Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca2a0c7d-0484-3baa-aefc-79cc40d1f94f.roa
File: ca2a0c7d-0484-3baa-aefc-79cc40d1f94f.roa (raw, json)
Hash identifier: 4C8jLndB0jToP9Ov3YpCmFW0f0JoBQv7YEIyZLPCPLg=
Subject key identifier: F6:96:FA:C4:2C:CA:C2:93:50:40:13:18:37:D7:8E:A6:9E:69:4F:8A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE0C2283EBB9CAED2D116CB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca2a0c7d-0484-3baa-aefc-79cc40d1f94f.roa
Signing time: Thu 11 Aug 2022 12:00:00 +0000
ROA not before: Thu 11 Aug 2022 12:00:00 +0000
ROA not after: Fri 16 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e0:c2:28:3e:bb:9c:ae:d2:d1:16:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 11 12:00:00 2022 GMT
Not After : Sep 16 04:00:00 2022 GMT
Subject: CN=03308689-8923-49df-b967-e7eea3a1dc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fe:a7:01:de:1f:77:e0:16:37:6b:8b:9d:e1:
14:d7:da:fb:23:ab:a0:d0:d2:88:93:39:41:cb:57:
bd:71:01:fa:45:11:33:c0:01:78:59:5f:f0:15:70:
59:8c:b7:d9:74:ee:bb:23:f1:40:74:5f:96:87:3b:
e4:66:40:47:90:99:f9:27:a2:13:99:2d:cf:e3:a5:
ed:b2:bd:4c:16:ee:27:82:72:de:70:7f:b3:9b:11:
74:dc:2a:c8:27:7e:43:5b:ea:f4:d8:5a:3b:87:4e:
c3:80:5d:28:32:16:cb:05:73:14:b4:4c:73:d3:7d:
01:30:28:f4:bb:16:b4:a7:80:d6:f4:a1:67:6f:35:
fe:43:68:24:8e:ef:39:7f:48:fd:27:7b:df:c7:b4:
4f:21:c9:db:73:38:74:93:60:0b:03:64:a1:9a:29:
f3:d0:15:7d:3b:ed:c4:8a:84:b9:db:c2:ad:05:37:
1b:39:31:af:a6:db:d3:eb:e9:1e:69:84:07:cf:35:
9b:8a:ba:e2:98:c0:68:ac:02:fb:7c:fd:a0:a7:fa:
94:33:0e:62:43:95:63:64:4d:5b:5b:4a:a2:53:04:
e3:e3:b7:1b:4c:75:e5:30:d6:6d:34:6d:09:52:07:
15:6d:b8:e2:06:60:97:d5:d7:e9:24:04:b7:f6:00:
79:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:96:FA:C4:2C:CA:C2:93:50:40:13:18:37:D7:8E:A6:9E:69:4F:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca2a0c7d-0484-3baa-aefc-79cc40d1f94f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:05:61:bc:6c:d8:06:07:bf:7c:6a:e9:22:24:9e:a1:9f:ec:
0d:46:f1:dc:9c:d7:13:0f:bd:72:c8:69:8f:54:d7:74:a3:28:
59:a7:2a:d2:9b:5e:6a:3e:f6:72:08:ff:a0:e1:d2:ec:09:93:
d4:d5:1c:b5:65:d6:70:63:60:cb:62:42:ef:47:8b:28:c0:29:
a9:4f:87:f2:71:57:c4:3f:b6:56:dc:52:85:19:c2:42:6f:66:
4a:5f:e3:82:b5:b0:1d:ac:03:9e:32:a1:0a:a3:85:56:ab:83:
ce:07:6c:ec:99:48:33:ef:ac:46:6d:67:8d:c0:f0:76:93:35:
b6:7c:d6:7f:9a:0a:48:39:f3:b8:56:ea:24:09:58:49:95:e9:
05:7d:9a:7c:98:a0:4e:df:26:db:0e:a0:c9:62:78:84:c5:84:
1e:b8:9c:ff:c8:a3:b8:59:d2:81:f8:87:34:a6:30:98:46:a9:
b7:b5:49:26:08:eb:36:9c:70:5c:1c:c2:b4:e4:d2:db:7c:8c:
18:c5:fb:ff:55:90:d7:f4:04:ef:4d:f2:82:35:98:34:60:ae:
e3:d7:69:22:87:d5:3e:24:c1:4d:2a:50:37:24:18:ec:c3:69:
a1:4f:92:ee:45:61:d5:93:63:36:0f:6b:a3:4e:a7:52:f4:f8:
1c:48:28:3c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD7gwig+u5yu0tEWy4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgxMTEyMDAwMFoXDTIyMDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk
MDMzMDg2ODktODkyMy00OWRmLWI5NjctZTdlZWEzYTFkYzM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkf6nAd4fd+AWN2uLneEU19r7I6ug0NKIkzlB
y1e9cQH6RREzwAF4WV/wFXBZjLfZdO67I/FAdF+WhzvkZkBHkJn5J6ITmS3P46Xt
sr1MFu4ngnLecH+zmxF03CrIJ35DW+r02Fo7h07DgF0oMhbLBXMUtExz030BMCj0
uxa0p4DW9KFnbzX+Q2gkju85f0j9J3vfx7RPIcnbczh0k2ALA2Shminz0BV9O+3E
ioS528KtBTcbOTGvptvT6+keaYQHzzWbirrimMBorAL7fP2gp/qUMw5iQ5VjZE1b
W0qiUwTj47cbTHXlMNZtNG0JUgcVbbjiBmCX1dfpJAS39gB5JQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPaW+sQsysKTUEATGDfXjqaeaU+KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvY2EyYTBjN2QtMDQ4NC0z
YmFhLWFlZmMtNzljYzQwZDFmOTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEpgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPgVhvGzYBge/fGrpIiSeoZ/sDUbx3JzXEw+9cshpj1TXdKMoWacq0pte
aj72cgj/oOHS7AmT1NUctWXWcGNgy2JC70eLKMApqU+H8nFXxD+2VtxShRnCQm9m
Sl/jgrWwHawDnjKhCqOFVquDzgds7JlIM++sRm1njcDwdpM1tnzWf5oKSDnzuFbq
JAlYSZXpBX2afJigTt8m2w6gyWJ4hMWEHric/8ijuFnSgfiHNKYwmEapt7VJJgjr
NpxwXBzCtOTS23yMGMX7/1WQ1/QE703ygjWYNGCu49dpIofVPiTBTSpQNyQY7MNp
oU+S7kVh1ZNjNg9ro06nUvT4HEgoPA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 21:21:16 2025 by rpki-client