Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c4547d32-dca9-3928-9ca5-341054c467ab.roa
File: c4547d32-dca9-3928-9ca5-341054c467ab.roa (raw, json)
Hash identifier: OE6itGOAQtPA8a7nQRcEHVLXLCoVawZWCusTJ2m3nxI=
Subject key identifier: 71:88:08:56:14:AE:DF:12:3B:CE:74:89:86:C9:BF:44:B6:90:8B:F5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E975BEDE63C2F33C0ED8C9C00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c4547d32-dca9-3928-9ca5-341054c467ab.roa
Signing time: Sat 16 Jul 2022 12:00:00 +0000
ROA not before: Sat 16 Jul 2022 12:00:00 +0000
ROA not after: Sun 21 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.96.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:97:5b:ed:e6:3c:2f:33:c0:ed:8c:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 16 12:00:00 2022 GMT
Not After : Aug 21 04:00:00 2022 GMT
Subject: CN=7394e0d6-e0d6-4daf-909b-dc08c25b8646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:19:d1:ae:29:7f:68:63:eb:ba:8f:fa:97:b3:
7e:df:1e:f6:de:1b:d1:a7:77:97:46:6e:79:e5:0c:
94:6b:39:54:c1:97:cc:a1:3b:95:b8:da:37:31:9f:
ef:01:36:21:c3:0f:28:35:3e:d1:1f:e6:8f:a5:99:
f3:17:c2:a4:94:d6:de:d9:13:c9:1b:3b:24:7a:e5:
f8:6b:b3:49:c8:15:5e:88:36:ae:1a:77:bb:48:90:
74:03:79:88:1e:74:f3:cc:37:d0:28:29:fc:2a:19:
d6:13:dc:71:00:3f:fc:7d:bd:b3:7b:9a:c4:56:b0:
a7:7a:67:eb:27:b8:5d:d7:85:bf:96:f1:7e:78:5a:
c1:5b:e3:10:2e:d8:c5:f6:5d:b4:7f:25:a3:11:16:
3f:56:b3:f1:b9:e2:21:6e:70:b8:af:62:91:20:6e:
df:90:7c:dd:38:82:e5:08:bc:c4:d9:84:1c:18:01:
a4:fc:4e:a7:07:5f:d3:34:27:4b:92:cd:17:26:1f:
62:cb:e1:0a:ac:5a:a8:2e:5a:88:39:8a:d4:b3:0b:
df:64:9b:f8:76:a6:92:87:34:74:fc:f5:2a:79:c3:
38:88:f0:a3:e1:74:63:d2:2a:7b:d9:8f:7c:54:25:
b1:6f:55:fd:a5:0e:e8:81:23:df:70:79:f3:d9:88:
ae:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:88:08:56:14:AE:DF:12:3B:CE:74:89:86:C9:BF:44:B6:90:8B:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c4547d32-dca9-3928-9ca5-341054c467ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.96.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:b1:87:90:3c:e9:cf:38:fe:44:83:eb:b3:fe:f4:28:7a:72:
ac:20:3d:29:e0:43:47:04:c8:32:7e:dd:e3:b4:ac:65:e0:52:
f4:3f:84:bd:c6:9f:e8:b8:ee:01:f4:2c:79:7e:5c:aa:7c:e5:
f1:1c:79:a0:00:23:11:20:58:59:95:b4:79:32:c4:3f:02:86:
a8:0e:83:d0:50:de:77:70:f4:53:f5:7b:d8:54:15:78:ca:74:
e2:ef:a2:33:06:06:ff:8a:16:3b:d3:4e:74:a5:85:38:b8:a6:
14:ed:dd:9a:c1:fb:7b:1e:9d:2a:9f:4f:39:88:6b:9c:2c:48:
c6:81:98:4d:4a:06:f0:08:91:bb:f5:7c:6a:c8:61:0a:92:e2:
5f:2a:f6:b3:74:a0:5b:a2:66:fb:3a:d4:40:f6:1c:49:96:fc:
2c:1a:a1:1d:1e:4d:72:d3:81:a1:0c:58:6a:1a:20:a8:dd:2f:
e1:cf:31:41:9e:ec:0e:15:c7:36:2c:d5:d3:8d:36:3f:0c:ec:
15:c2:8c:1a:14:c4:c7:fc:d9:07:0f:7b:39:9a:62:b4:ad:c8:
47:f1:a7:af:f2:1e:29:d2:b0:60:da:24:5d:41:89:a8:dd:9f:
65:5e:00:c1:9f:d1:41:9a:7a:e2:9a:e1:ad:ad:eb:b8:ae:c4:
5a:8c:82:b4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6XW+3mPC8zwO2MnAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcxNjEyMDAwMFoXDTIyMDgyMTA0MDAwMFowLzEtMCsGA1UEAxMk
NzM5NGUwZDYtZTBkNi00ZGFmLTkwOWItZGMwOGMyNWI4NjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhnRril/aGPruo/6l7N+3x723hvRp3eXRm55
5QyUazlUwZfMoTuVuNo3MZ/vATYhww8oNT7RH+aPpZnzF8KklNbe2RPJGzskeuX4
a7NJyBVeiDauGne7SJB0A3mIHnTzzDfQKCn8KhnWE9xxAD/8fb2ze5rEVrCnemfr
J7hd14W/lvF+eFrBW+MQLtjF9l20fyWjERY/VrPxueIhbnC4r2KRIG7fkHzdOILl
CLzE2YQcGAGk/E6nB1/TNCdLks0XJh9iy+EKrFqoLlqIOYrUswvfZJv4dqaShzR0
/PUqecM4iPCj4XRj0ip72Y98VCWxb1X9pQ7ogSPfcHnz2Yiu8QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHGICFYUrt8SO850iYbJv0S2kIv1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYzQ1NDdkMzItZGNhOS0z
OTI4LTljYTUtMzQxMDU0YzQ2N2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEmAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAsrGHkDzpzzj+RIPrs/70KHpyrCA9KeBDRwTIMn7d47SsZeBS9D+Evcaf
6LjuAfQseX5cqnzl8Rx5oAAjESBYWZW0eTLEPwKGqA6D0FDed3D0U/V72FQVeMp0
4u+iMwYG/4oWO9NOdKWFOLimFO3dmsH7ex6dKp9POYhrnCxIxoGYTUoG8AiRu/V8
ashhCpLiXyr2s3SgW6Jm+zrUQPYcSZb8LBqhHR5NctOBoQxYahogqN0v4c8xQZ7s
DhXHNizV0402PwzsFcKMGhTEx/zZBw97OZpitK3IR/Gnr/IeKdKwYNokXUGJqN2f
ZV4AwZ/RQZp64prhra3ruK7EWoyCtA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:16:58 2025 by rpki-client