Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/957c7beb-82e4-357a-8635-8c09eb1e4e39.roa
File: 957c7beb-82e4-357a-8635-8c09eb1e4e39.roa (raw, json)
Hash identifier: 6V6CoHLZW/odS4Un3zlcqsSHNfFzhul4tIUVPzXCLR8=
Subject key identifier: 68:1C:38:A0:DC:FA:1D:70:C7:8D:9D:34:EC:78:9A:72:C9:C0:0D:E8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DFAE08DD63CF528DAF2BCA660
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/957c7beb-82e4-357a-8635-8c09eb1e4e39.roa
Signing time: Sat 21 May 2022 12:00:00 +0000
ROA not before: Sat 21 May 2022 12:00:00 +0000
ROA not after: Sun 26 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.124.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:fa:e0:8d:d6:3c:f5:28:da:f2:bc:a6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 21 12:00:00 2022 GMT
Not After : Jun 26 04:00:00 2022 GMT
Subject: CN=5daa2d3c-cfaa-415f-b788-33085f98c37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d5:10:55:3c:9b:50:55:f8:9a:00:54:92:59:
8b:08:63:45:fc:78:22:da:cf:70:96:92:cf:87:3f:
13:9b:25:74:6b:8b:1a:d7:45:19:fc:5c:20:9b:1f:
e4:79:27:fd:e2:3d:df:33:95:61:d2:03:fb:f3:60:
99:8f:52:bb:ec:e3:4c:db:0d:c7:52:54:e2:81:ea:
7c:31:34:10:23:91:c0:ff:b8:1b:7a:a3:ea:a9:7d:
73:e1:84:ae:b8:83:61:f8:ac:71:ed:3c:1f:5a:ad:
94:1e:55:c1:a5:00:2c:56:9e:ff:0a:77:f1:4d:33:
00:b4:44:4d:1d:aa:98:e5:79:18:bb:6a:a2:f5:72:
45:43:b6:fe:95:82:d5:89:89:15:70:ea:bb:7f:25:
c6:16:9f:3b:1a:ab:1c:73:02:de:4f:2b:e3:45:a1:
53:7f:8b:22:eb:9b:06:57:48:55:ff:1a:92:22:c5:
57:79:34:cb:30:b7:99:89:58:22:56:be:95:c3:78:
c8:f2:41:8c:bf:89:5e:53:b9:f2:19:6a:20:e9:84:
8b:f7:57:12:f1:3c:fc:7a:bd:72:15:f0:0b:dc:57:
41:31:ab:b9:c0:76:ea:c5:85:a6:96:48:a2:82:cd:
fe:ec:b9:53:1f:45:c1:9d:c5:b8:03:11:c7:23:0b:
90:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1C:38:A0:DC:FA:1D:70:C7:8D:9D:34:EC:78:9A:72:C9:C0:0D:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/957c7beb-82e4-357a-8635-8c09eb1e4e39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.124.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:b7:07:3a:ea:df:a0:da:30:26:42:00:20:63:d3:66:14:3b:
f0:ab:88:d7:d6:86:9e:fd:13:ad:ec:26:b6:fe:b0:c6:3d:df:
c6:59:86:98:cf:d9:c7:c3:72:9c:3b:df:50:40:6f:d1:a6:9d:
14:7a:bc:06:77:ed:3b:c7:26:c4:89:ed:66:ba:14:ac:11:00:
79:bb:2e:d4:26:0d:82:29:f3:de:e1:1f:50:c8:6e:70:36:4e:
6f:04:1a:ff:dc:c5:3b:18:d0:f6:2f:23:bf:0b:21:8c:ba:2e:
21:a3:29:55:67:67:55:38:c0:be:ed:9b:cb:8c:15:13:49:a9:
e7:ba:57:80:74:30:cc:54:0b:2a:15:b6:5d:e3:c3:e6:67:a8:
5e:83:5c:07:15:65:9d:92:d0:38:69:c7:52:83:65:62:8f:0b:
5b:21:73:6b:c8:29:93:7e:0a:ec:7a:18:34:e6:7a:7e:7c:e6:
b1:9f:13:a4:3d:a9:11:a5:48:9c:5f:81:73:ff:98:ff:a5:b1:
21:3c:3b:2b:e4:1b:f2:39:73:30:b8:62:71:12:f0:5a:dd:e7:
26:4f:8c:fb:16:2e:9c:e5:5b:63:5d:69:00:1b:67:43:8f:01:
5e:0a:ac:a8:2a:0e:c5:47:ee:46:28:3f:c1:8f:e5:47:21:51:
1a:fe:6c:12
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD364I3WPPUo2vK8pmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUyMTEyMDAwMFoXDTIyMDYyNjA0MDAwMFowLzEtMCsGA1UEAxMk
NWRhYTJkM2MtY2ZhYS00MTVmLWI3ODgtMzMwODVmOThjMzdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNUQVTybUFX4mgBUklmLCGNF/Hgi2s9wlpLP
hz8TmyV0a4sa10UZ/Fwgmx/keSf94j3fM5Vh0gP782CZj1K77ONM2w3HUlTigep8
MTQQI5HA/7gbeqPqqX1z4YSuuINh+Kxx7TwfWq2UHlXBpQAsVp7/CnfxTTMAtERN
HaqY5XkYu2qi9XJFQ7b+lYLViYkVcOq7fyXGFp87GqsccwLeTyvjRaFTf4si65sG
V0hV/xqSIsVXeTTLMLeZiVgiVr6Vw3jI8kGMv4leU7nyGWog6YSL91cS8Tz8er1y
FfAL3FdBMau5wHbqxYWmlkiigs3+7LlTH0XBncW4AxHHIwuQOwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGgcOKDc+h1wx42dNOx4mnLJwA3oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOTU3YzdiZWItODJlNC0z
NTdhLTg2MzUtOGMwOWViMWU0ZTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEnwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAU7cHOurfoNowJkIAIGPTZhQ78KuI19aGnv0Trewmtv6wxj3fxlmGmM/Z
x8NynDvfUEBv0aadFHq8BnftO8cmxIntZroUrBEAebsu1CYNginz3uEfUMhucDZO
bwQa/9zFOxjQ9i8jvwshjLouIaMpVWdnVTjAvu2by4wVE0mp57pXgHQwzFQLKhW2
XePD5meoXoNcBxVlnZLQOGnHUoNlYo8LWyFza8gpk34K7HoYNOZ6fnzmsZ8TpD2p
EaVInF+Bc/+Y/6WxITw7K+Qb8jlzMLhicRLwWt3nJk+M+xYunOVbY11pABtnQ48B
XgqsqCoOxUfuRig/wY/lRyFRGv5sEg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:33:52 2025 by rpki-client