Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bec51d39-1611-391f-b454-f9756d3b0a42.roa
File: bec51d39-1611-391f-b454-f9756d3b0a42.roa (raw, json)
Hash identifier: m/uaBZrGXtQzYfrCPCKfvqmXhv9aT5hBGXvIR1BYRfw=
Subject key identifier: 5F:D3:07:50:CB:A9:DD:C1:27:0C:26:BD:1D:03:9B:70:11:93:11:3E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D324F2008104A3933A6681F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bec51d39-1611-391f-b454-f9756d3b0a42.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.84.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:4f:20:08:10:4a:39:33:a6:68:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=e680a232-c47a-4bf2-8631-4f7fb994c9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0b:dc:e4:65:e6:c2:36:22:10:e9:9e:db:38:
09:08:79:76:dd:a4:f3:a6:fc:0b:fd:09:a5:58:4a:
57:b6:56:97:b4:b7:cb:51:eb:cf:9e:cc:ac:bb:82:
9d:82:b1:b6:11:75:2e:fe:d5:7c:5a:19:37:de:5b:
2c:a0:a8:b2:1d:21:4b:54:14:11:4f:da:4a:e0:f8:
c8:65:59:46:30:1a:61:06:9a:e3:73:2f:50:ce:61:
67:41:e8:c2:f4:49:84:4a:33:51:4c:7f:ac:74:82:
df:c4:d2:89:88:59:5e:99:63:13:72:bd:bd:26:9b:
25:6c:5d:18:d6:6c:bc:5c:ee:38:03:5b:57:8b:0e:
bb:7b:3a:c2:10:77:80:9e:4b:ac:3a:79:53:5d:80:
54:cd:e3:63:16:48:fc:02:d0:3a:5b:c3:17:25:43:
1c:fa:2b:6d:62:e6:19:10:11:a6:a0:59:89:66:ea:
86:df:2f:68:f2:29:83:61:f4:6d:6c:8e:5e:60:5b:
8c:dd:01:bd:48:79:8b:8c:c7:9a:c2:2d:8c:59:0c:
f6:1a:e7:3b:ad:d0:e0:a5:c4:db:44:3c:61:3c:01:
b3:c3:62:aa:44:a9:1f:d1:e5:1f:ff:d3:74:a5:42:
08:0b:ea:5a:e6:3a:d4:aa:5e:87:ee:6c:c4:24:45:
30:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D3:07:50:CB:A9:DD:C1:27:0C:26:BD:1D:03:9B:70:11:93:11:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bec51d39-1611-391f-b454-f9756d3b0a42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.84.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:9b:e7:6b:a1:56:63:f8:a1:bb:a0:6c:1a:fa:3b:bf:f4:68:
ef:99:52:08:3a:aa:b1:86:14:2e:18:39:25:eb:96:c7:02:ae:
dd:91:4e:4c:26:aa:d9:b9:27:7c:50:72:16:e6:28:f4:67:f2:
27:96:10:6d:9a:f9:f1:83:fe:23:76:e0:a2:09:d5:63:99:eb:
6c:fe:29:7e:b0:ef:ab:c9:49:aa:dc:45:c0:1f:c7:4f:46:a1:
ad:42:42:42:a8:e0:9b:08:72:05:1c:c2:7f:27:9e:56:f5:32:
a7:3d:fc:97:38:f5:a0:05:4c:e2:26:37:a1:1c:c6:68:e5:f6:
67:8d:e8:1a:82:a5:b6:27:de:32:70:c0:d1:91:7b:5d:02:21:
e2:2d:e6:5c:af:f8:ea:3c:64:be:61:c2:39:d6:e9:02:ee:10:
4c:03:b8:7a:ee:d9:09:96:0c:e3:32:0d:27:05:d3:71:82:a3:
31:b3:99:ff:2b:74:89:fe:f1:22:48:d1:37:3b:0b:3b:74:30:
6b:f8:fd:a2:76:05:3e:c1:3a:ed:36:ca:9b:db:80:47:07:1d:
c1:1d:b7:91:60:71:4e:30:b9:07:24:9a:12:24:90:b7:a0:b3:
a9:87:41:b6:7e:69:27:31:27:3c:a9:09:cd:fc:9f:0a:b0:5a:
cd:bc:51:87
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0yTyAIEEo5M6ZoH4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZTY4MGEyMzItYzQ3YS00YmYyLTg2MzEtNGY3ZmI5OTRjOWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgvc5GXmwjYiEOme2zgJCHl23aTzpvwL/Qml
WEpXtlaXtLfLUevPnsysu4KdgrG2EXUu/tV8Whk33lssoKiyHSFLVBQRT9pK4PjI
ZVlGMBphBprjcy9QzmFnQejC9EmESjNRTH+sdILfxNKJiFlemWMTcr29JpslbF0Y
1my8XO44A1tXiw67ezrCEHeAnkusOnlTXYBUzeNjFkj8AtA6W8MXJUMc+ittYuYZ
EBGmoFmJZuqG3y9o8imDYfRtbI5eYFuM3QG9SHmLjMeawi2MWQz2Guc7rdDgpcTb
RDxhPAGzw2KqRKkf0eUf/9N0pUIIC+pa5jrUql6H7mzEJEUwgQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFF/TB1DLqd3BJwwmvR0Dm3ARkxE+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYmVjNTFkMzktMTYxMS0z
OTFmLWI0NTQtZjk3NTZkM2IwYTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAElQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYZvna6FWY/ihu6BsGvo7v/Ro75lSCDqqsYYULhg5JeuWxwKu3ZFOTCaq
2bknfFByFuYo9GfyJ5YQbZr58YP+I3bgognVY5nrbP4pfrDvq8lJqtxFwB/HT0ah
rUJCQqjgmwhyBRzCfyeeVvUypz38lzj1oAVM4iY3oRzGaOX2Z43oGoKltifeMnDA
0ZF7XQIh4i3mXK/46jxkvmHCOdbpAu4QTAO4eu7ZCZYM4zINJwXTcYKjMbOZ/yt0
if7xIkjRNzsLO3Qwa/j9onYFPsE67TbKm9uARwcdwR23kWBxTjC5BySaEiSQt6Cz
qYdBtn5pJzEnPKkJzfyfCrBazbxRhw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:38:55 2025 by rpki-client