Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a2f6b1f1-3bec-3446-97f9-58e7b0675c53.roa
File: a2f6b1f1-3bec-3446-97f9-58e7b0675c53.roa (raw, json)
Hash identifier: fZ1g3bbkE69vH3jdR5LNafRl6J0eosSkrC4/oSsHlro=
Subject key identifier: 77:8A:82:49:4B:A4:EA:94:6D:26:D2:9B:16:CB:CE:EB:19:36:DB:B1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD3BD2F1F11575DDDC425480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a2f6b1f1-3bec-3446-97f9-58e7b0675c53.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.179.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:3b:d2:f1:f1:15:75:dd:dc:42:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=75b33bbc-a1db-456a-857e-261cedc75ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:06:10:96:b1:cd:61:b4:13:14:7b:68:0d:6f:
a9:f9:76:b4:72:ae:65:fd:fe:79:a4:8c:4a:67:80:
da:f1:f1:7a:4f:95:de:58:22:e2:11:c5:42:ae:19:
e4:d2:41:8e:b2:68:64:b6:b4:4d:20:62:2b:d4:68:
be:24:88:69:68:69:21:c7:df:70:70:12:a6:f9:5c:
62:d3:1c:fc:84:d4:24:9e:2c:3c:a2:70:4b:b9:3c:
b4:d0:0b:d3:1d:fc:ce:41:08:07:8f:47:2a:52:a9:
03:34:43:61:17:36:8e:7a:31:20:8c:38:11:e4:02:
5f:c7:72:d2:45:75:f4:9f:2b:02:23:9c:fe:27:98:
56:62:89:c7:ba:da:97:36:bc:68:e5:ac:d4:16:f6:
2d:4c:7a:cc:3d:53:b5:a8:97:4d:e9:3b:a0:76:3c:
79:47:c0:60:1f:25:8d:6e:00:45:f6:53:d1:a6:05:
bf:a1:f5:77:6a:e2:e2:11:20:f1:d4:8a:1e:18:4f:
89:8a:b9:86:a7:ad:ed:1b:6b:91:81:28:93:64:66:
0c:7d:7e:2b:1a:3e:bc:14:90:df:a4:f5:2f:6b:a8:
7e:de:a5:db:1c:97:53:7f:c1:77:d5:44:4b:86:50:
d9:4a:0b:5c:63:5e:11:eb:34:ef:cc:a3:e2:4a:7f:
13:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8A:82:49:4B:A4:EA:94:6D:26:D2:9B:16:CB:CE:EB:19:36:DB:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a2f6b1f1-3bec-3446-97f9-58e7b0675c53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.179.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:b8:56:81:19:e9:bb:f2:56:15:7c:d1:18:28:27:e5:5f:b6:
c7:c7:99:45:a0:e8:59:22:56:b9:0e:1c:11:64:3d:ea:61:7a:
50:db:5d:ac:cc:34:07:73:a0:8f:70:5f:64:12:9e:d1:c8:c0:
d2:da:12:a3:d5:41:80:68:9b:1f:8b:d9:1a:2c:cf:eb:4f:7e:
13:36:25:25:ab:d8:54:bc:b4:92:91:68:b9:5e:22:3f:25:37:
af:27:99:18:e3:fe:b8:28:75:ed:9f:0b:8b:52:34:d9:59:ec:
45:11:e7:3b:09:ae:60:3e:b3:75:62:19:02:0a:e5:58:85:4f:
38:03:f2:93:db:6c:f5:31:21:d9:bb:51:10:72:0b:e3:9f:d9:
a6:ff:dd:21:17:96:c9:34:e8:55:1d:f4:94:ce:6e:4c:05:61:
23:dc:43:8d:e1:17:b7:d3:a8:eb:1e:b0:ef:59:d3:59:fe:0d:
2c:f2:42:41:ad:06:8b:b5:af:8f:85:b8:31:d1:9a:b3:48:fb:
91:96:6c:ce:e1:a0:90:bd:87:43:b9:dc:cb:f0:cf:b2:ac:88:
b4:7c:09:03:91:e3:18:65:1c:a0:59:9c:73:3e:4f:03:cd:22:
0a:dd:ea:29:43:a3:67:e7:0a:8b:1c:d0:bf:f6:2e:48:61:c4:
c3:28:e0:a6
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDy9O9Lx8RV13dxCVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDEyODA1MDAwMFoXDTIyMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
NzViMzNiYmMtYTFkYi00NTZhLTg1N2UtMjYxY2VkYzc1ZWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAYQlrHNYbQTFHtoDW+p+Xa0cq5l/f55pIxK
Z4Da8fF6T5XeWCLiEcVCrhnk0kGOsmhktrRNIGIr1Gi+JIhpaGkhx99wcBKm+Vxi
0xz8hNQkniw8onBLuTy00AvTHfzOQQgHj0cqUqkDNENhFzaOejEgjDgR5AJfx3LS
RXX0nysCI5z+J5hWYonHutqXNrxo5azUFvYtTHrMPVO1qJdN6Tugdjx5R8BgHyWN
bgBF9lPRpgW/ofV3auLiESDx1IoeGE+JirmGp63tG2uRgSiTZGYMfX4rGj68FJDf
pPUva6h+3qXbHJdTf8F31URLhlDZSgtcY14R6zTvzKPiSn8THQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHeKgklLpOqUbSbSmxbLzusZNtuxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYTJmNmIxZjEtM2JlYy0z
NDQ2LTk3ZjktNThlN2IwNjc1YzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAErMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAvrhWgRnpu/JWFXzRGCgn5V+2x8eZRaDoWSJWuQ4cEWQ96mF6UNtdrMw0
B3Ogj3BfZBKe0cjA0toSo9VBgGibH4vZGizP609+EzYlJavYVLy0kpFouV4iPyU3
ryeZGOP+uCh17Z8Li1I02VnsRRHnOwmuYD6zdWIZAgrlWIVPOAPyk9ts9TEh2btR
EHIL45/Zpv/dIReWyTToVR30lM5uTAVhI9xDjeEXt9Oo6x6w71nTWf4NLPJCQa0G
i7Wvj4W4MdGas0j7kZZszuGgkL2HQ7ncy/DPsqyItHwJA5HjGGUcoFmccz5PA80i
Ct3qKUOjZ+cKixzQv/YuSGHEwyjgpg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:37:40 2025 by rpki-client