Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4dbcef4-3df3-31d4-aaa2-c7ce868a50c6.roa
File: d4dbcef4-3df3-31d4-aaa2-c7ce868a50c6.roa (raw, json)
Hash identifier: aMY7bF1uCmm6JwMncpm9kCemGkzb9Vy/ikYpTZRI3aM=
Subject key identifier: 81:A9:BE:66:3D:7F:C5:BB:AF:DF:80:2B:32:26:B8:DD:AD:D0:22:AB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D32A1613F45A0647316BA85A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4dbcef4-3df3-31d4-aaa2-c7ce868a50c6.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.238.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:a1:61:3f:45:a0:64:73:16:ba:85:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=12da5d26-659e-4b05-ab91-ed8c75e4d4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:72:4a:fe:1a:a2:ca:06:bb:b8:f3:1b:f4:
59:48:f0:ed:de:2b:e8:a9:ab:93:77:59:9b:51:7b:
44:01:4d:1d:9f:01:4a:0f:7f:5c:a0:62:cc:55:3f:
80:7d:62:6f:13:7e:9f:0f:78:97:0a:64:ae:cb:0b:
1d:9c:dc:c3:d2:73:e9:cf:ef:5c:a3:3c:25:e2:c7:
fd:69:f0:87:ab:53:00:5c:70:ef:19:f0:90:be:30:
79:78:c9:fa:20:5b:64:53:b7:db:39:f4:2a:0d:3e:
9a:b8:f4:4a:ed:0c:6c:9d:d4:77:0b:95:b2:65:3a:
af:d8:81:10:65:c0:92:ba:d2:40:4c:6a:b4:2c:73:
93:93:e7:92:10:f0:2a:aa:6e:3b:86:68:f6:ad:7d:
5c:d0:ed:11:46:7c:37:8a:ad:9f:6d:4c:f5:a5:7b:
4b:f9:b2:3d:2c:53:19:39:9e:18:45:0b:be:01:28:
01:a2:47:42:f5:15:b6:89:89:eb:c8:5c:f5:ac:82:
1e:41:81:c3:a6:fc:36:81:e2:9c:cf:0a:c7:ab:64:
eb:f7:8c:c9:68:50:3b:25:bf:5a:f6:82:77:09:e0:
7c:91:e1:41:c8:d4:db:5d:55:07:53:7c:91:1a:3c:
c1:88:9c:f5:69:08:f9:6f:81:89:82:ea:3c:f6:ca:
9e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A9:BE:66:3D:7F:C5:BB:AF:DF:80:2B:32:26:B8:DD:AD:D0:22:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4dbcef4-3df3-31d4-aaa2-c7ce868a50c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.238.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:ec:5e:ed:4a:9f:24:87:4d:0b:1a:ce:fd:90:03:b5:15:28:
81:c7:5d:1d:a6:43:b2:71:34:ec:7d:72:9f:b7:ea:ab:bb:59:
cf:34:e8:0a:5e:e1:70:9e:a5:65:0f:0e:d6:51:70:be:5c:5d:
2d:98:57:af:c3:f0:ad:1b:7a:41:b0:35:c6:a7:5c:95:77:42:
74:62:3d:5f:3e:38:73:e7:46:53:a3:9f:1e:e1:e2:35:57:a0:
7b:c7:71:88:de:4b:cd:57:0b:e1:56:60:85:4a:ce:2b:e3:6e:
61:56:ab:cf:b0:b3:e1:50:76:b5:62:99:a6:84:39:78:17:12:
7e:66:a6:fd:af:40:2f:ea:5e:d0:3d:44:d2:60:0e:60:e3:83:
c1:5d:47:fc:92:55:ac:84:7e:f8:5f:48:4e:2f:64:ec:42:1e:
5d:44:78:68:d3:f1:c8:d6:8e:e9:b4:ed:f5:a3:92:43:fd:50:
c9:6c:e9:5c:d0:65:c1:11:41:d8:c6:5f:72:6f:58:d7:c4:15:
8b:8d:cb:56:32:4c:eb:c7:be:6c:91:34:11:37:e2:ab:df:26:
18:69:59:a4:be:d7:11:e9:09:9b:7d:50:42:33:88:dd:93:8c:
b0:d3:55:e5:5e:ca:b9:9f:8b:7d:4d:bd:75:31:96:dc:73:95:
65:ad:fb:c5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0yoWE/RaBkcxa6haAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
MTJkYTVkMjYtNjU5ZS00YjA1LWFiOTEtZWQ4Yzc1ZTRkNGQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGdySv4aosoGu7jzG/RZSPDt3ivoqauTd1mb
UXtEAU0dnwFKD39coGLMVT+AfWJvE36fD3iXCmSuywsdnNzD0nPpz+9cozwl4sf9
afCHq1MAXHDvGfCQvjB5eMn6IFtkU7fbOfQqDT6auPRK7QxsndR3C5WyZTqv2IEQ
ZcCSutJATGq0LHOTk+eSEPAqqm47hmj2rX1c0O0RRnw3iq2fbUz1pXtL+bI9LFMZ
OZ4YRQu+ASgBokdC9RW2iYnryFz1rIIeQYHDpvw2geKczwrHq2Tr94zJaFA7Jb9a
9oJ3CeB8keFByNTbXVUHU3yRGjzBiJz1aQj5b4GJguo89sqeZwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIGpvmY9f8W7r9+AKzImuN2t0CKrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDRkYmNlZjQtM2RmMy0z
MWQ0LWFhYTItYzdjZTg2OGE1MGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEu4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAcuxe7UqfJIdNCxrO/ZADtRUogcddHaZDsnE07H1yn7fqq7tZzzToCl7h
cJ6lZQ8O1lFwvlxdLZhXr8PwrRt6QbA1xqdclXdCdGI9Xz44c+dGU6OfHuHiNVeg
e8dxiN5LzVcL4VZghUrOK+NuYVarz7Cz4VB2tWKZpoQ5eBcSfmam/a9AL+pe0D1E
0mAOYOODwV1H/JJVrIR++F9ITi9k7EIeXUR4aNPxyNaO6bTt9aOSQ/1QyWzpXNBl
wRFB2MZfcm9Y18QVi43LVjJM68e+bJE0ETfiq98mGGlZpL7XEekJm31QQjOI3ZOM
sNNV5V7KuZ+LfU29dTGW3HOVZa37xQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:24:52 2025 by rpki-client