Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3cb7cfc-d9bd-3c69-bcf0-4087db5ab679.roa
File: c3cb7cfc-d9bd-3c69-bcf0-4087db5ab679.roa (raw, json)
Hash identifier: pKQBr14sed4JZZmTZZ1BDnydqY6Ho6VPWBc0vP9+M0M=
Subject key identifier: 6B:FB:A8:D2:07:7F:18:AD:9C:0C:D5:FC:C7:D6:A3:BE:FC:22:91:76
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584046F9074E8E47EE13E185E680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3cb7cfc-d9bd-3c69-bcf0-4087db5ab679.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.59.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:46:f9:07:4e:8e:47:ee:13:e1:85:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=da49ef33-f35b-453b-827c-10aeaae0b0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:95:9f:33:17:f8:8b:5e:7c:62:d2:11:f0:a3:
3c:04:5c:34:02:e2:35:af:d7:4f:7d:0a:32:f1:e3:
91:92:7c:44:84:06:ff:f3:f5:2d:3f:81:ce:8c:66:
25:04:5c:1e:83:31:b9:cd:9d:3c:4b:d1:fd:ba:35:
a4:11:64:ad:d0:76:ea:4d:eb:4d:e2:5c:ca:c1:fd:
ef:c0:29:a9:2c:29:db:b3:95:2d:35:bc:4a:b7:b8:
61:20:5f:8c:c7:12:e0:82:07:71:af:ff:5c:0f:e0:
55:d7:ac:da:6f:16:8c:c0:18:92:26:2a:3e:fd:16:
f3:f3:da:7f:0a:a0:7c:88:58:da:ba:f9:15:c8:8f:
61:bf:39:a6:f2:a7:1c:1c:73:48:f6:00:b8:0b:fc:
03:e3:be:ff:46:e7:e6:ca:d3:15:a7:3e:e4:a5:a2:
a3:02:f2:de:76:8d:3c:c7:20:f5:2b:82:62:9f:ce:
e5:80:21:1b:e1:89:63:be:ed:73:55:c8:e2:aa:60:
1b:eb:fb:d3:c7:26:1d:be:01:0b:5f:dc:15:aa:5d:
5b:cc:ee:62:29:16:e4:16:7d:88:1d:b5:1c:d2:ec:
5d:78:a9:3f:c8:42:30:57:d1:9d:2b:e7:d2:f3:5f:
7e:24:e5:b6:7e:db:72:f9:28:d4:11:2c:07:7a:33:
53:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FB:A8:D2:07:7F:18:AD:9C:0C:D5:FC:C7:D6:A3:BE:FC:22:91:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3cb7cfc-d9bd-3c69-bcf0-4087db5ab679.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.59.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:92:05:ff:42:6b:8f:5e:cc:a7:dd:ab:a4:35:17:8a:97:16:
35:d8:5d:38:2b:e3:78:6e:18:56:cb:c5:10:ad:9d:21:80:77:
40:d4:49:8f:dd:96:2f:a2:c4:ca:85:53:81:c3:b3:fd:d5:1e:
28:f2:96:91:5b:17:5f:e8:88:55:5d:01:85:75:12:1c:1b:7a:
2b:98:5a:48:2a:0f:c2:fd:78:d2:5f:bc:67:f2:ec:3a:fc:82:
b4:2a:5c:c8:5d:38:56:ed:46:07:8d:14:05:d7:b4:4a:fa:3f:
19:ef:6c:88:ba:2d:21:6a:bd:db:3b:59:42:72:8b:42:8f:43:
d6:4a:64:fb:fb:31:19:03:de:a0:82:5f:ef:0d:9e:9c:55:70:
fe:d5:43:2c:57:d2:cb:77:86:02:86:8a:61:aa:38:8f:b6:3e:
ba:85:3a:63:a4:bb:c1:b8:cc:a0:74:3a:5b:3b:55:78:1e:00:
61:43:99:fb:3d:3c:15:42:89:2e:e9:ca:7b:b7:70:c6:d5:44:
73:34:7b:ef:16:b1:76:20:7a:d7:37:ea:3a:43:32:a3:c6:ca:
fe:9c:43:00:80:8e:92:af:b4:7b:1d:0f:99:82:96:75:43:7a:
df:9c:68:1c:3e:2a:7e:f3:ae:c1:f7:18:46:64:7b:de:10:de:
04:c9:fa:70
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBG+QdOjkfuE+GF5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNzEyMDAwMFoXDTIzMDEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
ZGE0OWVmMzMtZjM1Yi00NTNiLTgyN2MtMTBhZWFhZTBiMGY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pWfMxf4i158YtIR8KM8BFw0AuI1r9dPfQoy
8eORknxEhAb/8/UtP4HOjGYlBFwegzG5zZ08S9H9ujWkEWSt0HbqTetN4lzKwf3v
wCmpLCnbs5UtNbxKt7hhIF+MxxLgggdxr/9cD+BV16zabxaMwBiSJio+/Rbz89p/
CqB8iFjauvkVyI9hvzmm8qccHHNI9gC4C/wD477/RufmytMVpz7kpaKjAvLedo08
xyD1K4Jin87lgCEb4Yljvu1zVcjiqmAb6/vTxyYdvgELX9wVql1bzO5iKRbkFn2I
HbUc0uxdeKk/yEIwV9GdK+fS819+JOW2ftty+SjUESwHejNTwwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGv7qNIHfxitnAzV/MfWo778IpF2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYzNjYjdjZmMtZDliZC0z
YzY5LWJjZjAtNDA4N2RiNWFiNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEjswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEABZIF/0Jrj17Mp92rpDUXipcWNdhdOCvjeG4YVsvFEK2dIYB3QNRJj92W
L6LEyoVTgcOz/dUeKPKWkVsXX+iIVV0BhXUSHBt6K5haSCoPwv140l+8Z/LsOvyC
tCpcyF04Vu1GB40UBde0Svo/Ge9siLotIWq92ztZQnKLQo9D1kpk+/sxGQPeoIJf
7w2enFVw/tVDLFfSy3eGAoaKYao4j7Y+uoU6Y6S7wbjMoHQ6WztVeB4AYUOZ+z08
FUKJLunKe7dwxtVEczR77xaxdiB61zfqOkMyo8bK/pxDAICOkq+0ex0PmYKWdUN6
35xoHD4qfvOuwfcYRmR73hDeBMn6cA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 21:28:31 2025 by rpki-client