Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d5f5216f-5c1e-3b78-8643-76c818b26778.roa
File: d5f5216f-5c1e-3b78-8643-76c818b26778.roa (raw, json)
Hash identifier: 9l3L1RQlqL4F3mylOzOg3J7h2hF90nluCMRCgCr4QEs=
Subject key identifier: 1D:10:06:D0:F5:0E:BB:FE:6D:27:D5:39:03:33:33:FB:77:54:28:90
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0BF90336500D708E6C273160
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d5f5216f-5c1e-3b78-8643-76c818b26778.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.238.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0b:f9:03:36:50:0d:70:8e:6c:27:31:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=c3da1fc1-b3a8-419a-9a93-fc64f7ca4c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5b:7b:46:c0:52:b3:05:ef:29:a3:99:2c:9f:
80:1a:5b:0f:55:3b:b6:07:11:7d:f7:69:76:ca:e5:
35:cc:bc:a3:fd:bc:bc:28:07:39:af:89:46:e6:3f:
9d:63:ce:2b:f5:2e:fb:f9:d2:93:96:cf:bf:8a:b1:
75:64:c1:d7:48:b0:c9:b0:50:62:aa:fd:16:59:59:
e9:fc:f9:d5:2a:65:53:3e:5e:e1:ca:ef:9c:c0:b1:
fc:e9:47:03:41:97:0a:b4:ac:88:96:f4:5c:42:85:
d9:30:b8:33:db:b4:f2:5b:4c:d9:34:b1:67:12:49:
22:c2:c8:d8:c5:50:c5:db:60:97:ca:ff:d3:a8:65:
e7:b0:37:19:0d:99:36:03:97:3b:e3:3e:82:85:91:
11:ee:be:3c:2d:bb:01:bb:35:cd:b6:74:1e:f1:78:
e4:69:e5:08:90:1c:9d:59:23:8f:48:02:fd:cd:65:
aa:fc:32:99:f2:9a:04:f9:d2:f3:fa:c8:7d:20:c2:
3c:ec:65:b2:c1:7a:be:1d:9a:a2:5d:4b:58:a6:34:
15:d6:2b:99:39:da:80:90:20:2e:f8:3d:9c:93:97:
f2:4d:d7:4c:21:e3:92:88:0a:9c:05:27:54:59:44:
3f:23:21:c0:f5:a8:47:db:12:fb:f9:90:9d:09:8f:
5d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:10:06:D0:F5:0E:BB:FE:6D:27:D5:39:03:33:33:FB:77:54:28:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d5f5216f-5c1e-3b78-8643-76c818b26778.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.238.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:16:86:d2:26:13:d5:f0:f6:38:62:9c:b4:77:1c:e5:28:0c:
55:3c:1b:de:57:79:28:17:c5:81:ff:22:63:9a:a4:86:d5:60:
8b:26:58:cf:e2:71:59:11:09:e5:1a:e8:2c:8c:c8:0e:2c:0c:
76:ca:70:f1:f4:ce:1c:84:1a:f4:f3:c3:5a:02:af:44:43:06:
f3:f9:18:84:1a:c1:22:97:1c:a7:da:f5:c5:e3:19:51:c6:16:
0c:38:5a:e7:86:82:ab:f8:a2:44:4c:a8:cc:86:53:29:ef:e2:
32:29:14:ef:70:5d:d0:32:cd:69:23:d6:99:33:27:bb:b8:a5:
bc:75:1b:07:24:0c:93:4e:5f:e0:a5:56:73:76:cd:44:53:62:
ae:2f:74:f2:84:97:61:62:8b:27:4c:95:40:08:cf:8b:1f:89:
d6:e6:3e:f5:94:0f:33:29:f4:d1:86:93:22:2f:97:53:83:14:
e6:5e:7c:7f:98:de:91:90:b1:66:5c:34:10:80:26:2f:a1:59:
e1:c3:07:db:81:45:3f:69:af:e5:62:d7:18:7c:13:7c:86:ac:
0a:6f:98:89:2f:4a:b1:48:08:e2:50:c1:fb:75:09:0f:3a:26:
23:d3:5d:33:ee:2e:3a:74:52:6b:ee:aa:cb:0b:2d:0e:ba:cf:
66:09:ac:19
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8L+QM2UA1wjmwnMWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgyNjEyMDAwMFoXDTIyMTAwMTA0MDAwMFowLzEtMCsGA1UEAxMk
YzNkYTFmYzEtYjNhOC00MTlhLTlhOTMtZmM2NGY3Y2E0YzU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lt7RsBSswXvKaOZLJ+AGlsPVTu2BxF992l2
yuU1zLyj/by8KAc5r4lG5j+dY84r9S77+dKTls+/irF1ZMHXSLDJsFBiqv0WWVnp
/PnVKmVTPl7hyu+cwLH86UcDQZcKtKyIlvRcQoXZMLgz27TyW0zZNLFnEkkiwsjY
xVDF22CXyv/TqGXnsDcZDZk2A5c74z6ChZER7r48LbsBuzXNtnQe8XjkaeUIkByd
WSOPSAL9zWWq/DKZ8poE+dLz+sh9IMI87GWywXq+HZqiXUtYpjQV1iuZOdqAkCAu
+D2ck5fyTddMIeOSiAqcBSdUWUQ/IyHA9ahH2xL7+ZCdCY9dLQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFB0QBtD1Drv+bSfVOQMzM/t3VCiQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDVmNTIxNmYtNWMxZS0z
Yjc4LTg2NDMtNzZjODE4YjI2Nzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEu4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmhaG0iYT1fD2OGKctHcc5SgMVTwb3ld5KBfFgf8iY5qkhtVgiyZYz+Jx
WREJ5RroLIzIDiwMdspw8fTOHIQa9PPDWgKvREMG8/kYhBrBIpccp9r1xeMZUcYW
DDha54aCq/iiREyozIZTKe/iMikU73Bd0DLNaSPWmTMnu7ilvHUbByQMk05f4KVW
c3bNRFNiri908oSXYWKLJ0yVQAjPix+J1uY+9ZQPMyn00YaTIi+XU4MU5l58f5je
kZCxZlw0EIAmL6FZ4cMH24FFP2mv5WLXGHwTfIasCm+YiS9KsUgI4lDB+3UJDzom
I9NdM+4uOnRSa+6qywstDrrPZgmsGQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:08:46 2025 by rpki-client