Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aabec1c2-9c10-3e4f-8f00-74a1e5c34bf0.roa
File: aabec1c2-9c10-3e4f-8f00-74a1e5c34bf0.roa (raw, json)
Hash identifier: /b8z+MhGmaz59mWzJAz+dojrF/9I8PoKRzTaQYimJdQ=
Subject key identifier: 60:2F:20:C2:C6:AE:80:08:FA:4F:84:14:B8:E3:AD:2F:50:8A:6B:07
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406AD4325C16533E9F5EE71040
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aabec1c2-9c10-3e4f-8f00-74a1e5c34bf0.roa
Signing time: Fri 30 Dec 2022 12:00:00 +0000
ROA not before: Fri 30 Dec 2022 12:00:00 +0000
ROA not after: Sat 04 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.186.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6a:d4:32:5c:16:53:3e:9f:5e:e7:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 30 12:00:00 2022 GMT
Not After : Feb 4 05:00:00 2023 GMT
Subject: CN=7149be0b-0d4c-4f16-bca6-bec2eda7c315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:44:af:c7:f9:49:ea:37:f8:d7:9c:9d:bb:aa:
2f:d6:c0:09:3b:91:20:81:d4:61:60:df:88:b1:06:
59:91:fe:7e:19:fc:c2:91:9f:55:86:09:f8:b3:65:
69:de:d9:78:bf:b6:7d:e6:ef:09:97:2d:3d:ec:36:
14:93:ae:4d:93:ad:31:cd:65:f0:6b:09:69:92:9f:
47:41:d2:10:48:cb:de:4b:10:ed:3e:1d:46:9a:2b:
58:60:3f:c5:2e:93:d3:c9:de:9c:a0:fc:54:92:75:
7b:a7:72:41:ab:49:7b:ca:f9:2c:85:92:94:39:ac:
bf:c7:16:48:d6:87:09:1e:76:51:75:99:94:81:d8:
09:6d:6a:8d:c0:f5:58:1e:00:7f:d0:48:dc:4c:95:
69:18:7b:34:5e:26:a3:35:d4:d0:0e:a0:e8:6f:d0:
9e:15:b1:07:1c:fd:81:09:61:62:0b:a9:dd:20:31:
23:82:e3:33:97:6f:ec:e3:22:77:75:1a:67:2b:80:
da:6a:ba:b9:a5:06:37:79:28:6c:16:8e:d9:24:45:
2a:e7:e4:92:9d:ae:35:9b:6f:8e:8c:1f:90:b2:5c:
c7:f0:be:51:34:9b:71:40:15:7b:00:58:a0:41:09:
cb:e0:1b:2c:bc:65:26:e8:0a:fc:8b:60:06:fa:b9:
4f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2F:20:C2:C6:AE:80:08:FA:4F:84:14:B8:E3:AD:2F:50:8A:6B:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aabec1c2-9c10-3e4f-8f00-74a1e5c34bf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.186.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:52:ae:0a:28:e0:29:53:ff:f3:c8:0e:6b:eb:aa:ca:ec:f3:
ee:cd:23:ff:7b:f9:6e:88:b6:6b:8a:26:b3:bf:d1:26:3d:ce:
cd:45:19:66:24:75:bd:7f:44:3b:c7:c4:9e:ba:c9:48:c6:d9:
0f:4a:53:9e:77:ba:6c:79:46:ac:7f:84:a0:e0:ea:07:4e:b4:
b7:02:fc:b2:c7:82:88:30:a9:16:ab:e3:09:fb:7d:52:0f:96:
08:6f:ef:d7:73:65:0c:cd:4d:92:51:28:f7:cd:dc:76:d7:72:
19:9f:c2:fe:6b:7a:58:8f:71:02:89:a7:20:bf:f9:11:f5:4a:
a0:a0:22:fc:67:9d:a7:f5:c8:e2:c2:c5:72:34:83:4c:76:34:
9e:41:75:dc:96:d7:a3:0d:00:43:6a:0c:cc:ce:f7:5e:cd:65:
47:8c:5c:20:8d:53:f6:89:d6:70:55:3e:68:13:1c:bb:0a:c6:
1e:73:ef:17:82:68:55:e3:03:d8:91:9d:2c:7c:a8:ce:e8:94:
dd:a5:c2:b2:ba:dc:b5:9a:2d:f1:55:0d:b3:d3:72:9c:4e:5e:
da:d6:af:37:12:e0:3f:b0:57:99:2a:aa:6e:ac:f9:86:a3:a8:
44:38:ba:a4:76:33:a8:e4:cc:ee:5e:e4:1d:1a:6e:61:ba:53:
1d:b1:6e:50
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBq1DJcFlM+n17nEEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIzMDEyMDAwMFoXDTIzMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
NzE0OWJlMGItMGQ0Yy00ZjE2LWJjYTYtYmVjMmVkYTdjMzE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0Svx/lJ6jf415ydu6ov1sAJO5EggdRhYN+I
sQZZkf5+GfzCkZ9Vhgn4s2Vp3tl4v7Z95u8Jly097DYUk65Nk60xzWXwawlpkp9H
QdIQSMveSxDtPh1GmitYYD/FLpPTyd6coPxUknV7p3JBq0l7yvkshZKUOay/xxZI
1ocJHnZRdZmUgdgJbWqNwPVYHgB/0EjcTJVpGHs0XiajNdTQDqDob9CeFbEHHP2B
CWFiC6ndIDEjguMzl2/s4yJ3dRpnK4Daarq5pQY3eShsFo7ZJEUq5+SSna41m2+O
jB+QslzH8L5RNJtxQBV7AFigQQnL4BssvGUm6Ar8i2AG+rlPTQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGAvIMLGroAI+k+EFLjjrS9QimsHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYWFiZWMxYzItOWMxMC0z
ZTRmLThmMDAtNzRhMWU1YzM0YmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBErowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAk1KuCijgKVP/88gOa+uqyuzz7s0j/3v5boi2a4oms7/RJj3OzUUZZiR1
vX9EO8fEnrrJSMbZD0pTnne6bHlGrH+EoODqB060twL8sseCiDCpFqvjCft9Ug+W
CG/v13NlDM1NklEo983cdtdyGZ/C/mt6WI9xAomnIL/5EfVKoKAi/Gedp/XI4sLF
cjSDTHY0nkF13JbXow0AQ2oMzM73Xs1lR4xcII1T9onWcFU+aBMcuwrGHnPvF4Jo
VeMD2JGdLHyozuiU3aXCsrrctZot8VUNs9NynE5e2tavNxLgP7BXmSqqbqz5hqOo
RDi6pHYzqOTM7l7kHRpuYbpTHbFuUA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 21:20:17 2025 by rpki-client