Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/985bba12-ec51-3b71-89dc-d6e30abb7630.roa
File: 985bba12-ec51-3b71-89dc-d6e30abb7630.roa (raw, json)
Hash identifier: H9vIRc1UEVbGvFCqcsWowy3sovkdHJA0klKPX7Ny8XA=
Subject key identifier: 34:87:02:AE:2D:71:CA:32:B8:61:3B:CE:1A:6B:65:96:BB:4F:BA:82
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE433188CBA8469080F52AB60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/985bba12-ec51-3b71-89dc-d6e30abb7630.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:33:18:8c:ba:84:69:08:0f:52:ab:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=f637f8f5-8bfe-4c5f-9dae-6da5eb471494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1b:89:93:00:be:8f:e5:a2:bb:7d:1e:8e:39:
69:f9:d3:c5:b9:db:46:4f:50:a6:79:49:8f:72:77:
a9:7e:7f:fa:97:3d:20:20:45:2b:5c:ec:87:12:c8:
e7:6e:8f:50:27:2d:c1:aa:83:42:ae:8d:c5:90:32:
39:2d:d7:42:bd:68:51:59:b1:db:91:e3:4a:8f:2b:
89:4a:0d:0a:ee:61:84:80:10:2e:9b:24:4e:ab:f1:
32:f3:b9:86:b5:74:80:26:35:34:d5:de:f4:82:41:
c4:c7:01:2c:78:3f:bf:62:4f:1e:4a:dd:31:fe:4b:
b3:1a:bd:ae:8d:8a:76:92:56:5c:6e:33:fc:3f:5b:
c3:51:d1:fc:28:2c:98:ff:73:1b:0e:d4:cb:2e:c2:
fe:7a:9a:14:e8:af:1a:2d:89:3a:c0:9b:16:b2:c6:
85:5c:c4:7c:37:67:60:86:4c:cc:04:97:81:7f:49:
a8:eb:90:77:93:c4:76:91:1e:48:de:9d:a6:e4:20:
7a:0b:b6:56:8b:3d:61:8d:36:33:c9:dc:d0:90:72:
e5:0a:81:f9:c5:48:68:88:71:10:a0:4f:08:98:b0:
f7:96:12:de:d7:45:77:0a:05:c4:a6:bf:7d:30:93:
ca:76:28:89:bb:f3:fe:4c:bd:14:26:93:96:ca:fb:
81:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:87:02:AE:2D:71:CA:32:B8:61:3B:CE:1A:6B:65:96:BB:4F:BA:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/985bba12-ec51-3b71-89dc-d6e30abb7630.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:b7:3f:1d:73:71:57:1b:c3:8f:2e:49:af:15:94:87:07:be:
c2:48:80:8d:62:33:ab:f5:b5:c0:20:50:a2:08:59:ba:42:9e:
6c:44:15:29:de:40:14:2f:79:3d:8b:ac:4b:1c:5e:a6:dd:b0:
98:1d:c6:2a:cc:9b:fa:1f:48:af:49:20:11:45:ce:89:31:42:
2e:ba:60:8b:13:4f:16:f9:f9:a1:15:ba:fe:57:13:df:ed:c2:
3f:8a:b6:f3:2a:e6:c5:f8:67:47:21:e7:3b:57:8a:a7:3a:1b:
31:d7:88:62:ea:e0:4b:a8:1a:25:6f:a1:30:a7:6e:9a:20:72:
8e:bf:1d:37:ca:b8:e6:d7:85:11:2a:32:ac:0b:51:1e:62:0c:
7a:57:b2:d3:75:39:25:21:2f:4e:e1:3d:99:9f:ec:27:06:3a:
02:9b:6a:c6:08:11:33:0b:1b:c1:20:96:bc:6f:1e:f0:37:23:
36:d5:08:9c:cb:fd:74:be:bf:1e:6a:c9:4d:11:ff:99:bc:70:
d7:ac:f6:33:58:9c:7b:c4:70:d2:62:13:67:05:b3:b4:d8:e0:
e3:25:a0:07:3a:01:d2:cf:7d:ea:0e:82:0d:56:b8:b4:5c:5b:
7c:6e:4c:37:a8:5b:f4:4e:c3:f1:57:96:d5:04:bc:a8:77:c7:
86:6f:bd:a3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzkMxiMuoRpCA9Sq2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIxMTA1MDAwMFoXDTIyMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
ZjYzN2Y4ZjUtOGJmZS00YzVmLTlkYWUtNmRhNWViNDcxNDk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxuJkwC+j+Wiu30ejjlp+dPFudtGT1CmeUmP
cnepfn/6lz0gIEUrXOyHEsjnbo9QJy3BqoNCro3FkDI5LddCvWhRWbHbkeNKjyuJ
Sg0K7mGEgBAumyROq/Ey87mGtXSAJjU01d70gkHExwEseD+/Yk8eSt0x/kuzGr2u
jYp2klZcbjP8P1vDUdH8KCyY/3MbDtTLLsL+epoU6K8aLYk6wJsWssaFXMR8N2dg
hkzMBJeBf0mo65B3k8R2kR5I3p2m5CB6C7ZWiz1hjTYzydzQkHLlCoH5xUhoiHEQ
oE8ImLD3lhLe10V3CgXEpr99MJPKdiiJu/P+TL0UJpOWyvuBLwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDSHAq4tccoyuGE7zhprZZa7T7qCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOTg1YmJhMTItZWM1MS0z
YjcxLTg5ZGMtZDZlMzBhYmI3NjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEnswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAS7c/HXNxVxvDjy5JrxWUhwe+wkiAjWIzq/W1wCBQoghZukKebEQVKd5A
FC95PYusSxxept2wmB3GKsyb+h9Ir0kgEUXOiTFCLrpgixNPFvn5oRW6/lcT3+3C
P4q28yrmxfhnRyHnO1eKpzobMdeIYurgS6gaJW+hMKdumiByjr8dN8q45teFESoy
rAtRHmIMeley03U5JSEvTuE9mZ/sJwY6AptqxggRMwsbwSCWvG8e8DcjNtUInMv9
dL6/HmrJTRH/mbxw16z2M1ice8Rw0mITZwWztNjg4yWgBzoB0s996g6CDVa4tFxb
fG5MN6hb9E7D8VeW1QS8qHfHhm+9ow==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:25:43 2025 by rpki-client