Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b326a012-1740-37fd-ae90-492614b150be.roa
File: b326a012-1740-37fd-ae90-492614b150be.roa (raw, json)
Hash identifier: 7ZyNrjwLMP8L83Ssu6mUlcFpCPLtpiUcPLFQRyTJ1Gc=
Subject key identifier: B3:C2:0F:87:CB:E0:8D:E1:A5:B9:1F:F4:D9:D0:BD:1D:1D:2E:E8:FD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E96A1B72C4AA14F8D2BC91F78
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b326a012-1740-37fd-ae90-492614b150be.roa
Signing time: Fri 15 Jul 2022 12:00:00 +0000
ROA not before: Fri 15 Jul 2022 12:00:00 +0000
ROA not after: Sat 20 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:96:a1:b7:2c:4a:a1:4f:8d:2b:c9:1f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 15 12:00:00 2022 GMT
Not After : Aug 20 04:00:00 2022 GMT
Subject: CN=f69bdc98-89ec-4777-b3d3-f7295e9ab69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b0:f2:c9:fb:47:8d:3d:1e:16:aa:e9:09:c8:
04:78:b3:eb:68:7f:b2:72:7d:dc:4b:4c:22:64:e8:
31:1b:aa:ae:73:48:ce:dd:94:e0:07:51:8f:4c:23:
a6:dd:5b:1f:5b:bf:af:0f:35:b9:73:e2:a6:d1:9e:
4b:85:d7:25:db:a6:ea:b4:55:75:66:e7:21:d9:69:
8e:d1:14:f2:e1:41:c7:35:b2:ad:ad:62:05:ee:de:
53:72:bd:5d:6d:ca:26:82:10:55:22:8c:61:33:36:
d0:ce:7b:37:c7:c6:69:c2:cf:11:33:6a:d1:c9:06:
16:98:d0:b7:6f:d4:37:47:8b:30:7c:33:8a:db:2d:
3f:4a:52:ff:ae:b2:ce:05:ec:ef:db:db:2c:e5:e9:
6b:f1:f0:72:9c:a4:a4:dd:72:9f:e1:c9:d0:04:d9:
2b:c0:23:65:3e:1a:d8:d6:5f:40:ce:f9:97:8c:dc:
8d:fb:f0:e0:09:d8:ba:ba:62:a3:98:94:e8:95:a5:
dc:5a:33:6e:6b:23:59:10:2c:cf:0c:4d:b7:94:37:
57:f0:ed:4d:14:ba:b5:86:53:cf:21:52:f5:77:cf:
51:03:4c:70:2a:aa:2f:ee:c3:63:68:c9:81:f9:0c:
17:72:46:5d:01:d9:a6:d0:54:0b:b0:39:ed:98:50:
83:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C2:0F:87:CB:E0:8D:E1:A5:B9:1F:F4:D9:D0:BD:1D:1D:2E:E8:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b326a012-1740-37fd-ae90-492614b150be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:bc:fa:ba:f6:cf:9d:30:dd:99:4f:eb:93:c6:00:d6:ac:52:
96:77:f7:36:28:7c:a4:72:dd:06:8e:73:10:97:54:12:89:eb:
ab:4f:89:d1:44:b6:79:dd:32:f3:e1:86:b9:b0:c9:83:f8:fa:
4d:f6:2e:e3:02:a8:09:4c:0d:85:95:50:58:a0:8e:66:34:3f:
f4:27:b2:74:23:65:d8:5e:88:af:b9:8b:2d:69:40:a2:ca:a6:
df:af:aa:25:72:12:f2:68:d1:3a:7c:41:2f:c5:82:d6:35:6d:
b5:7f:d8:68:a4:10:35:a8:bb:fd:63:83:eb:7a:f4:33:62:ff:
a5:6f:f8:38:d8:a9:c2:24:02:c9:ce:f9:62:3e:0c:69:68:b1:
73:28:bb:39:4b:61:eb:3f:bc:00:36:de:20:71:65:bc:95:7b:
cc:98:a2:b7:ac:e0:5c:af:0a:64:80:57:21:be:21:e0:30:87:
5b:dd:52:99:b9:d4:5d:44:b4:72:81:8c:0b:51:ef:ac:89:72:
98:a7:7d:e8:2e:17:49:1d:af:4e:d8:75:ce:03:5f:7a:7c:38:
49:a5:79:f8:5f:73:e2:79:23:9b:78:0c:0a:dd:50:83:99:63:
94:15:2e:e1:02:e6:e0:42:dd:4f:6b:29:a0:dc:40:20:b9:de:
36:d4:4d:e3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6WobcsSqFPjSvJH3gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcxNTEyMDAwMFoXDTIyMDgyMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZjY5YmRjOTgtODllYy00Nzc3LWIzZDMtZjcyOTVlOWFiNjllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bDyyftHjT0eFqrpCcgEeLPraH+ycn3cS0wi
ZOgxG6quc0jO3ZTgB1GPTCOm3VsfW7+vDzW5c+Km0Z5Lhdcl26bqtFV1Zuch2WmO
0RTy4UHHNbKtrWIF7t5Tcr1dbcomghBVIoxhMzbQzns3x8Zpws8RM2rRyQYWmNC3
b9Q3R4swfDOK2y0/SlL/rrLOBezv29ss5elr8fBynKSk3XKf4cnQBNkrwCNlPhrY
1l9AzvmXjNyN+/DgCdi6umKjmJTolaXcWjNuayNZECzPDE23lDdX8O1NFLq1hlPP
IVL1d89RA0xwKqov7sNjaMmB+QwXckZdAdmm0FQLsDntmFCDHwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLPCD4fL4I3hpbkf9NnQvR0dLuj9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYjMyNmEwMTItMTc0MC0z
N2ZkLWFlOTAtNDkyNjE0YjE1MGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEtgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAiLz6uvbPnTDdmU/rk8YA1qxSlnf3Nih8pHLdBo5zEJdUEonrq0+J0US2
ed0y8+GGubDJg/j6TfYu4wKoCUwNhZVQWKCOZjQ/9CeydCNl2F6Ir7mLLWlAosqm
36+qJXIS8mjROnxBL8WC1jVttX/YaKQQNai7/WOD63r0M2L/pW/4ONipwiQCyc75
Yj4MaWixcyi7OUth6z+8ADbeIHFlvJV7zJiit6zgXK8KZIBXIb4h4DCHW91SmbnU
XUS0coGMC1HvrIlymKd96C4XSR2vTth1zgNfenw4SaV5+F9z4nkjm3gMCt1Qg5lj
lBUu4QLm4ELdT2spoNxAILneNtRN4w==
-----END CERTIFICATE-----
Generated at Tue Jun 17 22:58:04 2025 by rpki-client