Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cd8e5fa8-a27b-3264-9930-9903faf6d166.roa
File: cd8e5fa8-a27b-3264-9930-9903faf6d166.roa (raw, json)
Hash identifier: M568H4bauddEQzJu3deKx6PbJeSD0ylDPtYo3cPuc+I=
Subject key identifier: 81:A5:C0:E2:B8:48:0D:65:50:2B:19:7E:D1:99:86:B0:A1:E0:47:51
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE5EF3E9F965EE920C5B37E40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cd8e5fa8-a27b-3264-9930-9903faf6d166.roa
Signing time: Sat 13 Aug 2022 12:00:00 +0000
ROA not before: Sat 13 Aug 2022 12:00:00 +0000
ROA not after: Sun 18 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.50.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e5:ef:3e:9f:96:5e:e9:20:c5:b3:7e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 13 12:00:00 2022 GMT
Not After : Sep 18 04:00:00 2022 GMT
Subject: CN=f31210d6-d9a6-447c-99be-7c1a53a36894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ad:7f:91:cc:7b:35:0d:aa:18:7a:0e:83:d0:
7c:2e:f1:1d:cc:e9:e9:52:b8:ff:2d:91:95:db:61:
ce:23:bd:a2:e8:ba:2a:6e:49:ed:10:c1:80:d4:7f:
e6:dc:c5:8e:62:07:a2:69:cf:64:cc:3c:d1:d5:e8:
c7:a5:1b:4d:28:32:1e:fd:d0:2a:fa:fb:da:e6:96:
9d:00:a5:e3:10:6c:53:91:44:ca:33:37:fd:2c:bb:
29:e9:9c:76:ee:67:f0:3b:1f:b3:e9:cd:04:74:33:
af:11:63:94:7c:f6:aa:88:01:b8:2b:9d:72:45:e6:
e0:5e:b0:60:98:48:c1:9a:fc:31:2d:eb:cc:4e:a8:
35:88:cf:d1:25:b8:b6:83:4e:ee:19:41:2a:16:da:
6e:4d:45:3b:0a:7c:fb:f1:9c:27:50:50:15:4a:e4:
1e:32:05:19:10:1b:bc:0a:bc:d9:d0:bb:5f:0c:62:
e9:32:a3:59:5f:25:17:ee:6b:de:48:90:cd:d3:16:
6b:c4:2d:7d:48:45:82:92:7e:2d:84:22:6d:6a:00:
ea:d6:f3:eb:79:8e:35:d4:e4:a3:8e:11:38:60:56:
ed:ff:c9:a8:70:bb:91:32:7a:f9:fd:ff:cf:13:2c:
8d:ad:0b:58:c9:10:0a:db:74:66:9a:38:55:1a:39:
3a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A5:C0:E2:B8:48:0D:65:50:2B:19:7E:D1:99:86:B0:A1:E0:47:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cd8e5fa8-a27b-3264-9930-9903faf6d166.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.50.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:59:be:78:df:7d:ed:65:a4:52:2d:b2:dd:47:6d:32:cf:8e:
dd:dd:6d:4c:eb:b2:8c:64:fc:5b:c8:fc:fe:58:92:0c:50:58:
e9:33:2a:3a:92:9c:ac:c9:07:38:45:8d:ea:e6:04:9a:81:dd:
c6:36:0b:ec:0d:eb:de:9a:95:e3:6d:04:16:c2:93:29:54:d7:
79:99:54:12:cb:bd:31:3d:95:4a:f6:01:99:d5:f5:42:3e:b0:
ea:78:4d:3c:b9:13:b9:a1:ba:4e:f6:8d:69:b5:c0:c3:0b:b0:
23:a6:c1:eb:65:ca:2f:86:c6:36:2a:0d:b5:4f:e6:fe:04:5e:
7f:0c:55:4a:48:e0:28:c7:59:4e:b8:86:a7:4a:95:f0:3a:20:
b1:7f:df:1c:c6:f9:87:cf:0d:bb:a5:0a:a5:65:84:c7:26:5a:
a3:7c:66:3e:d4:c2:6a:80:d1:9d:ea:f2:ee:6f:fa:e4:68:ff:
6b:ff:94:64:18:09:8f:3b:57:f4:22:c6:21:53:dc:01:5e:65:
8a:60:6d:03:84:f6:00:d3:b9:bf:47:97:30:71:69:53:ce:b0:
71:a7:2c:14:ba:71:df:e5:62:c2:92:13:9a:19:b0:ae:a1:ec:
f9:25:82:de:ee:20:b6:de:3b:67:6e:46:45:0d:db:b7:41:56:
71:bf:17:00
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD7l7z6fll7pIMWzfkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgxMzEyMDAwMFoXDTIyMDkxODA0MDAwMFowLzEtMCsGA1UEAxMk
ZjMxMjEwZDYtZDlhNi00NDdjLTk5YmUtN2MxYTUzYTM2ODk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq1/kcx7NQ2qGHoOg9B8LvEdzOnpUrj/LZGV
22HOI72i6LoqbkntEMGA1H/m3MWOYgeiac9kzDzR1ejHpRtNKDIe/dAq+vva5pad
AKXjEGxTkUTKMzf9LLsp6Zx27mfwOx+z6c0EdDOvEWOUfPaqiAG4K51yRebgXrBg
mEjBmvwxLevMTqg1iM/RJbi2g07uGUEqFtpuTUU7Cnz78ZwnUFAVSuQeMgUZEBu8
CrzZ0LtfDGLpMqNZXyUX7mveSJDN0xZrxC19SEWCkn4thCJtagDq1vPreY411OSj
jhE4YFbt/8mocLuRMnr5/f/PEyyNrQtYyRAK23RmmjhVGjk63wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIGlwOK4SA1lUCsZftGZhrCh4EdRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvY2Q4ZTVmYTgtYTI3Yi0z
MjY0LTk5MzAtOTkwM2ZhZjZkMTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEjIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAi1m+eN997WWkUi2y3UdtMs+O3d1tTOuyjGT8W8j8/liSDFBY6TMqOpKc
rMkHOEWN6uYEmoHdxjYL7A3r3pqV420EFsKTKVTXeZlUEsu9MT2VSvYBmdX1Qj6w
6nhNPLkTuaG6TvaNabXAwwuwI6bB62XKL4bGNioNtU/m/gRefwxVSkjgKMdZTriG
p0qV8DogsX/fHMb5h88Nu6UKpWWExyZao3xmPtTCaoDRnery7m/65Gj/a/+UZBgJ
jztX9CLGIVPcAV5limBtA4T2ANO5v0eXMHFpU86wcacsFLpx3+ViwpITmhmwrqHs
+SWC3u4gtt47Z25GRQ3bt0FWcb8XAA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:48:59 2025 by rpki-client