Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a4d212f3-5835-3d91-8333-9279a8b700cb.roa
File: a4d212f3-5835-3d91-8333-9279a8b700cb.roa (raw, json)
Hash identifier: zU5HSGcHiUuZCXk4DBNxgnXK3VycYvp6Gt/AVKZ0Z4Y=
Subject key identifier: 96:06:A2:B9:A2:08:E1:E0:E1:40:45:C6:59:CC:9D:50:24:C4:21:20
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE4507242667CE98D65DE6700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a4d212f3-5835-3d91-8333-9279a8b700cb.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.176.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:50:72:42:66:7c:e9:8d:65:de:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=02978f20-bb88-49c2-9bd5-e5d3e789f639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:87:09:b4:74:c9:3c:65:23:72:41:cd:35:c5:
d2:62:e8:53:0f:c3:9c:a5:0a:4b:f7:78:80:bf:8d:
3a:53:19:e1:3a:08:c1:b2:fe:65:74:e3:ed:79:9a:
79:89:54:fd:68:8b:b2:59:51:d8:50:3e:db:0c:76:
51:12:86:ea:32:e6:b1:0c:10:57:76:83:f9:ec:c3:
5f:88:e2:43:7c:ed:25:ec:88:e5:b8:a8:d3:10:e4:
94:e7:1d:2b:b9:c4:61:73:90:bd:44:67:75:e8:a1:
1a:4d:41:a5:11:27:3f:bc:77:45:56:72:aa:5b:ed:
15:10:c9:ab:fa:8a:3a:a9:a3:4b:bf:e4:4f:06:1b:
f3:62:a4:41:da:79:16:e8:65:9d:9f:f5:68:ae:58:
86:56:d0:c6:3c:b7:41:43:fa:5f:d1:85:14:41:63:
31:1f:47:0f:2c:81:ff:25:28:3d:24:fd:fa:b2:fb:
b7:50:ae:dc:8a:19:d7:b0:d7:56:a8:f7:94:26:df:
a6:80:24:9e:af:97:5b:ed:fd:ca:ea:57:39:4b:22:
8c:bc:c8:94:cb:cb:2a:b6:ce:d1:06:c2:aa:d5:c3:
b4:13:1d:48:7c:65:23:2e:81:90:67:a6:54:a3:85:
6e:d3:f5:95:e7:ac:26:25:21:04:d1:8c:0c:5d:c1:
3c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:06:A2:B9:A2:08:E1:E0:E1:40:45:C6:59:CC:9D:50:24:C4:21:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a4d212f3-5835-3d91-8333-9279a8b700cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.176.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:30:b0:bf:b8:68:19:42:8a:12:77:88:0f:a4:0d:90:5f:cf:
45:17:b5:6f:f8:32:fd:72:3e:28:c5:05:bf:a9:66:62:1f:5b:
97:be:26:87:8b:c2:db:7b:7e:85:56:ba:65:8e:1a:e4:d8:e1:
0c:09:7e:6c:81:40:93:02:4a:f1:3d:46:b7:a5:4f:c9:d6:e5:
3f:67:1e:3b:c1:25:05:d9:e6:69:b9:00:fd:77:e6:3b:e1:c5:
56:c7:d7:80:48:f7:40:82:3f:67:63:44:06:77:79:82:e4:41:
ea:cf:77:98:ad:8e:72:76:99:85:38:eb:56:23:fc:d7:e2:72:
a1:0f:63:7b:04:89:ae:3a:f6:f8:fe:d1:4f:ca:5d:60:df:3b:
c6:1f:56:ce:f9:28:27:a4:af:e0:1c:ac:d7:02:b4:e1:95:14:
7a:21:8f:9d:fc:9c:90:8e:cd:fe:f3:b0:17:e8:7f:4b:f5:33:
7a:7e:3a:35:65:76:ce:66:1b:16:92:3b:73:87:c3:8c:9f:bc:
42:60:c9:b8:8d:fc:b0:c5:23:a5:13:a9:88:99:db:75:8b:f2:
60:1d:a3:c4:c4:36:e7:86:77:11:e0:55:ee:df:78:f1:12:cd:
6a:a6:cd:83:a9:f1:99:38:80:d0:c1:88:f2:35:77:12:79:6c:
11:56:e3:5b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzkUHJCZnzpjWXeZwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIxMTA1MDAwMFoXDTIyMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
MDI5NzhmMjAtYmI4OC00OWMyLTliZDUtZTVkM2U3ODlmNjM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkocJtHTJPGUjckHNNcXSYuhTD8OcpQpL93iA
v406UxnhOgjBsv5ldOPteZp5iVT9aIuyWVHYUD7bDHZREobqMuaxDBBXdoP57MNf
iOJDfO0l7IjluKjTEOSU5x0rucRhc5C9RGd16KEaTUGlESc/vHdFVnKqW+0VEMmr
+oo6qaNLv+RPBhvzYqRB2nkW6GWdn/VorliGVtDGPLdBQ/pf0YUUQWMxH0cPLIH/
JSg9JP36svu3UK7cihnXsNdWqPeUJt+mgCSer5db7f3K6lc5SyKMvMiUy8sqts7R
BsKq1cO0Ex1IfGUjLoGQZ6ZUo4Vu0/WV56wmJSEE0YwMXcE8PQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJYGormiCOHg4UBFxlnMnVAkxCEgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYTRkMjEyZjMtNTgzNS0z
ZDkxLTgzMzMtOTI3OWE4YjcwMGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBErAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEABTCwv7hoGUKKEneID6QNkF/PRRe1b/gy/XI+KMUFv6lmYh9bl74mh4vC
23t+hVa6ZY4a5NjhDAl+bIFAkwJK8T1Gt6VPydblP2ceO8ElBdnmabkA/XfmO+HF
VsfXgEj3QII/Z2NEBnd5guRB6s93mK2OcnaZhTjrViP81+JyoQ9jewSJrjr2+P7R
T8pdYN87xh9WzvkoJ6Sv4Bys1wK04ZUUeiGPnfyckI7N/vOwF+h/S/Uzen46NWV2
zmYbFpI7c4fDjJ+8QmDJuI38sMUjpROpiJnbdYvyYB2jxMQ254Z3EeBV7t948RLN
aqbNg6nxmTiA0MGI8jV3EnlsEVbjWw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:39:04 2025 by rpki-client