Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/948fc371-a56e-3c82-82f6-ddefff371d70.roa
File: 948fc371-a56e-3c82-82f6-ddefff371d70.roa (raw, json)
Hash identifier: kgmsVyXKcvOZWWakUkSMQqi0+9AQuZaczeA34aC/eJ0=
Subject key identifier: 4D:6F:B4:5E:8C:79:BC:69:D1:CF:C8:72:DF:91:73:4F:4D:38:4F:26
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE406709CAE6412C2CC66FB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/948fc371-a56e-3c82-82f6-ddefff371d70.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.34.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:06:70:9c:ae:64:12:c2:cc:66:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=3a2c3192-29a9-4c78-b58c-a1eb20efb4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b4:c4:ce:17:74:e9:e3:f1:9c:ea:41:34:bd:
54:f6:bb:b0:7a:37:a3:9f:5e:7a:9a:2c:cd:c4:80:
98:f3:ea:25:bf:61:18:f6:05:42:fc:f0:a1:e2:c3:
8a:cf:31:5e:58:23:cd:b6:9c:6d:5a:18:7c:9f:3a:
0c:1d:57:f2:99:28:84:26:7b:81:fd:9a:c6:ad:97:
2e:8e:77:ef:c5:f8:cc:ba:95:e0:f0:a9:b9:8e:66:
0b:21:10:1a:f2:38:f5:cc:d3:52:ce:59:53:08:12:
29:ba:47:2d:44:d5:0f:e7:fe:33:03:77:bb:07:3b:
76:2c:bb:11:a3:f7:08:44:00:e9:c0:10:cb:ab:b9:
5d:12:42:4d:4e:a5:84:ff:7b:e3:e7:78:08:3e:68:
74:30:1d:8b:e7:ed:c2:8a:fc:0f:8b:16:1b:42:9a:
a8:02:0c:61:31:d1:05:0c:a7:62:17:b6:47:8b:47:
8e:55:2e:34:e5:e5:e4:a3:79:b7:be:af:9c:1f:33:
54:96:b4:b6:97:1b:64:ab:ff:20:a7:9f:f9:8e:65:
20:9b:fb:99:63:9f:0c:aa:3e:51:05:c7:d9:4b:08:
a5:bc:40:03:da:22:59:1f:61:fd:bc:d5:4f:fe:94:
09:42:58:bb:69:b9:a7:7e:9b:5a:32:a2:03:43:2f:
63:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6F:B4:5E:8C:79:BC:69:D1:CF:C8:72:DF:91:73:4F:4D:38:4F:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/948fc371-a56e-3c82-82f6-ddefff371d70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.34.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:90:af:7b:bc:30:70:ed:44:e2:44:be:1e:44:fa:8b:3b:f5:
f6:9f:56:80:08:48:f5:e1:e2:a6:53:57:f1:8a:f8:10:73:56:
a0:fc:50:11:db:3b:b3:ba:01:a0:8e:28:e4:27:1f:67:4b:53:
c6:dc:fa:cb:64:20:0c:b9:8e:e4:c8:77:16:07:77:eb:5d:2f:
a4:cd:54:8a:91:88:92:1f:6b:6f:b9:82:a2:18:2e:37:21:30:
a9:11:f6:25:db:7a:dd:b6:c7:01:cf:ae:94:91:80:e2:8f:bf:
ad:4e:75:c1:f6:ae:4e:c6:c3:4c:6b:90:5d:7b:53:a1:ae:c8:
a9:b3:4c:a1:66:b3:3b:ac:6a:e4:b2:56:bb:18:1e:01:58:b9:
e4:1a:34:4a:40:fc:b0:03:9f:e7:67:a2:52:11:8e:a5:00:62:
c9:04:19:ea:b1:bb:ee:fc:87:25:b9:bb:dc:4f:23:48:03:0e:
c4:81:62:4d:92:d3:10:37:f0:5c:0d:66:e8:31:8b:f6:46:4e:
42:05:7a:1d:3a:e9:5e:ca:3c:8c:f2:0c:25:a3:75:d9:0c:1c:
ba:04:e2:b3:98:5f:84:12:5e:e0:e7:00:af:0b:8e:25:d6:8f:
d0:f9:5b:6c:d8:7d:9b:e2:8f:c2:20:c0:e1:a6:80:d5:23:57:
3d:02:42:b1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzkBnCcrmQSwsxm+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIxMTA1MDAwMFoXDTIyMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
M2EyYzMxOTItMjlhOS00Yzc4LWI1OGMtYTFlYjIwZWZiNGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbTEzhd06ePxnOpBNL1U9ruwejejn156mizN
xICY8+olv2EY9gVC/PCh4sOKzzFeWCPNtpxtWhh8nzoMHVfymSiEJnuB/ZrGrZcu
jnfvxfjMupXg8Km5jmYLIRAa8jj1zNNSzllTCBIpukctRNUP5/4zA3e7Bzt2LLsR
o/cIRADpwBDLq7ldEkJNTqWE/3vj53gIPmh0MB2L5+3CivwPixYbQpqoAgxhMdEF
DKdiF7ZHi0eOVS405eXko3m3vq+cHzNUlrS2lxtkq/8gp5/5jmUgm/uZY58Mqj5R
BcfZSwilvEAD2iJZH2H9vNVP/pQJQli7abmnfptaMqIDQy9jiwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFE1vtF6Mebxp0c/Ict+Rc09NOE8mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOTQ4ZmMzNzEtYTU2ZS0z
YzgyLTgyZjYtZGRlZmZmMzcxZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEiIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAsJCve7wwcO1E4kS+HkT6izv19p9WgAhI9eHiplNX8Yr4EHNWoPxQEds7
s7oBoI4o5CcfZ0tTxtz6y2QgDLmO5Mh3Fgd3610vpM1UipGIkh9rb7mCohguNyEw
qRH2Jdt63bbHAc+ulJGA4o+/rU51wfauTsbDTGuQXXtToa7IqbNMoWazO6xq5LJW
uxgeAVi55Bo0SkD8sAOf52eiUhGOpQBiyQQZ6rG77vyHJbm73E8jSAMOxIFiTZLT
EDfwXA1m6DGL9kZOQgV6HTrpXso8jPIMJaN12QwcugTis5hfhBJe4OcArwuOJdaP
0PlbbNh9m+KPwiDA4aaA1SNXPQJCsQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:52:54 2025 by rpki-client