Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf9e2fa1-d5f7-3031-acb8-db4f4db881b9.roa
File: cf9e2fa1-d5f7-3031-acb8-db4f4db881b9.roa (raw, json)
Hash identifier: 8bnROU4ZntTHy6cvnlseTVDxzqW2EWwkFBnE+TcsgP4=
Subject key identifier: 88:9E:3E:71:32:DB:BC:D1:EB:6B:74:CA:67:69:E6:D5:77:61:C3:33
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA86CE831CFA7C67BEB6EFF80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf9e2fa1-d5f7-3031-acb8-db4f4db881b9.roa
Signing time: Fri 21 Oct 2022 12:00:00 +0000
ROA not before: Fri 21 Oct 2022 12:00:00 +0000
ROA not after: Sat 26 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.154.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a8:6c:e8:31:cf:a7:c6:7b:eb:6e:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 12:00:00 2022 GMT
Not After : Nov 26 05:00:00 2022 GMT
Subject: CN=895dfabc-6a17-4d33-9506-0a88961222cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:d1:86:d6:b4:55:c5:82:5f:9c:da:5b:55:
f5:bd:4d:38:2c:f8:e8:04:88:c9:71:f5:5f:64:c2:
96:6f:80:64:83:8e:b7:06:5d:46:49:cc:19:ab:e2:
15:a0:e0:b3:c7:f0:8c:3a:a6:b2:38:6d:8a:f7:a1:
1b:c7:fb:32:6b:a9:71:bc:33:05:23:96:9d:6b:e2:
c6:16:28:bc:46:ef:e7:8a:30:61:4d:8a:1e:a6:f6:
cf:db:f3:53:30:0d:40:2a:16:39:55:f0:16:2a:e9:
95:d5:14:40:0d:58:7a:cd:64:90:52:37:9c:cc:32:
63:ca:34:7e:28:f6:73:77:0c:94:da:33:96:2e:d1:
21:7b:e8:dd:79:e2:8a:b3:e6:3b:78:a2:6e:c4:81:
d7:60:d5:6b:32:b1:40:71:47:d8:3e:d6:53:a4:7a:
78:10:e6:b7:11:2e:01:d6:74:fd:e3:ce:26:94:04:
b7:19:cf:af:e2:f9:d0:b2:09:d6:fc:45:24:13:fb:
42:ef:b3:fb:27:cd:23:72:90:ef:d8:21:c3:a8:0a:
cd:0c:55:5d:77:38:e1:a1:62:1a:f6:d8:0a:f5:c3:
d7:a2:95:13:21:e8:80:48:9a:22:66:e1:26:11:70:
d1:60:32:d1:5f:0d:80:de:6e:63:43:60:d7:2c:70:
cb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9E:3E:71:32:DB:BC:D1:EB:6B:74:CA:67:69:E6:D5:77:61:C3:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf9e2fa1-d5f7-3031-acb8-db4f4db881b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.154.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:f8:ad:9e:6c:07:18:e2:2c:b1:c4:e6:41:d8:4c:ce:da:3f:
6c:ec:93:e0:0a:67:e3:cf:99:d5:44:cd:34:e8:b5:ee:cc:e7:
85:cb:82:67:6e:81:b9:35:ca:4f:05:a2:53:91:ca:b9:14:a6:
17:54:6e:21:0d:83:f9:5e:75:c9:c6:f6:76:70:8a:d1:4e:71:
aa:85:55:ff:fd:e5:f1:4a:68:63:fc:83:fb:6f:fc:10:c2:d4:
4d:52:90:d6:4e:31:38:41:b8:cf:7c:e0:79:8d:96:55:6b:6c:
d2:d2:0a:2a:9b:94:c1:f3:83:b2:8a:10:7c:09:4e:cf:05:31:
4e:16:6c:01:51:ef:b9:5a:40:5a:0c:aa:f9:dc:20:71:1a:8f:
56:e6:7c:86:dd:8d:81:1e:e6:db:ee:78:8f:93:60:6a:1e:e9:
9b:36:88:d6:fc:6d:63:18:a0:57:82:2d:72:66:d1:f7:04:52:
a2:7e:57:bb:d7:9b:f4:c3:aa:9e:95:cf:1f:0e:48:51:95:20:
a8:f5:58:86:b4:a4:df:fe:29:3f:3a:c3:b1:8b:5b:bf:74:82:
aa:e5:3f:fe:53:57:1f:43:7c:22:c3:c7:c9:ba:14:b5:91:ae:
58:9a:97:0f:31:85:dc:75:7b:cb:a3:1d:ab:76:6f:fe:3a:f6:
49:00:b4:b2
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+obOgxz6fGe+tu/4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAyMTEyMDAwMFoXDTIyMTEyNjA1MDAwMFowLzEtMCsGA1UEAxMk
ODk1ZGZhYmMtNmExNy00ZDMzLTk1MDYtMGE4ODk2MTIyMmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpDRhta0VcWCX5zaW1X1vU04LPjoBIjJcfVf
ZMKWb4Bkg463Bl1GScwZq+IVoOCzx/CMOqayOG2K96Ebx/sya6lxvDMFI5ada+LG
Fii8Ru/nijBhTYoepvbP2/NTMA1AKhY5VfAWKumV1RRADVh6zWSQUjeczDJjyjR+
KPZzdwyU2jOWLtEhe+jdeeKKs+Y7eKJuxIHXYNVrMrFAcUfYPtZTpHp4EOa3ES4B
1nT9484mlAS3Gc+v4vnQsgnW/EUkE/tC77P7J80jcpDv2CHDqArNDFVddzjhoWIa
9tgK9cPXopUTIeiASJoiZuEmEXDRYDLRXw2A3m5jQ2DXLHDL2QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIiePnEy27zR62t0ymdp5tV3YcMzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvY2Y5ZTJmYTEtZDVmNy0z
MDMxLWFjYjgtZGI0ZjRkYjg4MWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEpowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWfitnmwHGOIsscTmQdhMzto/bOyT4Apn48+Z1UTNNOi17sznhcuCZ26B
uTXKTwWiU5HKuRSmF1RuIQ2D+V51ycb2dnCK0U5xqoVV//3l8UpoY/yD+2/8EMLU
TVKQ1k4xOEG4z3zgeY2WVWts0tIKKpuUwfODsooQfAlOzwUxThZsAVHvuVpAWgyq
+dwgcRqPVuZ8ht2NgR7m2+54j5Ngah7pmzaI1vxtYxigV4ItcmbR9wRSon5Xu9eb
9MOqnpXPHw5IUZUgqPVYhrSk3/4pPzrDsYtbv3SCquU//lNXH0N8IsPHyboUtZGu
WJqXDzGF3HV7y6Mdq3Zv/jr2SQC0sg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 21:06:03 2025 by rpki-client