Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d8fd4b52-d783-3f0a-a2f5-075b41c321af.roa
File: d8fd4b52-d783-3f0a-a2f5-075b41c321af.roa (raw, json)
Hash identifier: fnrN1hAf0it0V+40Nu1Q8TMzb2Dff6g5lzQbkC6Wcbs=
Subject key identifier: 69:F4:59:C4:1D:51:F6:32:66:CE:CB:AF:87:A1:D2:EF:CA:45:5A:FE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C961E1E83C16428FDCA21F440
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d8fd4b52-d783-3f0a-a2f5-075b41c321af.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.184.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:1e:1e:83:c1:64:28:fd:ca:21:f4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=4344903d-25cc-4524-a363-2aa3bd909d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:29:74:89:56:a6:9e:d5:db:a6:95:db:76:8e:
c0:f7:94:99:eb:42:43:48:a9:69:6b:a2:99:63:70:
4f:47:f5:ca:1c:36:92:44:ff:eb:32:af:69:08:5c:
6e:b0:93:ce:33:55:2f:16:69:5b:b9:a5:bd:ab:3c:
f0:a9:13:48:7b:72:d6:bc:41:1d:a0:4f:ab:a0:6d:
c4:ac:a1:a6:a8:b3:cb:96:cb:0c:2f:ee:59:1b:70:
d0:5c:f6:0e:ff:56:03:5c:33:c6:3e:62:6f:d9:22:
23:9b:0c:1a:d9:c0:be:21:90:69:52:19:ac:01:8b:
c8:86:d5:2d:fb:41:fb:52:bc:e4:b7:8e:16:4f:b1:
9e:f2:cc:64:4f:cf:ab:92:c5:18:40:80:10:07:49:
97:13:70:24:f3:79:86:cb:90:3a:4c:62:6a:39:41:
fd:67:a7:4b:e8:62:3c:0e:30:a6:33:25:9f:09:25:
ad:38:31:40:4c:31:73:1b:06:96:5b:e9:d9:bc:36:
0e:4f:23:52:dc:92:8d:41:e8:6b:36:05:e4:d7:c7:
64:ed:32:9c:db:a6:be:73:ed:37:99:d8:db:33:0e:
e5:1d:11:b8:b2:84:25:f1:b0:a6:62:f4:7f:a2:2c:
31:1f:5c:c6:f9:ee:14:50:ed:8f:28:d3:c4:e7:51:
db:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F4:59:C4:1D:51:F6:32:66:CE:CB:AF:87:A1:D2:EF:CA:45:5A:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d8fd4b52-d783-3f0a-a2f5-075b41c321af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.184.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:f8:40:cf:c1:2f:8d:b6:f9:f7:a0:ca:4b:e3:52:52:db:7e:
95:5c:fa:0a:0c:74:fa:cf:f5:d0:68:a8:79:5d:ee:41:03:6a:
61:0b:ac:30:2e:e9:a2:02:3b:d9:00:84:03:60:ca:52:56:9c:
b5:6c:42:b4:31:e4:74:0c:d5:1c:39:be:fe:1b:e1:6e:a7:66:
2e:5c:f2:b0:0e:c1:f2:8f:f6:b6:c3:5a:95:4a:b0:5d:dd:81:
cf:23:e6:d7:08:32:24:6c:b9:d0:de:9e:e2:8c:88:8f:9b:ba:
1b:28:f7:f8:85:8d:1d:02:93:72:c8:c9:79:b3:cb:e8:f7:f7:
c2:0b:d7:35:0b:55:a9:c5:25:7f:a1:82:b7:20:15:17:1c:06:
94:1c:f8:f2:d8:ff:83:c4:3a:af:1c:79:3e:c7:ae:ef:a0:7f:
21:01:e5:34:5f:85:1d:49:76:04:db:1c:ad:4e:36:d8:dd:bd:
74:9a:d6:a3:6c:46:6a:38:57:09:84:89:f9:6d:bd:c3:48:d1:
9e:72:86:b4:5d:db:fe:8e:aa:4c:0f:27:0e:e1:33:bf:aa:15:
17:3c:17:4e:f1:48:8e:0f:f6:d8:92:0b:44:5e:c3:0c:17:bc:
45:46:3a:b9:7a:c6:e6:a3:b6:65:a7:64:5d:08:d5:92:58:03:
66:e8:8c:7d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDyWHh6DwWQo/coh9EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDExNDA1MDAwMFoXDTIyMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
NDM0NDkwM2QtMjVjYy00NTI0LWEzNjMtMmFhM2JkOTA5ZDgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCl0iVamntXbppXbdo7A95SZ60JDSKlpa6KZ
Y3BPR/XKHDaSRP/rMq9pCFxusJPOM1UvFmlbuaW9qzzwqRNIe3LWvEEdoE+roG3E
rKGmqLPLlssML+5ZG3DQXPYO/1YDXDPGPmJv2SIjmwwa2cC+IZBpUhmsAYvIhtUt
+0H7Urzkt44WT7Ge8sxkT8+rksUYQIAQB0mXE3Ak83mGy5A6TGJqOUH9Z6dL6GI8
DjCmMyWfCSWtODFATDFzGwaWW+nZvDYOTyNS3JKNQehrNgXk18dk7TKc26a+c+03
mdjbMw7lHRG4soQl8bCmYvR/oiwxH1zG+e4UUO2PKNPE51Hb8wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGn0WcQdUfYyZs7Lr4eh0u/KRVr+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDhmZDRiNTItZDc4My0z
ZjBhLWEyZjUtMDc1YjQxYzMyMWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBErgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAvvhAz8Evjbb596DKS+NSUtt+lVz6Cgx0+s/10GioeV3uQQNqYQusMC7p
ogI72QCEA2DKUlactWxCtDHkdAzVHDm+/hvhbqdmLlzysA7B8o/2tsNalUqwXd2B
zyPm1wgyJGy50N6e4oyIj5u6Gyj3+IWNHQKTcsjJebPL6Pf3wgvXNQtVqcUlf6GC
tyAVFxwGlBz48tj/g8Q6rxx5Pseu76B/IQHlNF+FHUl2BNscrU422N29dJrWo2xG
ajhXCYSJ+W29w0jRnnKGtF3b/o6qTA8nDuEzv6oVFzwXTvFIjg/22JILRF7DDBe8
RUY6uXrG5qO2ZadkXQjVklgDZuiMfQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:59:17 2025 by rpki-client