Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c7e10d50-8dee-396a-b27d-ea9bba59fc70.roa
File: c7e10d50-8dee-396a-b27d-ea9bba59fc70.roa (raw, json)
Hash identifier: PRiWbYIUQncjxc6ESh6lwQBdtN3e1zOop5LCWSWaOeU=
Subject key identifier: 4C:E7:D6:F6:44:CD:45:9D:5E:C2:14:5D:50:A1:A4:A4:0A:24:BF:45
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401FA0B2ACAF3A14D0ED6E0300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c7e10d50-8dee-396a-b27d-ea9bba59fc70.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.168.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1f:a0:b2:ac:af:3a:14:d0:ed:6e:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=3a47cdb2-e05f-4693-a4bd-0181204614f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9f:ac:46:ff:46:df:fe:4a:94:16:0e:a7:4e:
52:88:a8:66:c5:5f:9e:8d:af:69:20:36:82:49:1e:
07:62:93:b0:08:1d:c4:2b:21:63:a6:e1:54:32:f2:
8d:b5:77:0b:31:1e:63:33:f2:6f:a6:98:f3:6c:ea:
56:28:f9:db:f3:dc:66:3c:07:59:36:e4:52:bf:13:
2f:e5:d6:88:d6:4a:69:09:8d:92:9a:53:34:9a:6d:
a0:74:c3:11:5a:66:1c:20:6e:4b:da:9b:75:f2:79:
d5:74:61:af:2f:24:bb:b0:2a:51:cd:40:29:fb:80:
88:d0:ac:17:39:7a:00:e9:8a:82:b7:b8:1c:e3:75:
02:14:fe:5d:a6:82:97:af:8f:81:cf:5a:26:88:8a:
d7:fb:e7:2f:87:f4:f5:36:d8:0d:b7:ec:3d:b3:df:
fa:e0:ff:d3:65:68:cb:79:9e:8d:23:92:6d:c0:96:
13:0b:52:41:50:91:3e:be:3e:bf:9f:99:9d:03:45:
5a:be:28:1c:08:a3:41:6d:40:c1:ba:e6:6e:d5:8f:
d0:a9:99:56:e5:b8:83:2d:b2:4b:7f:92:21:83:c6:
6b:2c:a3:10:ff:f9:36:72:b0:e1:24:f2:78:35:f2:
80:fa:66:d7:b9:7c:87:c9:8e:f4:f7:c8:21:7b:b0:
29:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E7:D6:F6:44:CD:45:9D:5E:C2:14:5D:50:A1:A4:A4:0A:24:BF:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c7e10d50-8dee-396a-b27d-ea9bba59fc70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.168.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:68:56:40:e2:5b:46:bb:0a:08:5c:5f:5c:17:79:e6:a1:a6:
60:a7:66:e0:55:27:ad:5a:7d:b7:e0:b4:ce:84:c6:de:9b:52:
bb:81:da:4e:3f:7a:90:56:0b:bb:0c:87:73:8a:56:03:12:cb:
fa:58:d9:3b:b9:ae:82:33:b0:a1:f2:d8:37:c6:d8:7b:8b:52:
05:d8:14:04:1f:b7:60:58:0f:6d:1a:c8:1d:99:dc:9c:3d:b3:
ed:22:a4:92:98:27:39:1b:7c:06:87:14:03:18:4a:6f:d8:90:
10:15:68:1c:44:50:ed:3c:ac:ef:6b:1f:68:de:74:9a:0f:0d:
01:19:0a:10:d2:c2:fe:6b:50:c5:da:21:09:0b:3c:56:10:d3:
11:eb:22:6a:67:d7:ae:3b:0f:9f:bc:ca:6e:16:3e:d8:cc:40:
bc:76:9b:d5:86:57:af:55:0d:1d:73:72:d2:b8:34:b1:04:73:
09:44:c2:20:e2:1c:64:e0:00:86:c5:39:87:c6:7e:c6:2a:22:
85:f7:22:99:25:a4:1e:a4:67:db:e5:6c:5d:d4:36:a7:02:ca:
ad:52:7b:99:af:b8:70:54:43:71:c5:5f:d8:28:ba:31:65:7a:
68:05:3d:93:4f:8a:4d:73:15:8d:92:c0:c2:bc:50:bd:28:cb:
9b:80:78:56
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAfoLKsrzoU0O1uAwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIwMzEyMDAwMFoXDTIzMDEwODA1MDAwMFowLzEtMCsGA1UEAxMk
M2E0N2NkYjItZTA1Zi00NjkzLWE0YmQtMDE4MTIwNDYxNGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5+sRv9G3/5KlBYOp05SiKhmxV+eja9pIDaC
SR4HYpOwCB3EKyFjpuFUMvKNtXcLMR5jM/JvppjzbOpWKPnb89xmPAdZNuRSvxMv
5daI1kppCY2SmlM0mm2gdMMRWmYcIG5L2pt18nnVdGGvLyS7sCpRzUAp+4CI0KwX
OXoA6YqCt7gc43UCFP5dpoKXr4+Bz1omiIrX++cvh/T1NtgNt+w9s9/64P/TZWjL
eZ6NI5JtwJYTC1JBUJE+vj6/n5mdA0VavigcCKNBbUDBuuZu1Y/QqZlW5biDLbJL
f5Ihg8ZrLKMQ//k2crDhJPJ4NfKA+mbXuXyHyY7098ghe7ApuQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEzn1vZEzUWdXsIUXVChpKQKJL9FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYzdlMTBkNTAtOGRlZS0z
OTZhLWIyN2QtZWE5YmJhNTlmYzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEqgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAEGhWQOJbRrsKCFxfXBd55qGmYKdm4FUnrVp9t+C0zoTG3ptSu4HaTj96
kFYLuwyHc4pWAxLL+ljZO7mugjOwofLYN8bYe4tSBdgUBB+3YFgPbRrIHZncnD2z
7SKkkpgnORt8BocUAxhKb9iQEBVoHERQ7Tys72sfaN50mg8NARkKENLC/mtQxdoh
CQs8VhDTEesiamfXrjsPn7zKbhY+2MxAvHab1YZXr1UNHXNy0rg0sQRzCUTCIOIc
ZOAAhsU5h8Z+xioihfcimSWkHqRn2+VsXdQ2pwLKrVJ7ma+4cFRDccVf2Ci6MWV6
aAU9k0+KTXMVjZLAwrxQvSjLm4B4Vg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:38:35 2025 by rpki-client