Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/995f2e10-61ff-39b6-9bab-eb7df1a266ab.roa
File: 995f2e10-61ff-39b6-9bab-eb7df1a266ab.roa (raw, json)
Hash identifier: XfJgFPlRqKdyzlaanrQf2m4/owJVcXRdKJfAeZGfz0E=
Subject key identifier: 15:74:4B:05:58:F1:5A:34:74:A7:16:A4:E7:97:BC:96:29:41:D4:CB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F332C5C82362C666B3257CC00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/995f2e10-61ff-39b6-9bab-eb7df1a266ab.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.190.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:33:2c:5c:82:36:2c:66:6b:32:57:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=63b86632-5cea-462f-890e-f0e4d64f4501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:e6:b7:f8:10:ae:4c:73:50:8b:fe:58:c9:
e4:6b:85:20:33:81:7f:5e:9f:e2:fc:b5:c6:36:81:
54:e5:0c:99:86:cd:b8:65:c6:df:a2:21:97:4e:f4:
59:2e:b6:c1:f2:29:44:b5:bf:dd:98:b1:28:94:54:
7c:36:17:e6:cb:24:fb:af:3a:d3:88:8f:94:ad:94:
cf:83:a9:d1:46:24:05:1e:27:c6:c9:88:9e:84:a5:
9a:c8:d5:4c:6b:e7:e4:42:59:14:16:d4:26:dd:d7:
61:18:51:32:7e:56:46:32:56:76:13:81:3b:20:79:
92:f7:e8:1c:83:05:66:1d:d7:ce:de:f3:0d:6b:53:
71:10:85:cf:82:a9:e5:8e:5e:bf:db:01:d5:9a:fe:
f8:c3:50:6d:0c:6d:cf:91:7b:50:c4:bc:cd:96:91:
a8:0a:d6:d8:d6:b7:c0:88:7c:52:04:39:48:3a:42:
d0:a0:19:bd:34:f4:aa:66:a9:69:1f:b2:a8:ec:a1:
f0:7c:4c:8c:bf:1b:4f:22:83:89:60:ef:6d:e5:18:
2f:50:02:f1:28:cd:84:04:98:aa:72:3a:a8:19:93:
66:a0:6c:2b:d4:b1:2f:8a:e1:d3:f6:c2:e4:ec:3a:
0e:f3:c2:50:fe:12:50:2e:47:f2:24:4d:5e:73:8d:
16:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:74:4B:05:58:F1:5A:34:74:A7:16:A4:E7:97:BC:96:29:41:D4:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/995f2e10-61ff-39b6-9bab-eb7df1a266ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.190.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:88:75:1d:3e:f1:f4:11:19:51:34:ea:03:46:b7:6f:48:9c:
95:26:db:1e:2c:9e:65:48:b6:08:57:76:65:15:bf:37:ce:dc:
b1:c1:01:e7:82:82:21:13:95:33:30:50:54:44:18:56:42:cb:
54:9f:33:6e:ba:d4:f2:24:e2:b5:d2:60:fb:40:1c:a9:73:d5:
aa:70:80:76:c1:a7:7b:11:0c:7c:69:81:4a:b7:fb:f7:4a:61:
3d:c5:be:4c:aa:98:9a:10:99:ae:8c:87:82:f5:5b:18:28:28:
b0:09:12:35:e6:68:dd:90:86:d4:68:a1:5f:e8:d2:32:e7:0a:
0d:6f:eb:06:c9:82:1c:c4:a2:a3:57:c7:f0:80:8c:47:b9:a0:
23:ad:9c:68:1b:11:f3:c3:19:72:11:4c:69:f3:c2:1c:8c:64:
3c:d1:8e:c9:76:b4:af:45:bd:1e:d8:b1:e3:f4:04:0f:f4:43:
73:bd:18:8f:a2:88:7d:3a:5d:85:96:a8:d4:43:b6:56:cf:bc:
9a:3d:bf:6e:96:7f:3e:fc:77:8a:67:64:62:2c:a4:d4:3d:fb:
87:7b:ac:73:09:5f:d3:e8:bd:b5:22:ea:15:4d:dc:d8:0b:1d:
7e:d7:4a:4d:57:03:4e:1b:e9:67:c7:0c:50:e8:f7:9d:47:cf:
e4:5b:0d:02
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8zLFyCNixmazJXzAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkwOTEyMDAwMFoXDTIyMTAxNTA0MDAwMFowLzEtMCsGA1UEAxMk
NjNiODY2MzItNWNlYS00NjJmLTg5MGUtZjBlNGQ2NGY0NTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX7mt/gQrkxzUIv+WMnka4UgM4F/Xp/i/LXG
NoFU5QyZhs24ZcbfoiGXTvRZLrbB8ilEtb/dmLEolFR8NhfmyyT7rzrTiI+UrZTP
g6nRRiQFHifGyYiehKWayNVMa+fkQlkUFtQm3ddhGFEyflZGMlZ2E4E7IHmS9+gc
gwVmHdfO3vMNa1NxEIXPgqnljl6/2wHVmv74w1BtDG3PkXtQxLzNlpGoCtbY1rfA
iHxSBDlIOkLQoBm9NPSqZqlpH7Ko7KHwfEyMvxtPIoOJYO9t5RgvUALxKM2EBJiq
cjqoGZNmoGwr1LEviuHT9sLk7DoO88JQ/hJQLkfyJE1ec40WKwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBV0SwVY8Vo0dKcWpOeXvJYpQdTLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOTk1ZjJlMTAtNjFmZi0z
OWI2LTliYWItZWI3ZGYxYTI2NmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEr4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAX4h1HT7x9BEZUTTqA0a3b0iclSbbHiyeZUi2CFd2ZRW/N87cscEB54KC
IROVMzBQVEQYVkLLVJ8zbrrU8iTitdJg+0AcqXPVqnCAdsGnexEMfGmBSrf790ph
PcW+TKqYmhCZroyHgvVbGCgosAkSNeZo3ZCG1GihX+jSMucKDW/rBsmCHMSio1fH
8ICMR7mgI62caBsR88MZchFMafPCHIxkPNGOyXa0r0W9Htix4/QED/RDc70Yj6KI
fTpdhZao1EO2Vs+8mj2/bpZ/Pvx3imdkYiyk1D37h3uscwlf0+i9tSLqFU3c2Asd
ftdKTVcDThvpZ8cMUOj3nUfP5FsNAg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:07:30 2025 by rpki-client