Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a7283d4d-1b89-383f-aa2a-d9204c96b0e6.roa
File: a7283d4d-1b89-383f-aa2a-d9204c96b0e6.roa (raw, json)
Hash identifier: dGxCYuIUiu1FDVR7Bxs8JSHyanKEvNxLx1MdeCyXnH8=
Subject key identifier: B3:A6:99:AD:EE:06:8D:CD:30:03:50:F4:22:98:75:07:B9:CA:67:33
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E928095DAF715EC34856BDFC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a7283d4d-1b89-383f-aa2a-d9204c96b0e6.roa
Signing time: Thu 14 Jul 2022 12:00:00 +0000
ROA not before: Thu 14 Jul 2022 12:00:00 +0000
ROA not after: Fri 19 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.127.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:92:80:95:da:f7:15:ec:34:85:6b:df:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 14 12:00:00 2022 GMT
Not After : Aug 19 04:00:00 2022 GMT
Subject: CN=54d530ab-2c11-49f0-86d6-f8a45ddf42e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:f9:ce:f6:93:27:b1:14:6e:dd:61:0f:55:
2f:ec:8f:0b:0a:80:61:17:33:49:c9:ec:24:fb:74:
a5:64:18:1b:5c:82:7f:09:dd:8c:a2:02:04:95:f7:
2e:78:c2:92:17:97:1c:39:e2:dd:0c:c8:df:9f:2e:
65:ed:e8:95:06:24:b5:9e:5c:c0:a2:aa:d1:ae:63:
b3:5f:1c:ff:f3:d0:86:07:df:2b:c4:fb:66:bc:b4:
ca:71:70:11:70:2c:7a:13:f2:a8:dc:7a:bc:48:51:
23:75:4c:44:30:a4:1a:78:32:01:7f:84:95:b2:3b:
1c:71:c6:77:ec:3b:95:d8:5c:b7:5b:6c:c4:5a:63:
58:13:26:44:6d:ec:82:2d:f9:c3:59:06:e7:6a:3b:
e4:19:a4:e7:a4:27:aa:2e:44:6b:12:59:c0:85:0e:
8a:48:b9:6f:ea:f9:c6:a9:c9:3f:a0:6e:a7:25:84:
59:b4:d5:bd:26:96:85:e8:2e:ff:c7:38:e1:f4:3e:
b5:ac:e8:df:38:7a:f0:2a:09:74:ef:67:f6:9d:42:
15:81:25:08:6b:a3:7f:57:a5:10:13:c1:0b:f7:97:
cd:c0:ae:7b:84:78:d4:a5:d7:b6:fd:b1:89:5c:50:
48:43:cb:a6:06:10:ac:39:ab:10:bc:d4:a9:8a:15:
b5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A6:99:AD:EE:06:8D:CD:30:03:50:F4:22:98:75:07:B9:CA:67:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a7283d4d-1b89-383f-aa2a-d9204c96b0e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.127.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:50:82:41:b5:a1:9c:b8:0f:08:11:cb:ba:48:b7:d9:fc:c2:
be:32:b2:b5:c6:72:ab:f1:09:d7:38:33:90:12:2e:d6:8f:ef:
cd:cd:46:34:33:45:fa:ec:1c:07:d8:06:df:c5:60:92:e1:bb:
aa:6d:4a:97:c1:bb:1b:46:cb:77:59:1b:56:23:77:a4:84:5d:
b9:f5:9d:e2:35:87:fc:85:d0:f0:74:23:59:7f:33:e4:89:a9:
ab:35:fc:1d:c7:0b:b3:2f:21:b6:24:8b:3d:40:97:76:f2:5d:
14:98:ed:7c:78:7e:db:31:9c:c2:24:15:06:7a:24:fa:12:cb:
be:60:3c:f8:f1:b4:21:b5:4c:56:7b:49:3f:01:ad:9e:bc:2a:
6f:c3:8a:3f:fe:9f:a4:5e:af:09:1c:de:d3:92:a8:e0:42:e3:
62:db:f7:30:80:03:a6:40:bb:00:00:96:3e:96:48:cd:bf:90:
8e:9e:e6:06:dc:b8:e0:2e:1c:84:6f:30:64:42:12:24:41:4b:
68:97:04:6f:bb:2d:c9:d7:e0:94:f4:e5:b2:30:57:ef:b0:68:
1c:79:03:64:a3:16:8d:c4:4f:3f:c3:ef:31:00:67:14:21:f2:
ee:32:24:39:64:ba:01:f6:37:8d:f3:21:99:c4:44:5b:aa:20:
fc:06:9b:33
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6SgJXa9xXsNIVr38AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcxNDEyMDAwMFoXDTIyMDgxOTA0MDAwMFowLzEtMCsGA1UEAxMk
NTRkNTMwYWItMmMxMS00OWYwLTg2ZDYtZjhhNDVkZGY0MmU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf75zvaTJ7EUbt1hD1Uv7I8LCoBhFzNJyewk
+3SlZBgbXIJ/Cd2MogIElfcueMKSF5ccOeLdDMjfny5l7eiVBiS1nlzAoqrRrmOz
Xxz/89CGB98rxPtmvLTKcXARcCx6E/Ko3Hq8SFEjdUxEMKQaeDIBf4SVsjscccZ3
7DuV2Fy3W2zEWmNYEyZEbeyCLfnDWQbnajvkGaTnpCeqLkRrElnAhQ6KSLlv6vnG
qck/oG6nJYRZtNW9JpaF6C7/xzjh9D61rOjfOHrwKgl072f2nUIVgSUIa6N/V6UQ
E8EL95fNwK57hHjUpde2/bGJXFBIQ8umBhCsOasQvNSpihW1UQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLOmma3uBo3NMANQ9CKYdQe5ymczMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYTcyODNkNGQtMWI4OS0z
ODNmLWFhMmEtZDkyMDRjOTZiMGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEn8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXVCCQbWhnLgPCBHLuki32fzCvjKytcZyq/EJ1zgzkBIu1o/vzc1GNDNF
+uwcB9gG38VgkuG7qm1Kl8G7G0bLd1kbViN3pIRdufWd4jWH/IXQ8HQjWX8z5Imp
qzX8HccLsy8htiSLPUCXdvJdFJjtfHh+2zGcwiQVBnok+hLLvmA8+PG0IbVMVntJ
PwGtnrwqb8OKP/6fpF6vCRze05Ko4ELjYtv3MIADpkC7AACWPpZIzb+Qjp7mBty4
4C4chG8wZEISJEFLaJcEb7stydfglPTlsjBX77BoHHkDZKMWjcRPP8PvMQBnFCHy
7jIkOWS6AfY3jfMhmcREW6og/AabMw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:03:40 2025 by rpki-client