Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c30958e9-9733-37f2-b0a7-1bf41ab09079.roa
File: c30958e9-9733-37f2-b0a7-1bf41ab09079.roa (raw, json)
Hash identifier: FS9Fet4LEa1kW+dZFUV9XnqJ+gSboKdXYUMjGdFHs8A=
Subject key identifier: 4D:18:3B:76:DC:E3:38:D9:85:7D:F9:66:C5:C2:06:2C:8B:9A:DE:17
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E490B765EE9776F92B7A22680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c30958e9-9733-37f2-b0a7-1bf41ab09079.roa
Signing time: Sat 18 Jun 2022 12:00:00 +0000
ROA not before: Sat 18 Jun 2022 12:00:00 +0000
ROA not after: Sun 24 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.136.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:49:0b:76:5e:e9:77:6f:92:b7:a2:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 18 12:00:00 2022 GMT
Not After : Jul 24 04:00:00 2022 GMT
Subject: CN=c97ee7cb-219f-44c9-8f71-c68984d59cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:59:76:65:cd:8f:05:2d:84:c2:81:89:ca:
42:24:d7:b5:4c:44:04:ed:61:0a:9a:b5:cc:09:e6:
b2:f6:a1:56:46:33:c1:2f:52:f3:ca:ff:56:44:ed:
aa:e7:06:cc:95:e9:23:ec:e3:25:05:b2:eb:6e:74:
fa:55:ea:71:2d:55:b3:0a:8e:42:51:3e:94:38:70:
cb:e3:fe:ce:f3:b0:af:55:6e:c2:21:39:82:15:91:
56:8b:24:54:b2:4f:f2:7d:be:10:74:e6:18:ed:1c:
7f:60:8f:d2:6a:1f:e2:8b:ca:38:5f:11:67:01:1a:
e8:53:76:18:c9:e2:4b:2c:0d:e7:7b:e4:10:b5:ba:
89:2d:dd:bc:a8:7d:a7:86:2e:dc:c0:bb:59:e9:84:
1a:46:f8:20:02:bd:18:1f:88:15:b7:91:c6:df:81:
f6:65:25:cc:0c:b0:dc:0c:3a:47:f0:7a:48:09:8b:
c9:4a:03:0f:d2:a4:1b:c2:54:d7:0c:22:dc:5e:d7:
c4:32:5f:51:9d:3a:94:c2:dd:bc:da:4a:87:10:a3:
7e:80:c6:42:c2:4d:fe:76:61:8a:9e:00:4f:de:e1:
8b:73:6f:86:c1:04:b3:47:a4:52:94:99:b7:49:3f:
2d:50:c7:d4:44:bb:64:35:fd:47:ee:79:98:56:f2:
e8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:18:3B:76:DC:E3:38:D9:85:7D:F9:66:C5:C2:06:2C:8B:9A:DE:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c30958e9-9733-37f2-b0a7-1bf41ab09079.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.136.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:b9:7b:14:1e:80:a3:78:f1:5f:df:5a:c4:e4:16:56:9e:3d:
49:40:50:21:b9:09:17:1a:62:f2:fc:ea:8f:28:4d:51:07:98:
5e:24:52:79:97:01:f5:4c:c5:6a:a8:7e:33:49:f1:12:35:80:
ff:a5:8b:53:f3:3e:0e:d6:0d:a4:f1:a8:ef:75:53:13:16:b4:
54:8a:36:19:eb:4a:e9:1e:09:88:0f:86:58:ca:19:b0:76:c5:
c1:82:d1:d0:28:f2:ce:f3:d2:7e:0b:5b:a6:e8:0c:ac:11:1f:
d1:71:20:3b:9f:c4:ca:c6:4a:ea:7c:b7:59:f9:e5:50:3f:3f:
99:3e:cd:e6:f4:dd:f7:56:9b:f5:52:15:ec:03:19:2e:a9:bd:
80:82:0e:c8:0a:d5:08:5f:57:7b:20:89:99:e0:28:78:93:09:
d1:a3:c6:18:77:48:d7:dd:02:48:00:bf:0c:eb:8f:ef:fb:2c:
7b:6f:e5:c2:dc:2c:e6:b8:68:b7:3c:69:c6:2a:f0:07:20:0e:
a8:84:07:9b:1e:af:e7:f1:59:c0:fe:39:f2:11:bf:1c:ca:b4:
54:e2:2a:5d:ae:8c:a3:96:0a:09:96:6a:55:6b:24:f7:3d:0a:
92:96:b3:24:58:1f:7b:be:3c:6c:a6:29:31:85:5a:fc:3f:fc:
fc:d3:07:fe
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5JC3Ze6XdvkreiJoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYxODEyMDAwMFoXDTIyMDcyNDA0MDAwMFowLzEtMCsGA1UEAxMk
Yzk3ZWU3Y2ItMjE5Zi00NGM5LThmNzEtYzY4OTg0ZDU5Y2QzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+ZZdmXNjwUthMKBicpCJNe1TEQE7WEKmrXM
Ceay9qFWRjPBL1Lzyv9WRO2q5wbMlekj7OMlBbLrbnT6VepxLVWzCo5CUT6UOHDL
4/7O87CvVW7CITmCFZFWiyRUsk/yfb4QdOYY7Rx/YI/Sah/ii8o4XxFnARroU3YY
yeJLLA3ne+QQtbqJLd28qH2nhi7cwLtZ6YQaRvggAr0YH4gVt5HG34H2ZSXMDLDc
DDpH8HpICYvJSgMP0qQbwlTXDCLcXtfEMl9RnTqUwt282kqHEKN+gMZCwk3+dmGK
ngBP3uGLc2+GwQSzR6RSlJm3ST8tUMfURLtkNf1H7nmYVvLoQQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFE0YO3bc4zjZhX35ZsXCBiyLmt4XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYzMwOTU4ZTktOTczMy0z
N2YyLWIwYTctMWJmNDFhYjA5MDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEogwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFbl7FB6Ao3jxX99axOQWVp49SUBQIbkJFxpi8vzqjyhNUQeYXiRSeZcB
9UzFaqh+M0nxEjWA/6WLU/M+DtYNpPGo73VTExa0VIo2GetK6R4JiA+GWMoZsHbF
wYLR0CjyzvPSfgtbpugMrBEf0XEgO5/EysZK6ny3WfnlUD8/mT7N5vTd91ab9VIV
7AMZLqm9gIIOyArVCF9XeyCJmeAoeJMJ0aPGGHdI190CSAC/DOuP7/sse2/lwtws
5rhotzxpxirwByAOqIQHmx6v5/FZwP458hG/HMq0VOIqXa6Mo5YKCZZqVWsk9z0K
kpazJFgfe748bKYpMYVa/D/8/NMH/g==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:03:46 2025 by rpki-client