Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9271dc91-e60a-38ae-a0be-49edc62239e3.roa
File: 9271dc91-e60a-38ae-a0be-49edc62239e3.roa (raw, json)
Hash identifier: y+AYCkGsn/G+9QPHt7YDq8BVSxi1URUbrfXtlMlEi6A=
Subject key identifier: 0C:3C:0C:30:69:75:A7:B4:A0:80:13:31:FC:8E:2D:64:6A:4E:50:64
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B396A4858D5C5D0229FFD80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9271dc91-e60a-38ae-a0be-49edc62239e3.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.43.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:39:6a:48:58:d5:c5:d0:22:9f:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=63336e08-80ee-4604-99e9-13380245fa04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:2d:fb:4e:14:df:3b:7e:65:4d:f9:ff:c0:
ef:61:bd:7b:4b:8b:81:1d:6e:60:47:19:a9:31:b7:
ee:50:91:ef:53:fe:7d:d3:66:17:f7:ff:a3:48:b0:
6c:25:78:8d:f6:cf:05:60:de:34:7f:f6:2e:dd:b9:
bf:1c:aa:6f:b6:ee:1e:e3:d1:de:ad:b2:db:a4:2e:
b6:76:6c:cc:31:33:e7:35:d3:5f:a6:b4:e6:b6:b0:
98:34:a7:f3:54:63:fc:4f:6e:d1:76:d8:6f:c9:c0:
21:f7:c8:4a:7a:62:24:4d:7e:19:7b:c5:2a:f0:89:
11:27:1a:60:93:ed:47:07:35:df:b7:a0:a5:02:b7:
0a:25:f8:34:ab:21:ff:dd:f4:e7:04:da:ec:79:8d:
15:f0:5f:12:e9:a2:cf:96:91:cd:1e:b5:97:b4:06:
78:73:a1:be:2f:2c:3c:cc:61:86:75:06:da:87:4f:
3f:0e:42:fd:94:15:bf:f7:f8:10:c9:af:4f:f3:d3:
7e:e8:4c:fa:5a:c5:36:06:cf:a6:ca:77:c8:2f:99:
10:21:14:10:50:ba:08:ad:c6:1a:94:78:10:b5:7a:
6b:f8:da:d5:18:8e:d6:f1:2d:e6:05:5f:99:ca:f0:
e9:46:b8:ea:f3:fc:5b:05:36:31:38:25:a2:15:6d:
e7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3C:0C:30:69:75:A7:B4:A0:80:13:31:FC:8E:2D:64:6A:4E:50:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9271dc91-e60a-38ae-a0be-49edc62239e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.43.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:70:b3:97:be:9a:ca:37:f0:30:c4:7f:51:8e:8d:3a:34:48:
ff:eb:51:92:43:b8:05:2f:30:5e:14:95:f5:ab:93:f0:f7:dd:
93:f8:6a:fd:e7:73:5c:6d:98:b6:22:8a:ce:96:39:86:f9:0e:
9a:24:74:e9:05:c4:e0:ed:92:29:40:08:0c:c9:4a:f2:12:4b:
36:9f:54:f5:25:5b:e6:f6:6b:43:c4:bb:35:08:c3:f4:fd:d8:
e5:a7:cf:72:70:10:2d:1c:fe:69:d3:17:4d:24:ed:d8:6b:9c:
d6:dc:d4:3e:2a:33:2e:18:9b:04:55:ea:44:27:af:09:05:d6:
e8:a6:7e:b0:b5:f1:66:7b:9b:66:fa:dd:76:7e:c8:ab:24:5d:
85:4c:82:ca:15:88:7a:53:db:12:d6:81:ea:9b:ff:7b:63:a0:
af:4c:d4:39:ab:5c:7d:0c:a5:1a:86:85:b2:a6:3d:22:91:5f:
a8:d5:11:6c:e9:c1:3b:52:e7:ed:ba:b7:a5:38:33:41:11:d8:
8d:70:d8:8b:04:13:78:fc:dc:41:f2:c0:c1:ce:f9:d3:3c:d9:
52:1c:e0:69:19:31:bb:a3:39:5f:1f:93:0e:c0:80:82:6c:3e:
a3:b4:45:e9:9d:07:88:ed:f8:01:82:89:f7:0c:c6:b5:98:5a:
6c:be:f5:5f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0LOWpIWNXF0CKf/YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIyNTA1MDAwMFoXDTIyMDQwMTA0MDAwMFowLzEtMCsGA1UEAxMk
NjMzMzZlMDgtODBlZS00NjA0LTk5ZTktMTMzODAyNDVmYTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXkt+04U3zt+ZU35/8DvYb17S4uBHW5gRxmp
MbfuUJHvU/5902YX9/+jSLBsJXiN9s8FYN40f/Yu3bm/HKpvtu4e49HerbLbpC62
dmzMMTPnNdNfprTmtrCYNKfzVGP8T27RdthvycAh98hKemIkTX4Ze8Uq8IkRJxpg
k+1HBzXft6ClArcKJfg0qyH/3fTnBNrseY0V8F8S6aLPlpHNHrWXtAZ4c6G+Lyw8
zGGGdQbah08/DkL9lBW/9/gQya9P89N+6Ez6WsU2Bs+mynfIL5kQIRQQULoIrcYa
lHgQtXpr+NrVGI7W8S3mBV+ZyvDpRrjq8/xbBTYxOCWiFW3neQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAw8DDBpdae0oIATMfyOLWRqTlBkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOTI3MWRjOTEtZTYwYS0z
OGFlLWEwYmUtNDllZGM2MjIzOWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEiswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEALnCzl76ayjfwMMR/UY6NOjRI/+tRkkO4BS8wXhSV9auT8Pfdk/hq/edz
XG2YtiKKzpY5hvkOmiR06QXE4O2SKUAIDMlK8hJLNp9U9SVb5vZrQ8S7NQjD9P3Y
5afPcnAQLRz+adMXTSTt2Guc1tzUPiozLhibBFXqRCevCQXW6KZ+sLXxZnubZvrd
dn7IqyRdhUyCyhWIelPbEtaB6pv/e2Ogr0zUOatcfQylGoaFsqY9IpFfqNURbOnB
O1Ln7bq3pTgzQRHYjXDYiwQTePzcQfLAwc750zzZUhzgaRkxu6M5Xx+TDsCAgmw+
o7RF6Z0HiO34AYKJ9wzGtZhabL71Xw==
-----END CERTIFICATE-----
Generated at Tue Jun 17 04:00:44 2025 by rpki-client