV9UfZ/CUjhv
YXQzFY3uVb8wpOO1H6IZ79mv37WPXV4Fzy5Kyhm4Xes1KNkxu7E++A8rGUkgYya1
n4QrGPZuLPEKUur4pS/1Ua9CL66dw0mrcXNpP2GLT9Z7/AxcGPPfhsudNm+EF3Wb
adoDHN9DIvbwg50kOwgE4W3x5TW53nHn24wGA1T+Wcm2RzpMEqzPMUVdHkGWswzH
h76M01uxxByeCcz1rTZEu/yFGRYSKA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:02 2025 by rpki-client