Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b458a100-2df6-339a-b543-cb43e9feb5bd.roa
File: b458a100-2df6-339a-b543-cb43e9feb5bd.roa (raw, json)
Hash identifier: QgriqKAf7xtccNDhpKNz+Y+LZxNedlbNaijX7+ubdLQ=
Subject key identifier: 3A:0A:E3:15:EA:CF:C1:17:77:9A:67:F1:EB:86:D2:2E:88:5B:88:B1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B669922C671918473B09300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b458a100-2df6-339a-b543-cb43e9feb5bd.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:66:99:22:c6:71:91:84:73:b0:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=3f2f089b-ba6d-4484-b6a8-30a32b9416dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:31:b6:61:31:63:08:40:1d:fa:ee:c2:78:da:
49:43:13:db:f8:ee:ce:61:ca:7a:f8:1a:6f:de:14:
4b:35:74:d6:90:50:f8:50:9b:87:38:d3:a8:06:fc:
26:5f:a1:3d:5e:59:c4:9c:24:0a:94:31:f8:fb:b6:
d5:d4:a2:64:b5:12:23:02:3a:b0:84:53:12:09:92:
af:e4:78:07:98:fb:63:f9:44:7e:fc:04:3c:da:a1:
8f:40:14:4e:b8:88:ad:25:95:b6:32:71:01:e3:3c:
72:ed:76:c5:7a:b4:f5:d9:52:c0:1e:70:a8:44:f6:
5a:28:54:7c:71:a1:8e:b7:27:f1:e8:1c:aa:4b:8e:
63:37:12:56:cd:a4:18:3d:43:c3:27:9b:2b:65:a4:
1a:61:d9:21:e4:63:fb:af:f6:c7:ad:0b:cf:a8:f6:
42:b6:e6:06:ab:f6:43:5b:47:ac:ef:b8:7d:dc:0d:
9a:ae:76:c2:13:63:14:3b:7c:bc:95:d4:2e:28:bb:
d4:46:92:2d:2c:b0:ad:50:00:19:96:8c:ad:30:91:
e4:f0:2e:e7:9c:d2:41:3f:7c:84:71:b6:e0:dc:8c:
01:c4:ea:07:6e:f1:2a:11:05:26:23:55:2c:8b:e0:
c7:a3:ba:81:3d:c8:db:a2:4f:c4:f7:52:b5:f8:fe:
84:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0A:E3:15:EA:CF:C1:17:77:9A:67:F1:EB:86:D2:2E:88:5B:88:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b458a100-2df6-339a-b543-cb43e9feb5bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:a9:98:6a:74:a6:59:c7:f2:06:22:4e:57:82:4a:8e:c5:bb:
df:0d:fc:47:e4:bd:74:99:72:7a:5d:d7:76:7d:14:76:21:4f:
9b:ed:b1:72:a3:b2:18:d2:f6:82:e5:28:bb:5b:1d:47:95:38:
68:4a:61:19:9e:51:b7:9b:62:b1:f8:3d:4e:6d:cb:19:15:57:
a5:06:a9:92:58:9e:da:02:37:09:6b:dc:c0:e6:28:ce:67:7d:
4e:7d:51:b4:e3:94:7c:c2:38:7e:bc:e6:b1:e8:e2:97:9b:72:
1e:6d:39:4b:89:7a:7a:32:23:9f:86:4c:0d:bb:e9:a9:7c:43:
40:0d:85:b1:d5:fa:cf:a0:18:79:82:b4:02:ec:fc:6c:f5:00:
36:a2:c0:43:75:50:79:32:53:b5:11:36:2d:6f:b4:c6:ce:a0:
e2:dc:ae:31:af:63:31:c0:1b:31:ed:6b:92:5d:94:c2:11:18:
70:83:c8:dc:ce:15:7d:f7:68:45:9b:df:95:5e:0d:08:c8:d2:
0a:95:c1:d7:f7:ac:3e:59:c2:ce:ca:f3:19:76:97:b4:44:c7:
1c:d8:59:27:80:e0:30:eb:4f:10:81:04:82:a2:4b:c5:f5:ac:
f1:7e:32:be:b2:3d:3e:5d:c2:39:9f:56:19:ca:09:a8:fc:48:
5e:25:bc:88
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0LZpkixnGRhHOwkwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIyNTA1MDAwMFoXDTIyMDQwMTA0MDAwMFowLzEtMCsGA1UEAxMk
M2YyZjA4OWItYmE2ZC00NDg0LWI2YTgtMzBhMzJiOTQxNmRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTG2YTFjCEAd+u7CeNpJQxPb+O7OYcp6+Bpv
3hRLNXTWkFD4UJuHONOoBvwmX6E9XlnEnCQKlDH4+7bV1KJktRIjAjqwhFMSCZKv
5HgHmPtj+UR+/AQ82qGPQBROuIitJZW2MnEB4zxy7XbFerT12VLAHnCoRPZaKFR8
caGOtyfx6ByqS45jNxJWzaQYPUPDJ5srZaQaYdkh5GP7r/bHrQvPqPZCtuYGq/ZD
W0es77h93A2arnbCE2MUO3y8ldQuKLvURpItLLCtUAAZloytMJHk8C7nnNJBP3yE
cbbg3IwBxOoHbvEqEQUmI1Usi+DHo7qBPcjbok/E91K1+P6EfQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDoK4xXqz8EXd5pn8euG0i6IW4ixMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYjQ1OGExMDAtMmRmNi0z
MzlhLWI1NDMtY2I0M2U5ZmViNWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEpwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAvamYanSmWcfyBiJOV4JKjsW73w38R+S9dJlyel3Xdn0UdiFPm+2xcqOy
GNL2guUou1sdR5U4aEphGZ5Rt5tisfg9Tm3LGRVXpQapklie2gI3CWvcwOYozmd9
Tn1RtOOUfMI4frzmsejil5tyHm05S4l6ejIjn4ZMDbvpqXxDQA2FsdX6z6AYeYK0
Auz8bPUANqLAQ3VQeTJTtRE2LW+0xs6g4tyuMa9jMcAbMe1rkl2UwhEYcIPI3M4V
ffdoRZvflV4NCMjSCpXB1/esPlnCzsrzGXaXtETHHNhZJ4DgMOtPEIEEgqJLxfWs
8X4yvrI9Pl3COZ9WGcoJqPxIXiW8iA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:04 2025 by rpki-client