Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aafbccc8-94f2-39e3-98b2-1d11f0246254.roa
File: aafbccc8-94f2-39e3-98b2-1d11f0246254.roa (raw, json)
Hash identifier: D9J4QBwN25WXEOqpgYwFonaYXgZONT6XAPZYdIRC4yE=
Subject key identifier: 2F:BC:2F:D3:E0:CF:18:32:67:F8:F6:64:39:00:B2:61:CA:E6:07:83
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D3274E5FF24D5E69B93F70F40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aafbccc8-94f2-39e3-98b2-1d11f0246254.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.104.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:74:e5:ff:24:d5:e6:9b:93:f7:0f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=6ca2ace0-f561-4ff0-9d0d-cc18d1fca2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:3c:c2:91:e7:2e:cc:17:f1:5b:90:dd:b8:ea:
da:5a:a6:30:fa:f6:09:a3:b3:1f:53:c8:cc:f4:26:
b0:01:df:d3:b2:cc:84:14:03:4a:df:1f:16:58:cb:
c4:89:3b:ae:88:8d:18:16:a2:d8:5c:2e:19:d8:e6:
1e:f6:f3:5c:6c:50:e5:39:24:42:7d:c9:5d:7f:86:
ca:0b:56:10:08:27:0c:0c:84:ad:6f:cc:73:af:27:
d2:20:c0:42:e5:f8:00:5a:20:13:86:36:9b:dd:b0:
d9:20:e8:fa:6d:06:9c:e8:eb:93:7f:db:2b:7b:6e:
32:71:82:82:87:d8:00:b4:08:50:05:70:89:9d:19:
fe:86:b7:be:7c:5d:28:4c:0f:c8:1a:df:66:05:b1:
90:92:39:6d:05:75:f3:f4:20:be:3e:50:f1:ab:14:
f8:5b:e0:08:d0:f4:b9:4b:b5:32:b0:27:ad:ee:df:
ae:78:16:54:51:80:14:73:47:8a:19:dc:b8:8b:13:
2c:24:c4:0a:a8:95:46:7d:27:41:40:29:79:f0:1e:
de:a0:b2:22:47:14:0e:ab:82:31:8c:e6:c1:6e:fb:
67:43:1d:9d:8f:da:9e:75:b8:57:3f:af:8b:90:26:
86:fa:0e:c4:85:18:a9:30:4e:89:6f:ac:01:bd:cd:
7c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BC:2F:D3:E0:CF:18:32:67:F8:F6:64:39:00:B2:61:CA:E6:07:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aafbccc8-94f2-39e3-98b2-1d11f0246254.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.104.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:60:d1:4e:72:ef:80:70:e1:04:d7:cc:b0:99:f2:00:66:44:
ce:15:b3:41:d6:b9:9e:b7:6c:da:30:9b:03:94:3d:18:60:eb:
59:66:eb:4f:66:b4:b2:66:43:62:f6:21:b1:4a:e3:03:e0:4e:
00:26:e0:ab:a6:e9:58:6c:fa:57:13:b8:f3:39:32:bf:f9:68:
31:ba:99:2b:7d:8d:3e:48:83:19:4d:05:bc:f6:f5:9e:96:04:
b8:48:61:a0:b9:6b:7b:79:c8:1d:72:2e:53:e9:34:30:93:17:
b1:3d:6f:19:a2:cd:c5:0d:78:40:6a:89:18:07:5d:b2:25:11:
e7:a7:5b:c2:d5:c3:7d:1c:e1:87:45:9f:2e:27:00:83:b9:17:
38:85:71:4c:4f:06:19:8e:64:bd:2a:be:87:34:47:a4:e5:5f:
37:12:68:01:8f:f1:ea:10:cd:06:98:1a:8f:1d:17:89:98:84:
86:bf:64:d3:9a:ec:76:af:df:12:5a:40:ce:3c:1b:af:55:c0:
d8:1b:f5:ec:5c:57:d7:12:b1:05:cd:e2:82:5d:4b:0e:99:86:
79:91:ed:75:41:3a:a9:3c:31:11:8c:39:cd:f1:1b:69:44:7e:
0a:83:e4:50:b4:16:48:74:e1:c6:9d:0c:d4:4c:04:f2:6e:30:
ad:4d:ce:20
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0ydOX/JNXmm5P3D0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
NmNhMmFjZTAtZjU2MS00ZmYwLTlkMGQtY2MxOGQxZmNhMmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9TzCkecuzBfxW5DduOraWqYw+vYJo7MfU8jM
9CawAd/TssyEFANK3x8WWMvEiTuuiI0YFqLYXC4Z2OYe9vNcbFDlOSRCfcldf4bK
C1YQCCcMDIStb8xzryfSIMBC5fgAWiAThjab3bDZIOj6bQac6OuTf9sre24ycYKC
h9gAtAhQBXCJnRn+hre+fF0oTA/IGt9mBbGQkjltBXXz9CC+PlDxqxT4W+AI0PS5
S7UysCet7t+ueBZUUYAUc0eKGdy4ixMsJMQKqJVGfSdBQCl58B7eoLIiRxQOq4Ix
jObBbvtnQx2dj9qedbhXP6+LkCaG+g7EhRipME6Jb6wBvc182wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFC+8L9PgzxgyZ/j2ZDkAsmHK5geDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYWFmYmNjYzgtOTRmMi0z
OWUzLTk4YjItMWQxMWYwMjQ2MjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEmgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAe2DRTnLvgHDhBNfMsJnyAGZEzhWzQda5nrds2jCbA5Q9GGDrWWbrT2a0
smZDYvYhsUrjA+BOACbgq6bpWGz6VxO48zkyv/loMbqZK32NPkiDGU0FvPb1npYE
uEhhoLlre3nIHXIuU+k0MJMXsT1vGaLNxQ14QGqJGAddsiUR56dbwtXDfRzhh0Wf
LicAg7kXOIVxTE8GGY5kvSq+hzRHpOVfNxJoAY/x6hDNBpgajx0XiZiEhr9k05rs
dq/fElpAzjwbr1XA2Bv17FxX1xKxBc3igl1LDpmGeZHtdUE6qTwxEYw5zfEbaUR+
CoPkULQWSHThxp0M1EwE8m4wrU3OIA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:50:09 2025 by rpki-client