Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d1255de5-c3ca-3b54-b5d0-fab02bdd3544.roa
File: d1255de5-c3ca-3b54-b5d0-fab02bdd3544.roa (raw, json)
Hash identifier: 51dOt2MVXxJbILoNZR5c8UDlg63KAcLUW8w2qspPO/k=
Subject key identifier: 79:6C:2F:57:91:CA:5D:E6:7A:21:A3:11:C2:05:1E:D4:E1:08:D5:09
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6FF45C56E4380A2947E1F780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d1255de5-c3ca-3b54-b5d0-fab02bdd3544.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.122.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6f:f4:5c:56:e4:38:0a:29:47:e1:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=8b16c86a-8706-41d9-92fd-504bfae46767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:01:3d:55:c4:50:75:ed:59:00:f7:45:a8:ab:
2f:39:ea:db:58:19:22:65:66:07:62:ec:60:13:1e:
02:1d:0b:be:f3:32:03:91:22:f0:5b:55:a1:89:41:
4d:b3:43:18:41:88:f4:04:b3:5f:2e:7d:29:7b:e3:
9d:ec:90:bf:f4:d1:c6:b6:38:1b:44:0d:60:a0:10:
f7:76:22:ce:b4:7d:2a:fe:8e:b0:ee:09:f5:19:de:
ae:98:b7:51:60:e3:0b:77:1e:84:0a:4e:6a:2e:ad:
9d:ff:dd:aa:7f:39:7b:eb:3d:bd:d2:e8:16:f8:48:
a8:e2:90:ba:c1:45:a1:47:e5:94:ab:4f:d8:be:d5:
77:8a:00:ed:02:66:16:05:1a:33:84:8f:15:a6:33:
97:c3:fc:a9:f4:19:d6:ae:16:c6:86:5a:33:09:7c:
55:fe:1b:3c:0f:10:aa:50:02:45:ba:60:74:57:d2:
38:cc:a3:98:d8:c3:95:14:16:01:29:f2:fd:61:ee:
e6:a7:59:48:40:cd:ca:d7:ce:d4:6f:50:17:06:58:
a0:7d:97:10:9d:a5:cb:75:34:53:63:25:87:e5:19:
22:47:af:c3:a4:2d:3a:6f:9b:ac:b9:b2:55:fc:23:
33:b9:40:9b:e9:18:97:0e:d8:0c:22:42:05:1e:50:
f0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6C:2F:57:91:CA:5D:E6:7A:21:A3:11:C2:05:1E:D4:E1:08:D5:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d1255de5-c3ca-3b54-b5d0-fab02bdd3544.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.122.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:44:1d:ec:2c:8d:5c:11:b7:80:ce:5c:50:01:61:00:5f:50:
e1:5b:cf:1b:dc:69:14:ff:b6:71:1e:4a:4a:3d:48:30:db:bb:
1f:1c:0b:16:f8:31:63:0c:a8:d4:31:4d:69:50:95:c9:97:71:
74:40:a9:97:c3:29:f0:a5:00:d4:e9:9c:82:2a:4f:c7:e2:a9:
b8:1d:42:7e:9d:b0:5f:de:a1:bc:f6:f7:a8:a9:8a:fe:05:1c:
50:aa:ad:8e:03:91:2d:58:1e:9d:d3:07:01:12:48:8f:e7:52:
bb:d8:7f:62:93:0a:e5:a6:04:cb:06:61:43:05:36:6f:ae:57:
8a:57:22:3a:50:0d:7c:57:b6:15:4c:b1:db:dd:96:75:03:83:
eb:a9:1a:46:aa:19:a3:20:76:01:b8:c0:05:7c:e0:a5:5e:91:
31:f5:9c:65:bb:a9:48:38:14:7d:1a:66:6d:1b:62:c0:ff:d4:
49:28:dd:d5:e6:0f:5f:6c:5a:2d:9c:d4:fc:09:82:cd:82:fe:
7d:60:8c:07:a3:a8:3e:15:1c:95:fb:8b:50:5d:d1:c3:91:a0:
dd:6f:40:42:ee:44:c5:07:d1:30:d0:19:87:c9:86:9c:2f:cc:
44:9f:09:95:cb:e4:73:b1:81:97:52:ac:69:d5:e9:06:40:d1:
20:f1:8f:2e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5v9FxW5DgKKUfh94AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcwMTEyMDAwMFoXDTIyMDgwNjA0MDAwMFowLzEtMCsGA1UEAxMk
OGIxNmM4NmEtODcwNi00MWQ5LTkyZmQtNTA0YmZhZTQ2NzY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwE9VcRQde1ZAPdFqKsvOerbWBkiZWYHYuxg
Ex4CHQu+8zIDkSLwW1WhiUFNs0MYQYj0BLNfLn0pe+Od7JC/9NHGtjgbRA1goBD3
diLOtH0q/o6w7gn1Gd6umLdRYOMLdx6ECk5qLq2d/92qfzl76z290ugW+Eio4pC6
wUWhR+WUq0/YvtV3igDtAmYWBRozhI8VpjOXw/yp9BnWrhbGhlozCXxV/hs8DxCq
UAJFumB0V9I4zKOY2MOVFBYBKfL9Ye7mp1lIQM3K187Ub1AXBligfZcQnaXLdTRT
YyWH5RkiR6/DpC06b5usubJV/CMzuUCb6RiXDtgMIkIFHlDw3wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHlsL1eRyl3meiGjEcIFHtThCNUJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDEyNTVkZTUtYzNjYS0z
YjU0LWI1ZDAtZmFiMDJiZGQzNTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEnowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAOkQd7CyNXBG3gM5cUAFhAF9Q4VvPG9xpFP+2cR5KSj1IMNu7HxwLFvgx
Ywyo1DFNaVCVyZdxdECpl8Mp8KUA1OmcgipPx+KpuB1Cfp2wX96hvPb3qKmK/gUc
UKqtjgORLVgendMHARJIj+dSu9h/YpMK5aYEywZhQwU2b65XilciOlANfFe2FUyx
292WdQOD66kaRqoZoyB2AbjABXzgpV6RMfWcZbupSDgUfRpmbRtiwP/USSjd1eYP
X2xaLZzU/AmCzYL+fWCMB6OoPhUclfuLUF3Rw5Gg3W9AQu5ExQfRMNAZh8mGnC/M
RJ8Jlcvkc7GBl1KsadXpBkDRIPGPLg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:15:05 2025 by rpki-client