Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d568577c-07f1-371f-8682-0df47e998eb6.roa
File: d568577c-07f1-371f-8682-0df47e998eb6.roa (raw, json)
Hash identifier: bXh4d+bI28ZWOQ3/J4u1txkuk+QAHGVdsdJcFQa6SBI=
Subject key identifier: 17:5C:F6:F2:AE:A5:B9:CB:66:BB:B8:81:A7:69:A2:FE:BF:2B:BE:A1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401EC147334E08C686E23F7140
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d568577c-07f1-371f-8682-0df47e998eb6.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.136.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1e:c1:47:33:4e:08:c6:86:e2:3f:71:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=2d756705-7b8c-415f-bc10-d0e8069d134b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f5:af:f6:fe:45:5c:ae:04:c1:3c:f3:37:09:
5f:1c:d8:f7:ff:2e:03:c4:3b:12:0f:16:34:9d:09:
e9:f7:39:08:10:d9:bf:f2:8f:b6:24:45:4b:49:b3:
06:37:8d:cf:a9:1e:b9:79:1a:03:df:3c:e0:77:8c:
50:76:a0:c1:30:1b:a1:6d:d2:b5:66:b0:3c:87:40:
09:c9:0c:12:11:f4:d3:01:17:13:1f:e2:06:f2:39:
f1:62:48:75:6e:35:52:23:ae:fa:b8:e3:37:c2:d1:
67:73:32:a4:69:a4:8f:4c:0e:59:8e:72:b4:93:28:
6f:4d:dd:3e:2b:b7:23:60:b1:a7:47:a3:91:49:48:
90:08:4d:87:00:cc:d0:32:50:69:3c:d6:5a:f1:57:
46:a6:11:6e:df:11:ce:3d:0a:ff:36:83:cc:46:80:
09:f3:36:c1:72:6b:35:98:66:b6:17:db:20:f5:db:
56:d9:bc:c1:d4:c2:e5:d8:fe:c5:c7:cf:09:2e:f4:
f5:67:4d:9c:4a:c1:fd:3e:87:26:da:1c:2b:61:ce:
63:25:42:c2:b0:8d:fb:9f:ce:ba:35:01:6a:f9:86:
59:17:29:79:cc:ad:c1:7c:ea:40:38:de:7c:3c:ec:
12:32:22:c5:2d:ae:df:cf:d1:b4:90:d1:a6:f4:c9:
1b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5C:F6:F2:AE:A5:B9:CB:66:BB:B8:81:A7:69:A2:FE:BF:2B:BE:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d568577c-07f1-371f-8682-0df47e998eb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.136.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:9b:3e:5c:e8:42:b7:70:95:df:96:b0:38:89:59:29:a7:f1:
f8:5b:76:b2:e0:69:14:35:42:bc:de:a1:9c:80:62:84:a1:22:
4a:c4:e8:45:cf:4f:f2:08:08:be:d9:b8:35:36:19:3f:96:0f:
e2:ff:11:6b:c3:c3:36:89:cf:c4:ff:4e:18:ef:a0:a8:8c:f2:
f9:f6:d9:44:ed:40:2e:b1:c6:8b:36:2a:ff:3f:7b:31:4e:84:
01:c3:9a:5f:71:c1:66:8a:a2:f9:c8:4e:0d:8a:f6:68:25:23:
0a:2e:12:da:17:d5:e5:d8:2a:93:84:12:15:76:d3:0e:93:ed:
20:9b:c8:34:03:d1:0c:eb:44:c4:7f:2b:09:67:4e:b3:41:99:
85:93:23:d7:20:40:59:6c:78:4a:41:90:55:0e:40:80:08:29:
33:e9:4e:c1:55:45:b6:c5:5e:cf:65:77:11:dc:b2:f3:d3:4c:
cb:f0:0b:32:8a:eb:d6:28:1e:8b:0c:aa:0a:18:81:d0:a5:27:
fd:c1:d2:79:81:5f:14:17:b3:f8:e9:c3:ac:d8:8a:91:7b:68:
49:8f:13:67:a8:3c:ca:b0:b1:49:60:2c:c9:4e:c0:ae:90:75:
1a:95:15:47:cb:82:3a:7d:93:46:1b:89:c7:11:75:a0:65:d6:
9d:1a:10:55
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAewUczTgjGhuI/cUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIwMzEyMDAwMFoXDTIzMDEwODA1MDAwMFowLzEtMCsGA1UEAxMk
MmQ3NTY3MDUtN2I4Yy00MTVmLWJjMTAtZDBlODA2OWQxMzRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/Wv9v5FXK4EwTzzNwlfHNj3/y4DxDsSDxY0
nQnp9zkIENm/8o+2JEVLSbMGN43PqR65eRoD3zzgd4xQdqDBMBuhbdK1ZrA8h0AJ
yQwSEfTTARcTH+IG8jnxYkh1bjVSI676uOM3wtFnczKkaaSPTA5ZjnK0kyhvTd0+
K7cjYLGnR6ORSUiQCE2HAMzQMlBpPNZa8VdGphFu3xHOPQr/NoPMRoAJ8zbBcms1
mGa2F9sg9dtW2bzB1MLl2P7Fx88JLvT1Z02cSsH9Pocm2hwrYc5jJULCsI37n866
NQFq+YZZFyl5zK3BfOpAON58POwSMiLFLa7fz9G0kNGm9MkbSQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBdc9vKupbnLZru4gadpov6/K76hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDU2ODU3N2MtMDdmMS0z
NzFmLTg2ODItMGRmNDdlOTk4ZWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEogwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAIJs+XOhCt3CV35awOIlZKafx+Ft2suBpFDVCvN6hnIBihKEiSsToRc9P
8ggIvtm4NTYZP5YP4v8Ra8PDNonPxP9OGO+gqIzy+fbZRO1ALrHGizYq/z97MU6E
AcOaX3HBZoqi+chODYr2aCUjCi4S2hfV5dgqk4QSFXbTDpPtIJvINAPRDOtExH8r
CWdOs0GZhZMj1yBAWWx4SkGQVQ5AgAgpM+lOwVVFtsVez2V3Edyy89NMy/ALMorr
1igeiwyqChiB0KUn/cHSeYFfFBez+OnDrNiKkXtoSY8TZ6g8yrCxSWAsyU7ArpB1
GpUVR8uCOn2TRhuJxxF1oGXWnRoQVQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:55:12 2025 by rpki-client