Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d459c257-fda4-3e18-827d-009bb883c1c3.roa
File: d459c257-fda4-3e18-827d-009bb883c1c3.roa (raw, json)
Hash identifier: xOlov2skT7Ledf8LD2GX/MwxcPCIrGKbR7jrz2wBsXs=
Subject key identifier: 7D:C7:6D:DE:5C:56:85:84:D7:09:B5:99:44:19:C3:A0:A9:96:A5:4D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DFACA3192CCF66C1DC56D2240
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d459c257-fda4-3e18-827d-009bb883c1c3.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.144.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:fa:ca:31:92:cc:f6:6c:1d:c5:6d:22:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=d8b0a970-8ae2-488b-a411-fe27287eb222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:38:1e:80:e5:56:0f:fe:36:a9:c1:43:fe:
27:1d:a4:9c:73:11:b1:47:38:0e:3e:2f:2d:ed:11:
63:56:c2:38:e3:1b:77:10:5e:6c:07:d8:b9:1a:c9:
7f:bb:83:fc:4f:cc:e0:33:58:dc:4b:b0:d6:b2:55:
75:ef:05:c1:12:d3:41:05:52:19:e9:7b:8b:3b:5f:
61:b2:46:11:0b:93:60:85:31:6f:b3:0a:c9:20:03:
87:12:33:2b:1a:a0:55:7b:1c:c4:85:f0:97:29:21:
ba:fc:06:69:67:87:c9:69:5b:67:4d:24:fd:bc:ef:
76:0c:53:87:6b:5a:06:f7:9e:a8:8d:15:dd:91:49:
4a:3b:1c:58:c9:d2:e1:c0:6d:55:fc:50:0a:90:58:
03:5b:bb:f2:ea:a0:6c:40:dd:af:21:ae:82:08:a8:
fd:a7:24:a2:d2:d0:8f:ba:b2:3a:47:57:42:cc:9b:
81:aa:44:bd:c2:7e:33:4a:0a:93:26:54:ec:14:52:
d0:bf:87:14:57:7e:1f:b4:79:02:71:02:cc:ab:66:
91:e9:66:f6:53:94:e0:80:36:ba:ca:f8:6f:65:26:
cd:a8:62:b6:4d:7e:d9:78:b5:5f:7b:43:06:ef:80:
72:e2:5c:6f:30:dd:c0:f3:9b:2e:ed:44:96:02:8e:
0e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C7:6D:DE:5C:56:85:84:D7:09:B5:99:44:19:C3:A0:A9:96:A5:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d459c257-fda4-3e18-827d-009bb883c1c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.144.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:1e:72:1e:e6:8f:ac:28:a2:a8:9f:28:a7:a3:5e:27:c4:23:
9a:0b:4f:52:b1:f5:c5:62:dd:53:2c:c5:67:41:c3:fb:b9:29:
cb:9f:20:6f:a4:a6:61:8a:0e:e0:09:c2:f4:6d:f2:b3:8f:c9:
83:97:78:e8:e7:c3:5b:b5:b9:ba:81:5f:c2:9a:7a:82:69:f6:
e2:96:39:7e:8f:3f:09:a1:7e:49:15:b8:2d:24:8d:b5:f0:97:
f6:b5:be:e7:17:4f:01:df:ed:de:2c:8e:80:5a:c1:7b:c1:73:
75:b1:7a:bb:0c:62:ab:7d:18:82:3b:4b:ab:4d:97:2e:14:ad:
03:59:4d:35:67:f3:f2:2c:bf:12:93:55:df:51:c2:2d:1a:62:
22:8e:78:b9:aa:a5:6e:db:ed:87:83:94:0a:42:09:30:a7:45:
af:ec:2d:58:9f:ff:d1:41:72:3b:13:3c:03:2f:98:83:bf:aa:
e2:f0:bd:75:b4:2f:96:d5:c9:f5:b7:3d:ed:c4:0f:7b:68:86:
99:e1:b4:2c:3e:3a:b6:7e:bd:a3:3d:9a:41:14:26:54:cf:82:
07:a8:28:86:b8:4d:eb:e8:43:09:b5:73:18:ab:9e:47:d1:93:
b9:76:ad:48:59:2c:ef:79:d6:9a:78:c8:11:a8:43:31:a3:d5:
55:2a:b3:7d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD36yjGSzPZsHcVtIkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUyMDEyMDAwMFoXDTIyMDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZDhiMGE5NzAtOGFlMi00ODhiLWE0MTEtZmUyNzI4N2ViMjIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTU4HoDlVg/+NqnBQ/4nHaSccxGxRzgOPi8t
7RFjVsI44xt3EF5sB9i5Gsl/u4P8T8zgM1jcS7DWslV17wXBEtNBBVIZ6XuLO19h
skYRC5NghTFvswrJIAOHEjMrGqBVexzEhfCXKSG6/AZpZ4fJaVtnTST9vO92DFOH
a1oG956ojRXdkUlKOxxYydLhwG1V/FAKkFgDW7vy6qBsQN2vIa6CCKj9pySi0tCP
urI6R1dCzJuBqkS9wn4zSgqTJlTsFFLQv4cUV34ftHkCcQLMq2aR6Wb2U5TggDa6
yvhvZSbNqGK2TX7ZeLVfe0MG74By4lxvMN3A85su7USWAo4OXQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFH3Hbd5cVoWE1wm1mUQZw6CplqVNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDQ1OWMyNTctZmRhNC0z
ZTE4LTgyN2QtMDA5YmI4ODNjMWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEpAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJh5yHuaPrCiiqJ8op6NeJ8QjmgtPUrH1xWLdUyzFZ0HD+7kpy58gb6Sm
YYoO4AnC9G3ys4/Jg5d46OfDW7W5uoFfwpp6gmn24pY5fo8/CaF+SRW4LSSNtfCX
9rW+5xdPAd/t3iyOgFrBe8FzdbF6uwxiq30YgjtLq02XLhStA1lNNWfz8iy/EpNV
31HCLRpiIo54uaqlbtvth4OUCkIJMKdFr+wtWJ//0UFyOxM8Ay+Yg7+q4vC9dbQv
ltXJ9bc97cQPe2iGmeG0LD46tn69oz2aQRQmVM+CB6gohrhN6+hDCbVzGKueR9GT
uXatSFks73nWmnjIEahDMaPVVSqzfQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:25:13 2025 by rpki-client