Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d5d54c89-cc5b-3dbe-be4d-cda50356da18.roa
File: d5d54c89-cc5b-3dbe-be4d-cda50356da18.roa (raw, json)
Hash identifier: REGliT/6MbWxcUtYHG5E+jhL5nYoYYLo10uCdK7/NkQ=
Subject key identifier: BA:8E:3C:58:37:F8:A2:72:E9:73:DE:FE:F5:7C:23:31:35:DE:6C:27
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584045DE5CE3604C90FD8BD1A348
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d5d54c89-cc5b-3dbe-be4d-cda50356da18.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.73.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:45:de:5c:e3:60:4c:90:fd:8b:d1:a3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=11774153-ecc1-4eb6-a146-716fdbb26045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:9a:59:c5:94:3d:b5:8b:ec:bd:68:5e:ee:
fe:04:33:41:1a:37:f4:19:8c:9e:69:40:e6:51:20:
4d:8f:11:3e:4f:54:23:cf:06:b5:6d:34:59:62:bf:
fe:4d:f8:5b:6d:7d:5d:60:4c:6c:10:a9:b7:a2:7b:
2b:0c:9e:1e:53:1e:cf:eb:1c:b6:ef:34:37:24:bd:
54:fc:2f:3e:67:f6:59:12:76:dd:6f:8e:fe:14:e1:
73:0a:6b:63:61:ed:1a:5d:b7:4c:e7:42:c9:f8:e3:
be:fd:cb:ca:72:a4:d6:09:e1:66:08:3a:7b:fc:79:
a6:3b:dd:32:71:d7:5c:aa:f5:f7:49:94:d2:25:30:
41:24:af:d8:e5:c3:b5:ee:9f:71:60:07:bd:20:d7:
8d:35:6a:d0:13:e2:21:1e:3f:d8:4f:f2:18:6f:27:
5d:cc:a7:e3:fa:1f:40:95:c3:53:07:08:e6:88:5a:
11:a9:86:d6:7f:f9:e4:9b:03:c3:16:26:1d:af:f1:
92:0a:7c:e4:e6:a0:87:09:75:60:7f:79:03:fc:46:
e0:e3:4e:43:67:04:9f:fa:04:bd:30:8a:ea:e3:51:
6b:7a:5d:32:8a:1d:d3:0b:ce:1a:9f:82:b0:57:6f:
e5:8a:37:67:90:de:27:3a:0e:73:92:b7:d1:03:b1:
bb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8E:3C:58:37:F8:A2:72:E9:73:DE:FE:F5:7C:23:31:35:DE:6C:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d5d54c89-cc5b-3dbe-be4d-cda50356da18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.73.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:91:00:0d:f0:82:bf:0c:48:aa:ca:85:bf:6a:a6:3d:12:fa:
5b:28:55:2d:39:15:76:88:04:f8:86:ab:d1:44:4e:78:90:2a:
f1:ec:d7:ab:f1:cc:8c:a7:04:7a:99:a1:ff:88:93:b0:2d:4d:
52:16:28:ba:67:c5:09:d3:30:3f:fc:da:7a:00:1a:f1:c7:fb:
a3:64:a2:25:03:10:cb:4e:47:2e:e4:06:1a:d3:08:d5:b3:ae:
38:9b:ca:ed:e5:07:9c:8d:38:a0:be:65:bb:7f:fe:62:66:3b:
43:12:31:67:81:63:9c:fd:98:a1:14:c6:92:82:bc:c1:e0:41:
a3:63:e4:87:b1:5a:80:63:75:e3:ba:d3:06:c1:b1:77:56:3f:
a9:a6:c6:fe:e7:e6:aa:f3:f6:c0:4b:42:81:dc:7b:17:a9:e4:
9c:12:72:a0:2f:73:8b:0a:3e:08:0e:14:85:49:b1:92:a1:c0:
5c:39:c3:5d:51:99:a1:33:37:e6:11:ec:b9:f0:4f:f4:f0:c7:
19:91:55:99:0f:19:92:0a:e6:84:40:41:e6:9f:44:79:5f:0b:
64:af:7b:e8:50:85:29:13:ea:fc:89:ac:cc:fe:32:9f:6a:5a:
2d:2a:cb:cc:82:ca:c6:9a:93:ca:6b:1e:1e:dd:0b:13:ba:b4:
ae:4b:23:61
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBF3lzjYEyQ/YvRo0gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNzEyMDAwMFoXDTIzMDEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
MTE3NzQxNTMtZWNjMS00ZWI2LWExNDYtNzE2ZmRiYjI2MDQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhOaWcWUPbWL7L1oXu7+BDNBGjf0GYyeaUDm
USBNjxE+T1Qjzwa1bTRZYr/+TfhbbX1dYExsEKm3onsrDJ4eUx7P6xy27zQ3JL1U
/C8+Z/ZZEnbdb47+FOFzCmtjYe0aXbdM50LJ+OO+/cvKcqTWCeFmCDp7/HmmO90y
cddcqvX3SZTSJTBBJK/Y5cO17p9xYAe9INeNNWrQE+IhHj/YT/IYbyddzKfj+h9A
lcNTBwjmiFoRqYbWf/nkmwPDFiYdr/GSCnzk5qCHCXVgf3kD/Ebg405DZwSf+gS9
MIrq41Frel0yih3TC84an4KwV2/lijdnkN4nOg5zkrfRA7G7mwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLqOPFg3+KJy6XPe/vV8IzE13mwnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDVkNTRjODktY2M1Yi0z
ZGJlLWJlNGQtY2RhNTAzNTZkYTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEkkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAqZEADfCCvwxIqsqFv2qmPRL6WyhVLTkVdogE+Iar0UROeJAq8ezXq/HM
jKcEepmh/4iTsC1NUhYoumfFCdMwP/zaegAa8cf7o2SiJQMQy05HLuQGGtMI1bOu
OJvK7eUHnI04oL5lu3/+YmY7QxIxZ4FjnP2YoRTGkoK8weBBo2Pkh7FagGN147rT
BsGxd1Y/qabG/ufmqvP2wEtCgdx7F6nknBJyoC9ziwo+CA4UhUmxkqHAXDnDXVGZ
oTM35hHsufBP9PDHGZFVmQ8ZkgrmhEBB5p9EeV8LZK976FCFKRPq/ImszP4yn2pa
LSrLzILKxpqTymseHt0LE7q0rksjYQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:42:13 2025 by rpki-client