Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bf85d4dd-00b2-382b-9fdb-b553bf0801d2.roa
File: bf85d4dd-00b2-382b-9fdb-b553bf0801d2.roa (raw, json)
Hash identifier: bNwiXIZ+RJzqKsgGahOnDEZikqzbzPImxvLiIRpfdXk=
Subject key identifier: 8F:FA:2C:D0:04:8A:56:CB:69:D2:D9:3B:EA:77:AB:CC:59:F0:9D:DD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D32488B50079114E2ABF97280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bf85d4dd-00b2-382b-9fdb-b553bf0801d2.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.54.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:48:8b:50:07:91:14:e2:ab:f9:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=423d7fb6-fdab-4803-8b25-aec650a57d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:35:3a:fe:a7:6a:24:d1:60:9e:7a:e3:e2:dc:
6d:f3:9b:35:5d:0f:5d:d0:95:ec:9d:58:5a:72:e9:
59:b1:c7:82:7c:de:2b:d3:fc:4d:af:ec:d0:02:b5:
92:ea:6f:87:31:22:76:f0:2f:4b:d5:64:a8:87:6b:
0b:84:b2:83:24:3c:8a:c7:40:40:e2:72:59:d2:28:
a8:d7:0b:13:57:da:4b:49:90:e2:d7:3d:3f:f7:97:
ca:2f:08:0a:74:21:b1:0e:9f:80:13:e9:eb:03:fb:
d9:4f:65:7a:b9:c8:ed:be:70:d3:7f:8d:45:79:d7:
2b:cf:f1:9d:06:98:98:a0:a0:c6:e8:9a:d3:39:4a:
bf:23:36:8e:a7:0d:31:f6:59:56:87:84:f5:38:50:
c2:b6:22:b3:bf:f4:ac:da:15:23:5c:a2:63:1a:ab:
30:72:3d:6f:78:2b:76:76:de:d4:aa:70:c7:42:7e:
14:30:6b:70:c5:d3:6a:0b:81:00:c9:7f:cb:cf:cc:
f6:ee:b6:8f:b3:97:39:a1:01:0d:95:e5:27:2d:e9:
49:9f:a3:34:c1:47:ea:f5:e0:ad:e0:cb:31:cf:06:
d2:5a:03:b5:22:36:97:81:f5:7d:5f:7a:6a:6a:43:
8d:bf:03:96:a9:2c:fa:d9:2a:c4:05:6e:b0:29:ce:
c0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FA:2C:D0:04:8A:56:CB:69:D2:D9:3B:EA:77:AB:CC:59:F0:9D:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bf85d4dd-00b2-382b-9fdb-b553bf0801d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.54.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:19:5b:a2:a0:d0:dc:f5:8b:91:24:52:87:f5:36:d9:f7:58:
da:57:1f:f9:16:f7:dc:93:8e:d2:14:e4:be:f6:f7:35:aa:25:
db:4f:4d:be:be:8f:9f:46:93:9e:ad:c6:5a:d0:96:5b:86:76:
97:99:24:cc:1f:20:ff:2f:b6:46:b3:61:b5:eb:2a:f2:e1:fc:
82:77:9c:de:3e:ee:67:7f:dd:10:84:bd:ac:cd:63:98:8b:57:
66:11:c2:c4:8c:9e:5c:a0:88:f3:3b:80:6d:54:c7:8e:5a:9f:
85:52:16:3d:d3:18:c1:99:cd:bb:f4:79:d5:68:02:1b:b1:58:
48:37:78:17:9f:a4:11:6e:9b:23:32:ea:8d:4c:ba:85:a2:53:
1d:20:2d:39:51:34:e1:e2:61:4a:d9:a0:f8:60:47:03:dc:b3:
5a:80:5c:8a:27:9f:3e:3c:b0:23:13:59:03:0f:8d:19:e8:f9:
9e:20:9d:44:13:18:be:1d:6d:2c:6d:9d:a0:6b:0b:33:fd:e8:
2b:15:23:53:84:67:e5:89:73:21:1a:2f:de:df:7a:96:60:51:
72:ff:c2:6e:fd:f7:5e:ca:98:3c:a2:7e:13:7d:e0:9c:00:7a:
58:71:f0:b5:f1:3d:94:1f:9e:3b:92:96:0d:da:24:a0:e6:bc:
20:f6:56:54
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0ySItQB5EU4qv5coAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
NDIzZDdmYjYtZmRhYi00ODAzLThiMjUtYWVjNjUwYTU3ZDc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzU6/qdqJNFgnnrj4txt85s1XQ9d0JXsnVha
culZsceCfN4r0/xNr+zQArWS6m+HMSJ28C9L1WSoh2sLhLKDJDyKx0BA4nJZ0iio
1wsTV9pLSZDi1z0/95fKLwgKdCGxDp+AE+nrA/vZT2V6ucjtvnDTf41Fedcrz/Gd
BpiYoKDG6JrTOUq/IzaOpw0x9llWh4T1OFDCtiKzv/Ss2hUjXKJjGqswcj1veCt2
dt7UqnDHQn4UMGtwxdNqC4EAyX/Lz8z27raPs5c5oQENleUnLelJn6M0wUfq9eCt
4MsxzwbSWgO1IjaXgfV9X3pqakONvwOWqSz62SrEBW6wKc7AlwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFI/6LNAEilbLadLZO+p3q8xZ8J3dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYmY4NWQ0ZGQtMDBiMi0z
ODJiLTlmZGItYjU1M2JmMDgwMWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEjYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEARhlboqDQ3PWLkSRSh/U22fdY2lcf+Rb33JOO0hTkvvb3Naol209Nvr6P
n0aTnq3GWtCWW4Z2l5kkzB8g/y+2RrNhtesq8uH8gnec3j7uZ3/dEIS9rM1jmItX
ZhHCxIyeXKCI8zuAbVTHjlqfhVIWPdMYwZnNu/R51WgCG7FYSDd4F5+kEW6bIzLq
jUy6haJTHSAtOVE04eJhStmg+GBHA9yzWoBciiefPjywIxNZAw+NGej5niCdRBMY
vh1tLG2doGsLM/3oKxUjU4Rn5YlzIRov3t96lmBRcv/Cbv33XsqYPKJ+E33gnAB6
WHHwtfE9lB+eO5KWDdokoOa8IPZWVA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:58:04 2025 by rpki-client