Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af0aea7a-f049-3fe9-b1df-e68466333b0d.roa
File: af0aea7a-f049-3fe9-b1df-e68466333b0d.roa (raw, json)
Hash identifier: DXlOQG/eZP57l9njxh6kTTZ4UK4R3x2SgllYxuwkA/8=
Subject key identifier: DB:0F:48:08:FE:C5:5F:80:7E:B4:B0:C8:52:9B:00:21:9C:D8:C1:49
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DFA52F5D30738075776A28800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af0aea7a-f049-3fe9-b1df-e68466333b0d.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.198.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:fa:52:f5:d3:07:38:07:57:76:a2:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=54d3180e-7117-415b-a923-664a53335cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:7d:16:ac:21:2c:d1:3b:ce:3c:a3:8e:a3:
bc:f0:66:32:5b:a4:14:0f:51:4d:fa:e7:8d:60:e7:
51:ba:d0:d3:c9:1c:60:12:ee:bb:eb:2f:df:5f:b9:
c0:68:4a:9a:d5:b2:bb:d6:37:6b:ed:06:79:6a:b4:
6e:e5:23:25:7c:44:89:8d:aa:b2:54:d5:8c:f9:1f:
1a:ee:6b:7a:50:eb:98:de:e0:09:ab:53:84:82:92:
43:a6:ad:a1:c4:30:10:2c:73:d0:a1:db:03:6b:33:
f9:b6:92:fe:9a:d6:1c:09:19:94:a1:8b:a0:f7:68:
97:fb:b4:c6:c6:73:ec:0a:d9:34:aa:10:a0:df:58:
bd:e3:90:64:b3:b5:b7:8e:94:11:8f:5e:91:73:e8:
2d:e0:8b:27:e9:83:72:cc:36:83:fd:6b:c8:96:2b:
82:74:b5:6b:c9:20:b7:63:74:de:67:d2:10:04:e7:
d9:f1:60:cb:ef:33:91:a5:3a:17:4b:29:f0:a8:e1:
ce:24:36:19:29:db:f0:d1:12:6a:27:5d:26:23:ee:
75:a3:4b:2f:7f:83:86:99:83:2a:2c:0e:7a:3f:c3:
1b:82:2c:2e:0e:96:85:d2:b2:9c:00:dc:a0:16:b1:
d8:e0:da:f1:bc:0c:78:e5:93:c1:b6:36:7f:22:e6:
6d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0F:48:08:FE:C5:5F:80:7E:B4:B0:C8:52:9B:00:21:9C:D8:C1:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af0aea7a-f049-3fe9-b1df-e68466333b0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.198.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:db:b4:44:80:50:6a:c9:19:ec:61:e8:8e:f1:80:69:a7:a5:
bc:95:1a:62:b8:a7:03:57:91:03:0f:6f:33:bb:47:77:14:78:
20:80:00:bb:e9:1c:be:d4:c5:9a:1c:ee:6d:84:ad:c2:8c:2e:
43:d3:d6:97:c9:48:ef:f1:32:cf:9b:fc:df:1b:31:e2:92:97:
1b:82:33:a5:35:15:b7:21:dd:9c:3f:ea:98:6e:f6:ea:1c:26:
a8:38:11:60:df:18:33:38:8a:e4:4a:1f:0b:4d:78:ce:60:41:
e9:cb:38:35:32:9e:5a:13:fc:24:e5:3e:9c:e3:a4:7a:e4:29:
d8:b1:a0:97:46:7d:6a:3c:51:f8:1a:f3:d3:62:4c:c7:c8:48:
a4:ad:e0:2e:c5:95:63:6d:fb:62:66:28:8d:bd:67:dd:3d:fe:
72:b1:d8:88:3e:0e:8e:ce:99:5f:91:0a:2a:72:d9:0b:40:ab:
35:4d:0f:ba:8e:55:0c:ad:6c:69:f1:87:88:a3:5b:06:41:c9:
93:a0:79:d8:ec:92:09:19:74:fe:f0:eb:da:3e:73:76:36:86:
fb:0d:73:2a:ea:b8:d3:12:b5:b2:c4:0d:e8:35:3f:69:6c:09:
04:6c:7c:ed:78:f8:27:be:9e:53:ac:ed:93:24:b8:29:ae:49:
2a:ab:90:af
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD36UvXTBzgHV3aiiAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUyMDEyMDAwMFoXDTIyMDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
NTRkMzE4MGUtNzExNy00MTViLWE5MjMtNjY0YTUzMzM1Y2NlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl99FqwhLNE7zjyjjqO88GYyW6QUD1FN+ueN
YOdRutDTyRxgEu676y/fX7nAaEqa1bK71jdr7QZ5arRu5SMlfESJjaqyVNWM+R8a
7mt6UOuY3uAJq1OEgpJDpq2hxDAQLHPQodsDazP5tpL+mtYcCRmUoYug92iX+7TG
xnPsCtk0qhCg31i945Bks7W3jpQRj16Rc+gt4Isn6YNyzDaD/WvIliuCdLVrySC3
Y3TeZ9IQBOfZ8WDL7zORpToXSynwqOHOJDYZKdvw0RJqJ10mI+51o0svf4OGmYMq
LA56P8MbgiwuDpaF0rKcANygFrHY4NrxvAx45ZPBtjZ/IuZtdwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNsPSAj+xV+AfrSwyFKbACGc2MFJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYWYwYWVhN2EtZjA0OS0z
ZmU5LWIxZGYtZTY4NDY2MzMzYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEsYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJNu0RIBQaskZ7GHojvGAaaelvJUaYrinA1eRAw9vM7tHdxR4IIAAu+kc
vtTFmhzubYStwowuQ9PWl8lI7/Eyz5v83xsx4pKXG4IzpTUVtyHdnD/qmG726hwm
qDgRYN8YMziK5EofC014zmBB6cs4NTKeWhP8JOU+nOOkeuQp2LGgl0Z9ajxR+Brz
02JMx8hIpK3gLsWVY237YmYojb1n3T3+crHYiD4Ojs6ZX5EKKnLZC0CrNU0Puo5V
DK1safGHiKNbBkHJk6B52OySCRl0/vDr2j5zdjaG+w1zKuq40xK1ssQN6DU/aWwJ
BGx87Xj4J76eU6ztkyS4Ka5JKquQrw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:08:40 2025 by rpki-client