Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a42e9659-9751-3e7e-9fa8-38305f16cc46.roa
File: a42e9659-9751-3e7e-9fa8-38305f16cc46.roa (raw, json)
Hash identifier: KuArMbwJMb03vWVvnvLCqH+D8PHSv+RiWWvgkYiwhE4=
Subject key identifier: F0:51:2C:EF:DF:E4:89:83:D4:05:2F:F7:0E:9C:84:0C:12:D6:90:49
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD4B2367BD826DE07511DF80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a42e9659-9751-3e7e-9fa8-38305f16cc46.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.236.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:4b:23:67:bd:82:6d:e0:75:11:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=640861d1-ac1b-4e00-be75-0dcc618ea228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:f8:10:80:86:b9:ca:05:6b:a9:b6:8a:03:
78:db:73:eb:e1:19:72:64:f5:48:d9:b9:16:99:3b:
22:92:41:ab:0e:8d:db:09:54:e4:5f:f7:85:4b:a2:
e2:00:13:a7:32:1a:fc:4e:37:65:6f:a1:c5:ae:96:
33:6c:83:a4:40:85:ca:53:18:64:c7:31:9d:c0:e6:
67:e6:8c:52:04:64:ba:df:1f:94:bc:c4:19:a7:38:
ff:d0:a4:de:cc:8f:d2:fa:65:67:a8:bf:29:26:cf:
4e:99:4a:b7:56:93:8d:7b:e4:71:03:e3:91:38:aa:
8f:12:05:2c:c5:10:11:55:ac:c3:01:96:53:60:68:
09:27:e8:a8:c4:b5:a0:c2:53:73:f1:a8:ab:28:c1:
61:23:f8:98:67:42:bb:1b:db:9f:e7:5f:2e:75:0d:
72:10:1a:cf:9b:44:6c:e0:9c:8e:c9:12:37:a2:ff:
e4:93:cc:a5:cc:16:8a:c1:52:78:82:74:28:63:f0:
48:06:2a:bd:60:88:6f:ef:3e:88:ac:de:41:d4:75:
49:82:e9:3d:e0:b7:d7:11:2e:b8:e1:12:bb:68:d3:
ce:fa:cf:fa:19:e8:a3:82:ee:87:f2:e7:f3:68:87:
30:7a:c7:1e:0e:4c:3f:bb:19:83:de:21:64:f4:13:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:51:2C:EF:DF:E4:89:83:D4:05:2F:F7:0E:9C:84:0C:12:D6:90:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a42e9659-9751-3e7e-9fa8-38305f16cc46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.236.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:b2:2e:60:20:91:c9:f8:4f:a2:eb:16:26:b2:12:c4:b4:ec:
83:45:0a:4a:e9:a1:71:c4:3d:35:31:8c:f7:9f:65:61:1f:67:
e3:c5:73:93:55:8e:f5:45:bf:b9:03:54:0e:75:23:ca:52:88:
83:1f:03:0b:34:97:c2:ca:51:61:35:c2:bb:9d:76:18:d2:ae:
01:12:76:5c:9f:62:68:0b:de:f1:38:76:c6:21:71:9f:63:57:
b3:4c:e9:10:97:20:75:86:50:3e:90:38:f4:c4:16:fa:28:69:
6c:86:2d:a1:95:e5:86:11:41:c1:9b:68:ab:e1:7e:f7:8e:bb:
e6:7b:78:c8:e7:af:d2:cc:bd:6f:77:60:81:a3:5f:02:c4:ed:
2e:3c:d6:a2:c1:56:98:cc:02:9b:46:5a:08:61:d7:50:f8:43:
c1:d8:63:6f:91:a3:04:a0:09:66:d0:ec:c8:c5:40:1d:90:00:
66:bb:44:51:71:67:36:a4:c4:0c:5e:7d:84:fb:40:d1:2f:94:
3d:15:95:a3:b6:1a:3b:dc:68:64:c9:89:06:7c:f7:92:37:b8:
a7:98:51:24:27:2e:46:31:4d:4e:16:ab:b1:f7:92:e7:50:e6:
fc:c6:02:df:4b:f7:af:24:fa:93:29:4a:a5:ec:e9:be:95:9f:
1c:e1:3a:84
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDy9SyNnvYJt4HUR34AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDEyODA1MDAwMFoXDTIyMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
NjQwODYxZDEtYWMxYi00ZTAwLWJlNzUtMGRjYzYxOGVhMjI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqr4EICGucoFa6m2igN423Pr4RlyZPVI2bkW
mTsikkGrDo3bCVTkX/eFS6LiABOnMhr8Tjdlb6HFrpYzbIOkQIXKUxhkxzGdwOZn
5oxSBGS63x+UvMQZpzj/0KTezI/S+mVnqL8pJs9OmUq3VpONe+RxA+OROKqPEgUs
xRARVazDAZZTYGgJJ+ioxLWgwlNz8airKMFhI/iYZ0K7G9uf518udQ1yEBrPm0Rs
4JyOyRI3ov/kk8ylzBaKwVJ4gnQoY/BIBiq9YIhv7z6IrN5B1HVJguk94LfXES64
4RK7aNPO+s/6Geijgu6H8ufzaIcwesceDkw/uxmD3iFk9BPwRwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPBRLO/f5ImD1AUv9w6chAwS1pBJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYTQyZTk2NTktOTc1MS0z
ZTdlLTlmYTgtMzgzMDVmMTZjYzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEuwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAG7IuYCCRyfhPousWJrISxLTsg0UKSumhccQ9NTGM959lYR9n48Vzk1WO
9UW/uQNUDnUjylKIgx8DCzSXwspRYTXCu512GNKuARJ2XJ9iaAve8Th2xiFxn2NX
s0zpEJcgdYZQPpA49MQW+ihpbIYtoZXlhhFBwZtoq+F+94675nt4yOev0sy9b3dg
gaNfAsTtLjzWosFWmMwCm0ZaCGHXUPhDwdhjb5GjBKAJZtDsyMVAHZAAZrtEUXFn
NqTEDF59hPtA0S+UPRWVo7YaO9xoZMmJBnz3kje4p5hRJCcuRjFNTharsfeS51Dm
/MYC30v3ryT6kylKpezpvpWfHOE6hA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 11:55:32 2025 by rpki-client