Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4977482-1a55-32c6-b7e4-36aa83b9a202.roa
File: d4977482-1a55-32c6-b7e4-36aa83b9a202.roa (raw, json)
Hash identifier: Ugo56L6A2PwU34I8w7K2bsM/iXbUPLKa8wnZdlg1kSY=
Subject key identifier: 8D:0B:8D:18:FE:D6:83:68:46:87:86:D8:54:97:34:FC:00:6F:86:DE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA478A17E1F4AB471D2D34F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4977482-1a55-32c6-b7e4-36aa83b9a202.roa
Signing time: Thu 20 Oct 2022 12:00:00 +0000
ROA not before: Thu 20 Oct 2022 12:00:00 +0000
ROA not after: Fri 25 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.127.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a4:78:a1:7e:1f:4a:b4:71:d2:d3:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 20 12:00:00 2022 GMT
Not After : Nov 25 05:00:00 2022 GMT
Subject: CN=083380c2-c236-45f2-9189-62b3b9bc6d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:b5:db:a3:a2:05:2c:8d:b2:cc:17:90:a6:
aa:46:25:34:ed:16:73:22:fc:68:48:0d:93:c2:41:
73:49:34:3a:1f:0a:7b:8e:2e:1a:69:c2:16:94:10:
89:69:3d:15:03:5d:d9:81:67:2d:4c:cd:1c:32:c4:
6a:d2:c5:b8:32:f1:94:25:75:2f:9b:53:c5:12:bf:
53:5f:40:20:8c:72:68:47:78:af:35:86:7a:f8:53:
11:c8:4f:8c:87:75:05:98:1e:a3:a0:8c:2e:3e:9b:
d9:d4:42:a2:11:9a:76:61:f4:64:31:5b:96:50:c2:
8d:f5:03:9d:5a:dc:06:82:23:f7:0f:96:82:f9:39:
47:37:79:8b:d8:34:6a:68:5c:89:e9:7f:f5:4f:45:
de:c2:f9:1f:58:8b:f4:f8:e5:4c:cc:bb:ea:43:b8:
33:e2:54:b8:e6:36:a8:12:e9:b8:34:0a:3a:19:0b:
e3:e8:c9:f8:c3:a0:c7:9a:38:6c:4a:ae:43:07:b6:
7a:2a:a7:37:9b:63:af:1e:a1:c6:0b:7b:e2:11:ad:
69:36:9e:07:9b:2e:f6:38:c2:86:8a:b4:72:6c:e1:
f7:18:1d:93:e0:93:0b:42:72:54:61:73:ad:b5:0b:
6e:78:19:16:63:8e:9a:cc:1b:da:fc:48:a9:74:14:
f1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0B:8D:18:FE:D6:83:68:46:87:86:D8:54:97:34:FC:00:6F:86:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4977482-1a55-32c6-b7e4-36aa83b9a202.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.127.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:d7:89:09:e3:e2:64:b1:3c:51:29:e8:65:5e:2b:46:90:84:
b8:d8:d1:86:da:a4:04:be:f2:08:a6:cb:db:5c:02:c8:8d:37:
3f:b6:a7:e6:34:ab:11:36:f3:d7:7f:73:de:86:98:c6:67:fa:
05:50:d2:16:6e:eb:cd:82:1b:c9:0b:3c:a9:a5:1c:98:28:6c:
1a:e0:ce:5d:e2:17:9f:45:be:90:7d:d7:c9:ea:c3:fd:cb:e1:
76:8b:60:2d:0f:07:b6:8d:20:0e:d0:5e:b9:ac:93:7a:17:39:
db:d3:4d:d6:f7:30:f5:2a:82:e5:16:22:6a:ff:5f:33:37:b2:
83:e5:10:99:21:f5:59:4d:c5:cc:9c:00:77:67:bc:fc:ea:fc:
1c:17:31:fb:b8:fb:14:a0:1e:18:82:b4:b6:cf:51:e9:6f:6b:
6b:a4:4f:e8:b8:fc:ef:96:38:db:9e:73:30:f6:7d:fa:1a:50:
1e:6c:33:a8:2c:50:c5:06:3e:42:6e:93:e6:3f:eb:ad:fd:2d:
3e:e5:49:c4:b5:cd:b6:06:d2:da:db:7f:f3:b4:b9:02:50:f8:
f9:f3:6b:95:7a:37:3f:6e:c6:67:f2:1e:79:96:e5:5f:2c:76:
e4:94:45:8a:fb:e6:45:52:20:df:16:88:6e:3b:3e:30:21:0d:
4e:a7:88:64
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+keKF+H0q0cdLTTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAyMDEyMDAwMFoXDTIyMTEyNTA1MDAwMFowLzEtMCsGA1UEAxMk
MDgzMzgwYzItYzIzNi00NWYyLTkxODktNjJiM2I5YmM2ZDM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4K126OiBSyNsswXkKaqRiU07RZzIvxoSA2T
wkFzSTQ6Hwp7ji4aacIWlBCJaT0VA13ZgWctTM0cMsRq0sW4MvGUJXUvm1PFEr9T
X0AgjHJoR3ivNYZ6+FMRyE+Mh3UFmB6joIwuPpvZ1EKiEZp2YfRkMVuWUMKN9QOd
WtwGgiP3D5aC+TlHN3mL2DRqaFyJ6X/1T0XewvkfWIv0+OVMzLvqQ7gz4lS45jao
Eum4NAo6GQvj6Mn4w6DHmjhsSq5DB7Z6Kqc3m2OvHqHGC3viEa1pNp4Hmy72OMKG
irRybOH3GB2T4JMLQnJUYXOttQtueBkWY46azBva/EipdBTxvwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFI0LjRj+1oNoRoeG2FSXNPwAb4beMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDQ5Nzc0ODItMWE1NS0z
MmM2LWI3ZTQtMzZhYTgzYjlhMjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEn8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAtNeJCePiZLE8USnoZV4rRpCEuNjRhtqkBL7yCKbL21wCyI03P7an5jSr
ETbz139z3oaYxmf6BVDSFm7rzYIbyQs8qaUcmChsGuDOXeIXn0W+kH3XyerD/cvh
dotgLQ8Hto0gDtBeuayTehc529NN1vcw9SqC5RYiav9fMzeyg+UQmSH1WU3FzJwA
d2e8/Or8HBcx+7j7FKAeGIK0ts9R6W9ra6RP6Lj875Y4255zMPZ9+hpQHmwzqCxQ
xQY+Qm6T5j/rrf0tPuVJxLXNtgbS2tt/87S5AlD4+fNrlXo3P27GZ/IeeZblXyx2
5JRFivvmRVIg3xaIbjs+MCENTqeIZA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:03:43 2025 by rpki-client