Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8ece7506-cda4-324f-8133-fab45dc9364d.roa
File: 8ece7506-cda4-324f-8133-fab45dc9364d.roa (raw, json)
Hash identifier: pI7trhyqcveBgwLEnlDcEJm5SwjlL4K0jCX9JsnCsNg=
Subject key identifier: 35:CC:A9:9F:C3:31:D5:CE:0F:AD:6E:1B:86:A1:BD:DE:62:2F:27:3F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584043C65392A354D725B5329888
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8ece7506-cda4-324f-8133-fab45dc9364d.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.184.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:43:c6:53:92:a3:54:d7:25:b5:32:98:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=801c4a4a-7b58-4a85-a0cb-24138e239436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:59:45:68:eb:ae:3e:65:4b:a8:9f:d5:4e:3d:
6a:45:7d:bc:c9:27:f7:d2:36:e3:17:c0:61:7b:50:
02:63:f4:51:30:6c:97:ae:46:c0:04:e3:11:d4:8c:
cc:7f:a8:20:f6:8e:5d:3b:9d:23:e1:8c:da:86:cc:
8b:f7:2a:34:74:6f:0e:28:83:c2:ac:6e:56:58:7e:
24:92:d7:2f:cf:11:6f:dd:dc:90:bd:fb:bd:48:e5:
1e:0a:0b:01:59:61:1a:f8:42:b7:6b:46:6e:dd:20:
cc:94:1e:27:d3:b8:fb:7e:6d:12:51:cd:08:1e:da:
a1:c4:20:6b:2f:53:33:b0:aa:0a:1f:76:46:96:e0:
77:76:96:9b:9b:e7:43:10:af:83:83:d0:38:39:b2:
5a:85:6c:18:ed:71:fd:72:aa:9a:ae:2c:60:66:e5:
18:8d:53:08:64:c1:d1:68:72:9f:88:ea:71:e1:de:
f9:80:ec:43:79:72:c4:af:7f:93:b8:37:c5:f3:52:
b2:4a:53:47:44:90:88:f6:94:03:98:98:90:92:70:
9b:39:76:b6:5b:35:41:0d:47:28:59:2e:e2:aa:e6:
2e:14:5b:8e:41:e2:1e:8c:91:f8:2c:ff:7e:19:45:
d7:7b:ef:7e:f2:51:91:a8:53:94:09:ae:67:ca:bc:
3b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CC:A9:9F:C3:31:D5:CE:0F:AD:6E:1B:86:A1:BD:DE:62:2F:27:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8ece7506-cda4-324f-8133-fab45dc9364d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.184.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:5a:36:95:64:db:fa:1b:b2:ff:3d:2c:83:87:b2:8d:a6:6b:
9f:cc:c8:78:43:59:11:3d:72:d2:7c:21:5e:d8:71:1e:b5:ec:
b3:c2:33:a0:b3:da:9b:30:6c:15:ec:2d:44:6b:2e:82:cb:47:
0b:d3:68:7e:88:4c:ac:af:dc:98:63:3f:b2:b8:90:6b:02:53:
f8:a0:71:59:77:c7:48:44:4a:b2:e2:f8:50:92:b6:6a:2c:86:
4c:84:6c:ee:b0:d1:16:3a:8e:67:83:18:a4:05:4e:36:4d:d7:
8e:db:ba:3e:4e:6e:ea:92:24:a6:04:c8:ab:83:76:b7:89:0e:
d9:61:d6:d6:a2:1f:d3:8b:32:c3:1b:46:df:49:50:7c:a5:f2:
ca:08:4f:a1:70:e6:7c:c3:2b:89:9c:5f:37:73:57:ab:fd:e1:
7c:93:60:2f:8a:9c:b8:22:4d:66:4a:13:3e:71:3c:a5:bc:a7:
5f:73:44:01:17:01:7a:9d:a4:19:ec:8e:56:85:e0:f6:63:af:
d7:9c:40:bb:70:74:be:60:23:a5:84:46:61:91:11:c5:80:6f:
88:54:c6:12:57:dd:c4:9e:13:1e:8b:c7:ba:a7:e7:79:ca:99:
a1:ea:ab:f1:91:a4:78:0b:18:d8:8a:45:3d:f7:2a:7f:77:4f:
69:1d:3f:4c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBDxlOSo1TXJbUymIgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNjEyMDAwMFoXDTIzMDEyMTA1MDAwMFowLzEtMCsGA1UEAxMk
ODAxYzRhNGEtN2I1OC00YTg1LWEwY2ItMjQxMzhlMjM5NDM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1lFaOuuPmVLqJ/VTj1qRX28ySf30jbjF8Bh
e1ACY/RRMGyXrkbABOMR1IzMf6gg9o5dO50j4YzahsyL9yo0dG8OKIPCrG5WWH4k
ktcvzxFv3dyQvfu9SOUeCgsBWWEa+EK3a0Zu3SDMlB4n07j7fm0SUc0IHtqhxCBr
L1MzsKoKH3ZGluB3dpabm+dDEK+Dg9A4ObJahWwY7XH9cqqarixgZuUYjVMIZMHR
aHKfiOpx4d75gOxDeXLEr3+TuDfF81KySlNHRJCI9pQDmJiQknCbOXa2WzVBDUco
WS7iquYuFFuOQeIejJH4LP9+GUXXe+9+8lGRqFOUCa5nyrw7VwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDXMqZ/DMdXOD61uG4ahvd5iLyc/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOGVjZTc1MDYtY2RhNC0z
MjRmLTgxMzMtZmFiNDVkYzkzNjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBErgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYlo2lWTb+huy/z0sg4eyjaZrn8zIeENZET1y0nwhXthxHrXss8IzoLPa
mzBsFewtRGsugstHC9NofohMrK/cmGM/sriQawJT+KBxWXfHSERKsuL4UJK2aiyG
TIRs7rDRFjqOZ4MYpAVONk3Xjtu6Pk5u6pIkpgTIq4N2t4kO2WHW1qIf04sywxtG
30lQfKXyyghPoXDmfMMriZxfN3NXq/3hfJNgL4qcuCJNZkoTPnE8pbynX3NEARcB
ep2kGeyOVoXg9mOv15xAu3B0vmAjpYRGYZERxYBviFTGElfdxJ4THovHuqfnecqZ
oeqr8ZGkeAsY2IpFPfcqf3dPaR0/TA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:08:22 2025 by rpki-client