Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/997296d9-3446-31c7-b5eb-003abdf39b76.roa
File: 997296d9-3446-31c7-b5eb-003abdf39b76.roa (raw, json)
Hash identifier: mZ0PzMBtadjmGRxmgx2dA1fXHL/+P7nu6+OVSbREOjE=
Subject key identifier: AB:6B:4D:F6:73:A0:C6:F8:13:D4:54:3F:96:7B:38:11:E2:7E:AE:AE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0C52703AE0F30DDF28647620
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/997296d9-3446-31c7-b5eb-003abdf39b76.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.168.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0c:52:70:3a:e0:f3:0d:df:28:64:76:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=22c9f3ff-fb2f-43b6-8e12-188ebb20d1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7b:02:fe:56:e3:2d:bf:87:3a:15:15:78:e5:
90:47:d1:89:18:d6:1c:51:08:bf:3b:7e:85:15:c6:
22:51:fa:f0:75:8c:26:cf:b1:34:c2:83:bf:f3:15:
17:65:8a:52:cc:03:2d:44:f1:c9:3f:6d:89:d5:89:
32:ec:92:25:e7:5f:80:f6:c6:08:e2:9b:40:5e:37:
b6:0c:ec:6d:b0:a5:5a:8c:69:6e:81:4e:4b:b7:22:
c7:2e:ac:1c:c7:b2:9c:7b:f3:3c:93:5a:c2:96:89:
89:aa:b1:d7:54:4f:6a:a4:be:ff:c0:70:7a:d0:d0:
70:d3:39:4f:31:9a:a0:e5:a2:bd:63:e3:45:37:bb:
09:ae:b7:8b:e7:58:f1:5a:35:4e:b0:af:0d:80:7d:
be:df:2c:cf:0f:50:14:3d:80:ed:1f:88:81:2e:b0:
a3:7a:21:eb:7e:7b:0c:3d:b4:ac:63:90:0d:4c:65:
52:e2:74:08:11:39:d9:d2:37:61:8b:d5:41:11:f2:
ee:10:58:20:fa:ca:0e:c0:29:b3:48:db:7f:b3:9e:
67:32:7c:e5:7d:55:ba:43:21:c2:4a:12:af:28:39:
12:4d:f9:c6:a3:13:3d:7e:97:c9:8a:61:05:fd:93:
00:fe:81:2e:9b:bd:5a:c0:ea:1c:a2:24:1e:42:df:
89:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6B:4D:F6:73:A0:C6:F8:13:D4:54:3F:96:7B:38:11:E2:7E:AE:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/997296d9-3446-31c7-b5eb-003abdf39b76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.168.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:23:1d:28:ef:9f:5e:d0:96:92:ea:c7:57:cc:65:32:70:24:
47:2a:57:b1:13:0c:9e:a7:2c:55:30:31:1b:c4:4e:a3:7b:e4:
5c:3d:f8:f1:dc:d0:5e:14:59:e7:77:5a:78:58:07:f6:6e:bb:
e1:7f:cf:f3:df:df:3c:36:37:00:13:ff:5b:63:3b:20:78:e6:
d5:48:e6:42:24:9d:1b:36:8e:e2:12:dd:e0:df:38:bd:5b:0b:
5b:02:59:12:31:a4:ab:b1:0c:46:00:b1:4b:51:06:93:a4:91:
7f:f9:1d:c5:55:cb:e5:58:2c:2a:50:8c:f8:d1:1b:23:b2:fa:
76:74:17:8c:43:05:49:64:08:fb:43:48:8f:69:80:41:9a:20:
4b:ec:3b:4f:a9:da:fa:27:12:51:34:32:b3:ec:9f:63:13:78:
21:fa:30:78:9b:80:85:e7:ae:18:17:93:24:43:bb:93:bb:e6:
bd:db:3b:90:22:d1:8a:7a:9a:3f:84:d3:22:7e:5f:a5:5a:b5:
65:e6:0c:b6:c5:7d:76:13:78:41:3f:44:16:09:c3:1b:9f:b9:
9f:1c:20:76:3f:44:96:ea:92:73:4f:37:42:d2:85:a3:fb:62:
df:37:26:8f:dc:df:1d:92:41:5a:17:11:97:64:ed:90:84:c0:
66:07:2b:c6
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8MUnA64PMN3yhkdiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgyNjEyMDAwMFoXDTIyMTAwMTA0MDAwMFowLzEtMCsGA1UEAxMk
MjJjOWYzZmYtZmIyZi00M2I2LThlMTItMTg4ZWJiMjBkMWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHsC/lbjLb+HOhUVeOWQR9GJGNYcUQi/O36F
FcYiUfrwdYwmz7E0woO/8xUXZYpSzAMtRPHJP22J1Yky7JIl51+A9sYI4ptAXje2
DOxtsKVajGlugU5LtyLHLqwcx7Kce/M8k1rClomJqrHXVE9qpL7/wHB60NBw0zlP
MZqg5aK9Y+NFN7sJrreL51jxWjVOsK8NgH2+3yzPD1AUPYDtH4iBLrCjeiHrfnsM
PbSsY5ANTGVS4nQIETnZ0jdhi9VBEfLuEFgg+soOwCmzSNt/s55nMnzlfVW6QyHC
ShKvKDkSTfnGoxM9fpfJimEF/ZMA/oEum71awOocoiQeQt+JbwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKtrTfZzoMb4E9RUP5Z7OBHifq6uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOTk3Mjk2ZDktMzQ0Ni0z
MWM3LWI1ZWItMDAzYWJkZjM5Yjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEqgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMCMdKO+fXtCWkurHV8xlMnAkRypXsRMMnqcsVTAxG8ROo3vkXD348dzQ
XhRZ53daeFgH9m674X/P89/fPDY3ABP/W2M7IHjm1UjmQiSdGzaO4hLd4N84vVsL
WwJZEjGkq7EMRgCxS1EGk6SRf/kdxVXL5VgsKlCM+NEbI7L6dnQXjEMFSWQI+0NI
j2mAQZogS+w7T6na+icSUTQys+yfYxN4IfoweJuAheeuGBeTJEO7k7vmvds7kCLR
inqaP4TTIn5fpVq1ZeYMtsV9dhN4QT9EFgnDG5+5nxwgdj9EluqSc083QtKFo/ti
3zcmj9zfHZJBWhcRl2TtkITAZgcrxg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:46:05 2025 by rpki-client