Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8fac6476-1a76-36af-bff2-e306e3bd2092.roa
File: 8fac6476-1a76-36af-bff2-e306e3bd2092.roa (raw, json)
Hash identifier: sDeT3cLZdB3o1qC4dCHaa74wocWUgYrl5+J4NPx6NS0=
Subject key identifier: 51:B4:0D:CC:34:0D:91:60:4D:33:63:22:38:98:34:C3:31:36:9D:1F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE4E33EC0A3D3008B216C40C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8fac6476-1a76-36af-bff2-e306e3bd2092.roa
Signing time: Fri 12 Aug 2022 12:00:00 +0000
ROA not before: Fri 12 Aug 2022 12:00:00 +0000
ROA not after: Sat 17 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.228.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e4:e3:3e:c0:a3:d3:00:8b:21:6c:40:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 12 12:00:00 2022 GMT
Not After : Sep 17 04:00:00 2022 GMT
Subject: CN=3b359ef6-8c43-4dcf-b23e-c0d32f609a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:fa:7c:a6:6f:0d:ff:27:56:72:0e:6a:c4:
f3:53:1f:64:0a:ee:6c:48:20:ee:cf:ef:f4:4a:5e:
cf:b3:f4:bb:9f:89:fd:fb:ae:b9:12:65:5b:46:43:
4d:99:65:13:24:84:5a:e9:34:bd:a5:52:52:2f:4c:
b5:93:b0:be:c0:b9:b6:07:95:81:27:71:2d:e1:dc:
94:3f:a1:90:c5:c6:d7:fa:46:b5:fc:98:fe:6a:7f:
72:24:f2:05:c1:4f:d1:ec:51:5a:fc:e4:3e:9f:08:
9e:1c:8f:d1:de:a3:2e:25:a3:0e:6a:dc:2b:32:3f:
c8:4c:fd:91:b9:ee:97:0e:34:32:2e:0f:13:0a:d1:
93:88:c6:fa:81:68:aa:16:38:5d:31:cc:26:79:f5:
06:cd:db:ed:65:9d:1b:b6:8d:a5:23:ac:45:1f:3a:
71:46:58:01:07:27:fa:2d:ed:09:4e:74:f8:ec:18:
6b:5b:3d:bb:32:5b:af:0b:89:51:dd:26:14:d2:d5:
12:5c:e9:8b:8b:46:5f:01:78:30:db:1e:ee:2d:a0:
9e:38:93:dc:11:22:e1:01:b8:82:87:ea:bd:d6:3d:
3a:9d:96:92:05:f0:89:1d:d4:fb:b0:95:20:c6:4e:
9c:a8:d8:64:16:f8:69:32:ca:c2:c0:1e:e5:12:90:
aa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B4:0D:CC:34:0D:91:60:4D:33:63:22:38:98:34:C3:31:36:9D:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8fac6476-1a76-36af-bff2-e306e3bd2092.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.228.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:0c:b0:11:64:df:54:1f:f4:08:df:7b:c7:b7:60:9f:c2:f7:
d3:e8:fa:0e:9c:7e:35:f3:b6:ac:fa:7e:21:59:e0:3d:20:07:
af:d2:d7:de:e4:70:19:c5:e5:5c:97:5e:0c:8a:8d:a3:55:6f:
11:ec:b8:13:4f:c5:a7:dc:69:00:95:53:86:14:ae:32:f2:8e:
b9:b7:36:a2:05:77:b2:48:85:2f:d9:cf:e1:1b:11:eb:62:85:
9b:24:9c:ea:82:f4:1d:ee:32:d0:30:e4:a0:b8:15:d0:0e:e5:
a2:fc:1a:9c:54:2b:21:16:78:b6:9b:49:48:e3:ad:b4:08:57:
55:db:42:ea:2c:36:b7:5d:38:30:9b:cb:f4:fa:de:0e:dc:ba:
dc:2e:28:24:99:1a:8b:11:54:b9:84:ad:2f:e3:b4:e2:ad:c3:
25:ab:aa:1e:55:f0:d7:95:bd:34:05:3d:0e:5c:14:e7:8b:fe:
26:7a:49:4a:cb:ea:4d:5a:24:74:c8:44:b0:65:a2:37:b3:cc:
40:ff:29:8d:9c:a6:46:28:13:18:7d:40:fd:b9:aa:37:69:14:
9e:4e:ad:40:fe:bb:12:e5:ad:7e:7b:80:d7:5e:d5:66:6f:fc:
68:fa:bb:9d:24:5b:b4:4d:25:5c:f5:ee:b7:90:7b:39:42:a3:
7d:03:a7:62
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD7k4z7Ao9MAiyFsQMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgxMjEyMDAwMFoXDTIyMDkxNzA0MDAwMFowLzEtMCsGA1UEAxMk
M2IzNTllZjYtOGM0My00ZGNmLWIyM2UtYzBkMzJmNjA5YTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9b6fKZvDf8nVnIOasTzUx9kCu5sSCDuz+/0
Sl7Ps/S7n4n9+665EmVbRkNNmWUTJIRa6TS9pVJSL0y1k7C+wLm2B5WBJ3Et4dyU
P6GQxcbX+ka1/Jj+an9yJPIFwU/R7FFa/OQ+nwieHI/R3qMuJaMOatwrMj/ITP2R
ue6XDjQyLg8TCtGTiMb6gWiqFjhdMcwmefUGzdvtZZ0bto2lI6xFHzpxRlgBByf6
Le0JTnT47BhrWz27MluvC4lR3SYU0tUSXOmLi0ZfAXgw2x7uLaCeOJPcESLhAbiC
h+q91j06nZaSBfCJHdT7sJUgxk6cqNhkFvhpMsrCwB7lEpCqxQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFG0Dcw0DZFgTTNjIjiYNMMxNp0fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOGZhYzY0NzYtMWE3Ni0z
NmFmLWJmZjItZTMwNmUzYmQyMDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEuQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGgywEWTfVB/0CN97x7dgn8L30+j6Dpx+NfO2rPp+IVngPSAHr9LX3uRw
GcXlXJdeDIqNo1VvEey4E0/Fp9xpAJVThhSuMvKOubc2ogV3skiFL9nP4RsR62KF
mySc6oL0He4y0DDkoLgV0A7lovwanFQrIRZ4tptJSOOttAhXVdtC6iw2t104MJvL
9PreDty63C4oJJkaixFUuYStL+O04q3DJauqHlXw15W9NAU9DlwU54v+JnpJSsvq
TVokdMhEsGWiN7PMQP8pjZymRigTGH1A/bmqN2kUnk6tQP67EuWtfnuA117VZm/8
aPq7nSRbtE0lXPXut5B7OUKjfQOnYg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:42:44 2025 by rpki-client