Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cb89ebec-e238-300e-b4d2-424cb96b75c9.roa
File: cb89ebec-e238-300e-b4d2-424cb96b75c9.roa (raw, json)
Hash identifier: MQXaZiahzxr8H16H/B4VuPA90ctYHiDIOXGFIInRIHo=
Subject key identifier: 79:7A:8E:A7:77:9C:83:31:15:8E:8E:BF:49:FF:DD:AC:4C:7B:B9:98
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C96172F79760A591D9A0BAF60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cb89ebec-e238-300e-b4d2-424cb96b75c9.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.163.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:17:2f:79:76:0a:59:1d:9a:0b:af:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=9085380c-6a08-4c6f-ba82-d4ab5641ee90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:68:40:81:32:7b:72:1a:f9:20:30:61:43:28:
e7:7d:bb:2a:7b:02:d3:70:99:28:d1:b4:8c:df:3b:
4c:8f:45:56:20:b7:10:4c:02:29:48:c1:46:55:af:
53:7c:00:d1:0a:86:3c:28:c9:3b:2d:a8:0d:96:af:
80:97:63:cc:e0:46:46:e2:dd:29:2c:47:1a:71:00:
a2:54:e1:e4:6e:c1:95:f1:da:c7:fb:0e:3c:35:d2:
45:f4:f2:46:c8:9e:39:12:0e:11:db:a7:94:b4:63:
25:2a:e8:af:31:42:aa:29:3a:1a:61:d7:4f:7b:48:
cc:c8:bb:2f:4f:db:8a:d4:da:95:c9:b9:7a:36:5f:
fd:69:f0:5d:b9:72:2b:70:49:98:09:19:cb:b1:36:
e5:68:27:b5:a8:bc:ff:a4:af:3c:07:4d:fc:4f:1d:
f6:fe:4d:39:01:57:8f:bc:7e:d5:d2:c3:bc:7e:e4:
c4:57:b3:06:9d:2c:3d:ef:a4:31:8f:27:54:f1:5d:
9d:a8:56:f0:fc:64:02:87:e7:1a:ea:c7:82:c8:de:
8b:5e:6b:6a:30:f6:9f:95:db:83:f0:b8:14:50:09:
8d:fa:ca:da:8a:f5:c0:ee:94:a6:a0:a6:72:27:8a:
9b:5e:60:e9:08:2d:9e:63:d3:6b:f2:df:76:e4:50:
a7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7A:8E:A7:77:9C:83:31:15:8E:8E:BF:49:FF:DD:AC:4C:7B:B9:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cb89ebec-e238-300e-b4d2-424cb96b75c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.163.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:fb:72:54:68:d8:b5:86:c5:b6:ea:5b:14:8b:36:51:e7:a5:
43:4d:dd:a9:eb:6d:ec:39:8a:5b:fc:03:09:ab:d5:5f:63:4a:
e1:3d:0d:1b:66:e0:19:25:10:64:a0:43:2b:9a:97:fc:2f:7e:
ba:38:d5:17:7e:ad:39:5a:af:44:a9:d3:20:db:1c:4b:33:7e:
62:2d:40:fa:c2:71:e8:99:c0:3a:98:f3:d7:4a:41:da:5e:78:
86:93:eb:a3:ee:38:3c:33:a8:57:ea:57:e4:a1:82:23:43:a9:
bf:97:52:05:cc:a3:db:af:66:9f:d2:a3:bc:6e:f8:e2:d2:de:
a3:4c:8f:cd:8b:9d:d4:28:05:33:6e:02:dc:5c:4a:98:91:f6:
53:68:2a:7b:90:13:b8:d3:71:f7:d4:9e:42:c5:24:cc:b5:ba:
1c:65:1d:89:ff:46:4a:a5:72:f1:53:60:bb:c1:f6:24:62:ad:
a8:76:6a:31:62:d6:11:55:82:3b:4d:66:3b:eb:50:1b:0d:09:
ea:c3:28:ac:7b:1a:85:7e:58:35:28:a4:6f:1e:6a:a9:8e:41:
89:09:54:7f:6f:83:06:f5:4d:d5:79:6f:b1:3d:c2:8b:40:67:
55:0d:a0:86:9f:27:37:5b:c4:ee:ec:c9:f0:ae:a8:39:ef:78:
a7:fd:29:d0
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDyWFy95dgpZHZoLr2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDExNDA1MDAwMFoXDTIyMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
OTA4NTM4MGMtNmEwOC00YzZmLWJhODItZDRhYjU2NDFlZTkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2hAgTJ7chr5IDBhQyjnfbsqewLTcJko0bSM
3ztMj0VWILcQTAIpSMFGVa9TfADRCoY8KMk7LagNlq+Al2PM4EZG4t0pLEcacQCi
VOHkbsGV8drH+w48NdJF9PJGyJ45Eg4R26eUtGMlKuivMUKqKToaYddPe0jMyLsv
T9uK1NqVybl6Nl/9afBduXIrcEmYCRnLsTblaCe1qLz/pK88B038Tx32/k05AVeP
vH7V0sO8fuTEV7MGnSw976QxjydU8V2dqFbw/GQCh+ca6seCyN6LXmtqMPaflduD
8LgUUAmN+sraivXA7pSmoKZyJ4qbXmDpCC2eY9Nr8t925FCn1QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHl6jqd3nIMxFY6Ov0n/3axMe7mYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvY2I4OWViZWMtZTIzOC0z
MDBlLWI0ZDItNDI0Y2I5NmI3NWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEqMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAQftyVGjYtYbFtupbFIs2UeelQ03dqett7DmKW/wDCavVX2NK4T0NG2bg
GSUQZKBDK5qX/C9+ujjVF36tOVqvRKnTINscSzN+Yi1A+sJx6JnAOpjz10pB2l54
hpPro+44PDOoV+pX5KGCI0Opv5dSBcyj269mn9KjvG744tLeo0yPzYud1CgFM24C
3FxKmJH2U2gqe5ATuNNx99SeQsUkzLW6HGUdif9GSqVy8VNgu8H2JGKtqHZqMWLW
EVWCO01mO+tQGw0J6sMorHsahX5YNSikbx5qqY5BiQlUf2+DBvVN1XlvsT3Ci0Bn
VQ2ghp8nN1vE7uzJ8K6oOe94p/0p0A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:38:01 2025 by rpki-client