Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c865f49c-8265-3d74-a4c6-1337dae68ee2.roa
File: c865f49c-8265-3d74-a4c6-1337dae68ee2.roa (raw, json)
Hash identifier: cuKRzFhNCXuPXW6gr10T9pzE1YRVVnwzxZunL5LTujI=
Subject key identifier: B2:2F:1A:7A:96:9A:AD:DF:0B:F5:3A:9B:29:F1:F1:67:FA:26:EC:56
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DFAD174D8C4BBB55937498F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c865f49c-8265-3d74-a4c6-1337dae68ee2.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.136.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:fa:d1:74:d8:c4:bb:b5:59:37:49:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=4d117a0d-5029-4265-b7f5-b063e2b51bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:66:47:c8:c4:24:4e:d3:0e:3e:0d:0b:74:50:
be:90:1a:32:d9:22:19:ec:be:a1:dd:e8:c3:da:b3:
83:4e:c8:6a:e2:ad:d9:39:e7:96:58:85:1d:f3:ab:
13:88:9b:0e:be:1c:2a:d7:09:46:87:e8:9c:42:f1:
fc:a1:05:da:c4:6a:01:b9:aa:94:5d:28:73:6e:b4:
74:cc:f9:75:86:dd:3b:e5:4d:df:9a:95:fd:07:e3:
40:84:4c:f8:71:74:6a:b5:f1:2c:77:69:ca:fe:c0:
ad:35:ea:f6:6b:0f:18:da:89:67:19:fc:0a:c5:0d:
f0:2d:cc:60:9e:01:9a:5d:0f:bc:d3:ff:64:61:4e:
aa:3c:7b:35:3e:77:42:41:79:4d:0a:d6:7a:3b:c0:
76:c1:04:df:8a:9c:12:99:25:97:55:79:66:06:89:
b2:a7:84:01:57:29:37:38:b3:fd:ac:ac:25:cc:aa:
99:7c:d4:11:fe:92:de:f1:95:f9:ff:fb:61:09:fe:
d2:0a:e0:52:90:cf:e0:f7:d9:fd:b5:48:8d:2e:b4:
e6:66:a6:6d:9e:1f:50:f5:4f:d6:fa:ee:4b:49:08:
83:1d:43:0b:74:2e:a1:0c:ae:77:08:4f:ad:bc:21:
dc:be:bc:ad:ed:58:18:09:57:11:55:a2:f8:96:f9:
85:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2F:1A:7A:96:9A:AD:DF:0B:F5:3A:9B:29:F1:F1:67:FA:26:EC:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c865f49c-8265-3d74-a4c6-1337dae68ee2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.136.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:7c:00:1e:e8:78:c3:96:70:50:95:7a:7b:d1:f2:17:9e:be:
58:24:db:a2:78:cc:44:de:27:95:f8:61:c1:45:91:a7:ef:26:
2a:a0:d6:51:01:58:b6:c3:e0:8a:96:81:48:49:e0:c4:9a:86:
bd:84:26:22:c5:44:f6:60:bf:58:8e:aa:7f:a4:44:f1:10:f5:
82:32:a4:da:f9:0b:19:5a:db:30:b4:c0:ad:05:87:b9:44:9b:
a0:c2:53:ad:1b:1a:97:0b:4b:c6:d1:d5:4f:c3:85:30:6b:e2:
bb:64:f2:17:40:a1:41:4e:dd:17:60:16:1d:9c:60:e2:92:e7:
01:99:64:55:54:4b:d5:76:ef:fa:32:94:dd:c6:17:37:69:fb:
89:7e:dd:77:69:00:8d:0a:aa:03:fa:6d:40:c1:2e:0f:ab:0a:
57:9c:14:b5:2b:9f:dc:58:10:31:d0:6f:06:49:f5:82:21:88:
f1:49:57:6e:aa:36:73:c4:f4:24:13:ba:14:bd:f9:9c:20:b1:
cc:e3:19:ec:21:d7:46:c7:34:f4:ec:19:c1:46:12:31:e8:a7:
91:aa:f6:42:06:47:85:aa:a0:57:f0:d2:f1:42:12:8f:61:40:
7c:64:de:a2:d4:09:8f:80:63:d0:9a:03:45:3d:dc:78:24:52:
45:40:05:05
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD360XTYxLu1WTdJjwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUyMDEyMDAwMFoXDTIyMDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
NGQxMTdhMGQtNTAyOS00MjY1LWI3ZjUtYjA2M2UyYjUxYmI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmZHyMQkTtMOPg0LdFC+kBoy2SIZ7L6h3ejD
2rODTshq4q3ZOeeWWIUd86sTiJsOvhwq1wlGh+icQvH8oQXaxGoBuaqUXShzbrR0
zPl1ht075U3fmpX9B+NAhEz4cXRqtfEsd2nK/sCtNer2aw8Y2olnGfwKxQ3wLcxg
ngGaXQ+80/9kYU6qPHs1PndCQXlNCtZ6O8B2wQTfipwSmSWXVXlmBomyp4QBVyk3
OLP9rKwlzKqZfNQR/pLe8ZX5//thCf7SCuBSkM/g99n9tUiNLrTmZqZtnh9Q9U/W
+u5LSQiDHUMLdC6hDK53CE+tvCHcvryt7VgYCVcRVaL4lvmFzQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLIvGnqWmq3fC/U6mynx8Wf6JuxWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYzg2NWY0OWMtODI2NS0z
ZDc0LWE0YzYtMTMzN2RhZTY4ZWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEogwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAg3wAHuh4w5ZwUJV6e9HyF56+WCTbonjMRN4nlfhhwUWRp+8mKqDWUQFY
tsPgipaBSEngxJqGvYQmIsVE9mC/WI6qf6RE8RD1gjKk2vkLGVrbMLTArQWHuUSb
oMJTrRsalwtLxtHVT8OFMGviu2TyF0ChQU7dF2AWHZxg4pLnAZlkVVRL1Xbv+jKU
3cYXN2n7iX7dd2kAjQqqA/ptQMEuD6sKV5wUtSuf3FgQMdBvBkn1giGI8UlXbqo2
c8T0JBO6FL35nCCxzOMZ7CHXRsc09OwZwUYSMeinkar2QgZHhaqgV/DS8UISj2FA
fGTeotQJj4Bj0JoDRT3ceCRSRUAFBQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:50:28 2025 by rpki-client