Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/97c53fb4-56b1-3ed0-9860-db46f4fde245.roa
File: 97c53fb4-56b1-3ed0-9860-db46f4fde245.roa (raw, json)
Hash identifier: Uqe1pzkQyphSWII68qCphuwoyLfbRk5YFSOOj9xMPB0=
Subject key identifier: 61:43:A8:56:85:89:3C:87:E5:93:74:F7:B2:B1:34:FF:6F:5B:73:4C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F5B90DC9A3012ED2502390A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/97c53fb4-56b1-3ed0-9860-db46f4fde245.roa
Signing time: Sat 24 Sep 2022 12:00:00 +0000
ROA not before: Sat 24 Sep 2022 12:00:00 +0000
ROA not after: Sun 30 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.103.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:5b:90:dc:9a:30:12:ed:25:02:39:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 24 12:00:00 2022 GMT
Not After : Oct 30 04:00:00 2022 GMT
Subject: CN=ab7c3d0a-897b-4e8a-9a1a-66cdaba775e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d0:c0:82:cb:80:60:85:ea:bc:ca:70:08:71:
f1:b9:b8:da:bd:c1:bc:48:f0:1d:da:8d:b6:31:20:
80:d8:e4:c6:5e:76:4d:81:57:de:fb:ae:15:a5:58:
43:98:f5:1e:29:96:6f:14:ed:b6:af:f4:d1:6a:95:
19:b6:1e:8b:89:dd:3c:ca:9d:5e:20:71:3a:ee:36:
e9:b7:8f:ee:ff:84:ee:f8:55:8f:69:01:f8:cd:e8:
99:a2:d4:86:c3:89:3e:0d:e8:1d:c4:5d:3c:7e:e3:
9a:85:cf:e2:11:93:cd:64:c4:58:a6:6d:5f:a8:c3:
ea:27:99:ba:ac:37:e9:04:23:e2:6e:53:b1:02:b0:
01:73:e9:a7:d2:8b:c8:a3:83:55:ac:15:fe:d3:b9:
1d:e2:aa:67:bf:ca:2d:42:1a:25:f4:de:7e:4e:6e:
8d:80:79:79:75:74:b8:ed:ba:ac:5b:48:5c:ec:1e:
23:74:2c:f4:8b:78:ad:70:0a:33:07:4a:a9:66:8a:
97:79:19:c6:f3:66:40:e2:e4:f2:69:4e:86:b3:aa:
b4:ef:45:59:2c:04:31:f0:80:9a:bd:8d:c8:da:e9:
f9:7a:5f:ee:e8:35:cd:7f:a4:5a:bf:d0:d8:c1:2c:
98:ca:27:ab:de:44:1a:92:3a:91:ad:03:45:07:f2:
da:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:43:A8:56:85:89:3C:87:E5:93:74:F7:B2:B1:34:FF:6F:5B:73:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/97c53fb4-56b1-3ed0-9860-db46f4fde245.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.103.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:a9:35:66:ce:bd:53:3d:63:75:02:49:67:87:7c:8f:a5:b9:
7c:70:35:1d:12:d8:13:5b:9d:68:8b:d5:e4:bf:b9:45:19:0e:
76:11:9d:8d:d0:7b:2f:57:5d:17:30:3f:12:a0:18:3a:a3:c0:
01:ae:d9:6c:8a:1b:47:76:a7:be:97:17:ec:a3:3d:5a:3e:25:
7f:64:ba:97:ac:13:7f:4a:9a:01:e8:ad:74:11:61:41:50:d8:
4c:fd:f6:d5:38:0d:14:28:a3:09:84:d9:25:ab:f5:16:48:2e:
a0:89:fe:e2:0c:1f:e1:ef:61:f9:37:65:04:90:c6:da:75:19:
c8:2b:1d:f1:b8:9b:14:2c:a9:51:94:d4:0f:fb:86:7c:a9:66:
f1:a3:ef:b3:17:74:57:7a:9b:ea:ee:04:c0:8e:f4:0a:f5:5e:
09:49:5a:db:21:04:1c:b3:b1:86:a3:c3:7e:bb:84:1e:e9:04:
36:6f:3a:95:c2:b3:f0:c6:9e:6a:74:53:8e:8d:10:66:97:3d:
6a:11:41:9e:76:1e:af:dc:60:0c:79:63:53:d7:08:b9:13:ef:
37:0a:68:76:d4:ff:b5:f4:8c:52:fb:79:68:1b:94:04:77:dd:
92:68:d8:a8:a9:d5:36:a7:90:a0:a7:4c:ec:30:a8:95:e0:8a:
00:00:27:7a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9bkNyaMBLtJQI5CgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkyNDEyMDAwMFoXDTIyMTAzMDA0MDAwMFowLzEtMCsGA1UEAxMk
YWI3YzNkMGEtODk3Yi00ZThhLTlhMWEtNjZjZGFiYTc3NWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdDAgsuAYIXqvMpwCHHxubjavcG8SPAd2o22
MSCA2OTGXnZNgVfe+64VpVhDmPUeKZZvFO22r/TRapUZth6Lid08yp1eIHE67jbp
t4/u/4Tu+FWPaQH4zeiZotSGw4k+DegdxF08fuOahc/iEZPNZMRYpm1fqMPqJ5m6
rDfpBCPiblOxArABc+mn0ovIo4NVrBX+07kd4qpnv8otQhol9N5+Tm6NgHl5dXS4
7bqsW0hc7B4jdCz0i3itcAozB0qpZoqXeRnG82ZA4uTyaU6Gs6q070VZLAQx8ICa
vY3I2un5el/u6DXNf6Rav9DYwSyYyier3kQakjqRrQNFB/LakwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGFDqFaFiTyH5ZN097KxNP9vW3NMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOTdjNTNmYjQtNTZiMS0z
ZWQwLTk4NjAtZGI0NmY0ZmRlMjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEmcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAD6k1Zs69Uz1jdQJJZ4d8j6W5fHA1HRLYE1udaIvV5L+5RRkOdhGdjdB7
L1ddFzA/EqAYOqPAAa7ZbIobR3anvpcX7KM9Wj4lf2S6l6wTf0qaAeitdBFhQVDY
TP321TgNFCijCYTZJav1FkguoIn+4gwf4e9h+TdlBJDG2nUZyCsd8bibFCypUZTU
D/uGfKlm8aPvsxd0V3qb6u4EwI70CvVeCUla2yEEHLOxhqPDfruEHukENm86lcKz
8MaeanRTjo0QZpc9ahFBnnYer9xgDHljU9cIuRPvNwpodtT/tfSMUvt5aBuUBHfd
kmjYqKnVNqeQoKdM7DColeCKAAAneg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:57:55 2025 by rpki-client