Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d955220c-35fa-3ba0-9b8a-6035087927ca.roa
File: d955220c-35fa-3ba0-9b8a-6035087927ca.roa (raw, json)
Hash identifier: sJi34UOQ806Re3Ls0bBEIKmFTHiNvMIh+wqWOiDeQXE=
Subject key identifier: 64:63:63:B2:6D:7F:B5:4C:C7:12:EE:EF:8A:79:2D:B4:8C:7B:9E:D9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D59A0264F1F45D32C2962BA20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d955220c-35fa-3ba0-9b8a-6035087927ca.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.153.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:a0:26:4f:1f:45:d3:2c:29:62:ba:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=3812ad01-afdb-4234-a1ab-a681fe8e42c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:91:4a:c2:54:44:e1:08:83:d9:52:06:7b:61:
23:05:ca:bf:b7:e6:9d:95:81:63:c1:eb:aa:f6:f2:
82:2b:e3:0f:02:0f:79:6c:32:ad:e5:b8:80:51:59:
66:9a:88:1f:8f:5d:21:2e:e8:a4:f0:d7:33:8a:8a:
11:2a:64:03:ef:4d:ae:5e:96:de:ff:cc:1e:9b:de:
d0:c5:e1:a7:86:2b:5d:7d:45:73:a6:dd:14:69:38:
35:97:23:cf:33:72:af:cb:33:db:bf:db:b7:2c:7c:
b5:11:85:9a:1a:a8:23:b1:97:63:8f:f4:c3:6b:4c:
09:49:b2:15:b3:b1:cc:7d:e0:b6:85:f0:2b:11:33:
97:6b:21:6d:d4:ae:0d:bd:69:3f:81:51:7f:64:da:
d9:15:0e:43:05:a1:96:d6:7b:b2:f2:89:de:3e:c8:
20:a0:a4:c0:70:82:e1:56:a1:a9:7a:fa:e1:9c:fd:
ac:de:88:45:55:9f:97:b3:26:be:56:fe:c7:5e:7f:
77:70:06:31:80:ec:b5:2a:1d:cc:30:4e:da:8c:63:
bf:e9:04:41:3f:71:b6:4e:45:47:0a:ab:9c:04:31:
80:fd:d4:ee:f6:42:3a:60:9e:09:5a:df:8a:66:e5:
4f:25:b0:80:b1:04:44:a9:4c:9a:fb:7a:79:2d:06:
e1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:63:63:B2:6D:7F:B5:4C:C7:12:EE:EF:8A:79:2D:B4:8C:7B:9E:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d955220c-35fa-3ba0-9b8a-6035087927ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.153.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:46:b4:70:b9:b7:e3:79:c9:d4:ac:0e:19:45:ea:05:35:24:
01:f8:95:c2:22:2d:9e:3f:e1:11:e5:01:79:84:ef:a8:88:46:
72:97:4e:ea:14:c9:ce:90:42:ca:57:e0:fd:39:67:c6:3e:7d:
d1:da:39:3d:6c:98:8e:ff:b4:13:31:5e:e5:7a:0b:78:57:c7:
ad:54:6d:34:c7:67:c7:64:36:d6:21:7c:c6:4a:25:53:54:c1:
d0:d5:06:ce:16:00:e7:39:eb:d9:2b:29:ff:9d:d5:96:aa:03:
c0:9c:9b:50:62:dd:53:5d:92:3f:81:b5:d7:06:04:f7:21:7a:
2b:c2:17:96:28:12:5c:4f:ed:28:74:e8:5c:2a:02:aa:ab:67:
c4:44:1b:78:bb:2c:8a:c6:47:e8:44:ab:cd:45:27:6e:b1:37:
21:cc:c8:a0:e4:8e:a1:f9:81:ba:d6:6e:72:33:4c:fb:78:87:
c8:4a:5c:18:ee:94:07:60:0a:8f:1c:42:d6:97:cd:1f:d1:63:
64:eb:a8:d1:c8:9f:f8:25:f7:d1:fc:4a:6d:73:26:5b:be:ac:
8c:76:e3:8d:dd:01:b1:aa:3e:26:4d:17:59:12:df:bd:15:5a:
af:2f:2e:ec:f9:b5:50:55:a5:c8:7f:82:09:3c:9b:d9:14:89:
1c:fa:82:4d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1ZoCZPH0XTLCliuiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMyNTA0MDAwMFoXDTIyMDQyOTA0MDAwMFowLzEtMCsGA1UEAxMk
MzgxMmFkMDEtYWZkYi00MjM0LWExYWItYTY4MWZlOGU0MmM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJFKwlRE4QiD2VIGe2EjBcq/t+adlYFjweuq
9vKCK+MPAg95bDKt5biAUVlmmogfj10hLuik8NcziooRKmQD702uXpbe/8wem97Q
xeGnhitdfUVzpt0UaTg1lyPPM3KvyzPbv9u3LHy1EYWaGqgjsZdjj/TDa0wJSbIV
s7HMfeC2hfArETOXayFt1K4NvWk/gVF/ZNrZFQ5DBaGW1nuy8onePsggoKTAcILh
VqGpevrhnP2s3ohFVZ+Xsya+Vv7HXn93cAYxgOy1Kh3MME7ajGO/6QRBP3G2TkVH
CqucBDGA/dTu9kI6YJ4JWt+KZuVPJbCAsQREqUya+3p5LQbhAwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGRjY7Jtf7VMxxLu74p5LbSMe57ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDk1NTIyMGMtMzVmYS0z
YmEwLTliOGEtNjAzNTA4NzkyN2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEpkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAR0a0cLm343nJ1KwOGUXqBTUkAfiVwiItnj/hEeUBeYTvqIhGcpdO6hTJ
zpBCylfg/Tlnxj590do5PWyYjv+0EzFe5XoLeFfHrVRtNMdnx2Q21iF8xkolU1TB
0NUGzhYA5znr2Ssp/53VlqoDwJybUGLdU12SP4G11wYE9yF6K8IXligSXE/tKHTo
XCoCqqtnxEQbeLssisZH6ESrzUUnbrE3IczIoOSOofmButZucjNM+3iHyEpcGO6U
B2AKjxxC1pfNH9FjZOuo0cif+CX30fxKbXMmW76sjHbjjd0Bsao+Jk0XWRLfvRVa
ry8u7Pm1UFWlyH+CCTyb2RSJHPqCTQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:49:05 2025 by rpki-client