Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d28621d5-e11d-3e75-a6e6-2b47f0a77c40.roa
File: d28621d5-e11d-3e75-a6e6-2b47f0a77c40.roa (raw, json)
Hash identifier: p0nhZJKFr2IeKpfWN+0/Ufi0vMzqalehnQTY6tgIEbk=
Subject key identifier: 10:48:6C:D4:AD:80:E1:21:98:B5:B2:C8:89:60:38:19:01:53:ED:19
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EB970F879B37DF6B517454F40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d28621d5-e11d-3e75-a6e6-2b47f0a77c40.roa
Signing time: Thu 28 Jul 2022 12:00:00 +0000
ROA not before: Thu 28 Jul 2022 12:00:00 +0000
ROA not after: Fri 02 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.87.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b9:70:f8:79:b3:7d:f6:b5:17:45:4f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 28 12:00:00 2022 GMT
Not After : Sep 2 04:00:00 2022 GMT
Subject: CN=b8363769-326f-4bf7-b0e4-95fa610b3b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:53:0b:d0:02:fc:a6:c5:56:b7:50:ed:89:0e:
95:c0:53:fd:d8:78:8b:bb:9e:18:31:ae:15:fe:86:
e1:d9:a5:0e:98:ad:9d:4c:57:e3:76:8f:35:54:4f:
0d:ca:70:1e:1a:5b:61:f6:9f:c5:55:be:b5:4b:e9:
13:a6:8a:b5:29:5f:4f:16:8c:4e:8b:ce:10:68:88:
20:f9:ff:bb:4f:75:1e:7f:59:4c:22:fb:c7:5f:0d:
0d:af:6a:97:6e:eb:62:2d:e5:bf:50:51:bd:1f:f8:
7f:34:75:1a:75:50:09:7f:70:17:50:a7:89:19:59:
b1:6b:ad:5f:06:2e:26:9c:63:a1:26:9b:c0:6b:c7:
81:76:a0:04:f6:a4:b4:4b:67:1a:7f:b2:2b:16:5d:
67:db:ff:86:d5:cc:ef:68:db:2a:08:6e:4e:53:92:
30:b9:83:0d:b1:8a:e4:c6:6f:4f:5b:89:fe:a6:86:
da:66:1e:90:58:44:95:56:8c:ce:22:27:44:13:57:
52:43:1d:24:cc:c8:7d:86:3d:81:c2:17:c7:06:e9:
bd:62:fd:4b:44:ae:25:37:f2:4a:05:cc:92:ca:03:
9a:6c:76:b5:e9:6a:5d:ee:a5:c2:e6:96:ba:21:c4:
5e:15:9a:06:6c:a3:b7:af:72:c4:1c:8e:5b:37:25:
89:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:48:6C:D4:AD:80:E1:21:98:B5:B2:C8:89:60:38:19:01:53:ED:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d28621d5-e11d-3e75-a6e6-2b47f0a77c40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.87.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:c0:ec:45:91:f4:da:3c:81:72:85:fa:b6:c3:e8:09:0d:79:
ee:68:29:99:de:26:2c:f9:da:3c:c3:74:86:a3:6a:27:18:a1:
c0:a7:a7:7e:a2:e1:cd:11:21:c8:f0:09:d8:8f:71:dd:69:f1:
df:ff:b0:af:00:77:f4:e5:7d:e8:78:e8:14:3f:be:12:b9:87:
42:43:1f:34:13:15:cf:aa:98:29:08:88:55:af:83:34:bc:e9:
5b:80:08:66:e9:85:ec:5b:e9:f8:7d:a7:b6:67:8a:b8:47:9b:
79:d8:b5:18:1f:82:8c:8c:df:fc:07:71:84:4b:2c:af:36:dd:
28:df:c3:06:7d:7c:48:68:5c:3d:d9:20:72:29:5f:b7:e9:41:
b1:a3:5a:70:33:7b:1c:f8:21:90:c4:42:58:a3:9b:64:86:8b:
69:42:55:77:b0:35:55:2b:a5:71:a8:51:fd:0f:bd:f1:d3:7d:
ed:77:10:59:53:4e:19:94:8c:28:f7:6b:73:ce:c5:0e:d4:bf:
54:c2:34:17:24:59:87:a9:7d:fe:8e:46:18:46:18:21:8b:50:
32:95:89:fd:37:a7:07:f4:6b:36:e4:30:d0:19:ae:78:11:2d:
e1:34:6b:9c:2c:28:36:27:5a:51:d9:32:99:f1:b7:1e:9f:2f:
20:b5:88:af
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD65cPh5s332tRdFT0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcyODEyMDAwMFoXDTIyMDkwMjA0MDAwMFowLzEtMCsGA1UEAxMk
YjgzNjM3NjktMzI2Zi00YmY3LWIwZTQtOTVmYTYxMGIzYjdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlML0AL8psVWt1DtiQ6VwFP92HiLu54YMa4V
/obh2aUOmK2dTFfjdo81VE8NynAeGlth9p/FVb61S+kTpoq1KV9PFoxOi84QaIgg
+f+7T3Uef1lMIvvHXw0Nr2qXbutiLeW/UFG9H/h/NHUadVAJf3AXUKeJGVmxa61f
Bi4mnGOhJpvAa8eBdqAE9qS0S2caf7IrFl1n2/+G1czvaNsqCG5OU5IwuYMNsYrk
xm9PW4n+pobaZh6QWESVVozOIidEE1dSQx0kzMh9hj2BwhfHBum9Yv1LRK4lN/JK
BcySygOabHa16Wpd7qXC5pa6IcReFZoGbKO3r3LEHI5bNyWJ5wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBBIbNStgOEhmLWyyIlgOBkBU+0ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDI4NjIxZDUtZTExZC0z
ZTc1LWE2ZTYtMmI0N2YwYTc3YzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAElcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAkcDsRZH02jyBcoX6tsPoCQ157mgpmd4mLPnaPMN0hqNqJxihwKenfqLh
zREhyPAJ2I9x3Wnx3/+wrwB39OV96HjoFD++ErmHQkMfNBMVz6qYKQiIVa+DNLzp
W4AIZumF7Fvp+H2ntmeKuEebedi1GB+CjIzf/AdxhEssrzbdKN/DBn18SGhcPdkg
cilft+lBsaNacDN7HPghkMRCWKObZIaLaUJVd7A1VSulcahR/Q+98dN97XcQWVNO
GZSMKPdrc87FDtS/VMI0FyRZh6l9/o5GGEYYIYtQMpWJ/TenB/RrNuQw0BmueBEt
4TRrnCwoNidaUdkymfG3Hp8vILWIrw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:36:02 2025 by rpki-client