Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dc207ef1-a8c8-3c03-9041-cc8ce63ce46e.roa
File: dc207ef1-a8c8-3c03-9041-cc8ce63ce46e.roa (raw, json)
Hash identifier: 4e3Wlgye8Yw1sbPaOO5RnD2S5HK0RKasRafPTgMWlg8=
Subject key identifier: 62:EB:71:DD:22:C9:0B:1E:59:ED:E0:54:33:93:53:8A:81:CD:5F:7D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D32A88B4CDA3DCAC4A006EC00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dc207ef1-a8c8-3c03-9041-cc8ce63ce46e.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.224.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:a8:8b:4c:da:3d:ca:c4:a0:06:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=04629ebe-a35f-4e9e-9f1a-fa2495a355d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c9:a7:85:0e:e4:00:e3:8d:b2:40:51:05:02:
da:45:ce:2d:01:c1:7b:d3:d7:f8:b3:5e:5c:59:02:
34:8a:e8:12:a1:cd:f0:c3:38:6d:ab:5e:bc:6d:ea:
2f:28:65:6b:52:e3:45:1c:bf:d7:fb:a3:fa:1d:23:
cb:1d:b9:1e:f0:4f:c0:8d:1b:fc:64:4e:79:fc:60:
1b:49:af:a1:c0:cc:e2:66:4e:7f:be:69:28:fc:9d:
c2:0d:c8:a6:58:e2:e7:f0:a1:94:82:52:73:00:32:
77:0a:05:e7:5d:14:23:13:a3:0c:b8:fe:96:bc:25:
4e:f5:e1:33:de:6c:d8:ff:8a:d6:92:16:93:5c:0a:
1e:58:e2:a6:ab:7a:c0:05:04:89:d9:45:76:21:60:
75:60:41:10:4d:21:12:aa:9d:32:18:39:b6:67:b9:
4b:8d:08:07:bf:b3:90:94:54:42:43:ff:88:2d:8b:
12:b0:46:5e:18:e5:28:bf:7b:e8:db:5b:3c:b3:11:
93:65:ff:19:5c:27:e2:70:65:39:1a:b1:39:f2:27:
b2:35:9e:79:08:13:2c:de:9a:20:d9:e6:b2:d3:0d:
a3:16:b0:a7:06:fd:17:c4:de:44:17:55:de:ed:4b:
be:c0:42:1b:91:9d:a5:2e:4f:e0:d2:8b:79:7d:19:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EB:71:DD:22:C9:0B:1E:59:ED:E0:54:33:93:53:8A:81:CD:5F:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dc207ef1-a8c8-3c03-9041-cc8ce63ce46e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.224.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:48:4a:23:bf:64:b8:1d:b0:23:49:0a:e7:60:d8:8b:0a:0a:
f6:3f:e8:48:c6:b4:7e:55:ec:6e:32:55:91:00:f0:32:56:7b:
0d:1f:e6:74:5e:db:71:3b:e6:1b:0f:17:cd:cb:0a:1b:91:2b:
31:3f:43:0b:3d:d1:5e:59:79:67:81:c6:86:f0:5c:96:c7:86:
42:46:4c:4f:03:b3:30:ef:48:2d:cf:3e:19:df:fb:19:e1:5d:
e8:bc:5c:cc:74:44:29:06:6e:0c:cf:f5:0d:1c:f1:8d:dd:a4:
7b:22:14:78:2f:ef:a8:4b:39:ac:5d:98:72:31:cb:3d:1a:3f:
e6:4a:53:5c:e9:76:fa:17:f8:5f:0c:82:26:f6:57:1f:ad:55:
54:76:86:40:6c:c0:b0:5d:3d:ec:98:33:ba:ae:22:5c:b8:31:
bb:57:00:8d:53:a4:97:f3:71:d7:cd:43:0f:3b:f8:c9:4a:23:
f8:a1:cb:65:c2:57:d3:15:f1:b9:ec:20:a4:06:cf:c8:c9:07:
33:cd:cf:ca:78:3f:dc:fb:11:c0:0a:6e:6e:d7:0c:74:69:ee:
a1:27:0c:c4:05:6a:7c:38:4d:d3:7a:2a:f9:13:4a:83:2f:ab:
4f:27:cd:a1:28:76:1b:3f:00:73:3d:f2:a0:fa:05:a7:dc:b4:
b2:bd:99:d3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0yqItM2j3KxKAG7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
MDQ2MjllYmUtYTM1Zi00ZTllLTlmMWEtZmEyNDk1YTM1NWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMmnhQ7kAOONskBRBQLaRc4tAcF709f4s15c
WQI0iugSoc3wwzhtq168beovKGVrUuNFHL/X+6P6HSPLHbke8E/AjRv8ZE55/GAb
Sa+hwMziZk5/vmko/J3CDcimWOLn8KGUglJzADJ3CgXnXRQjE6MMuP6WvCVO9eEz
3mzY/4rWkhaTXAoeWOKmq3rABQSJ2UV2IWB1YEEQTSESqp0yGDm2Z7lLjQgHv7OQ
lFRCQ/+ILYsSsEZeGOUov3vo21s8sxGTZf8ZXCficGU5GrE58ieyNZ55CBMs3pog
2eay0w2jFrCnBv0XxN5EF1Xe7Uu+wEIbkZ2lLk/g0ot5fRlbYwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGLrcd0iyQseWe3gVDOTU4qBzV99MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZGMyMDdlZjEtYThjOC0z
YzAzLTkwNDEtY2M4Y2U2M2NlNDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEuAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEApkhKI79kuB2wI0kK52DYiwoK9j/oSMa0flXsbjJVkQDwMlZ7DR/mdF7b
cTvmGw8XzcsKG5ErMT9DCz3RXll5Z4HGhvBclseGQkZMTwOzMO9ILc8+Gd/7GeFd
6LxczHREKQZuDM/1DRzxjd2keyIUeC/vqEs5rF2YcjHLPRo/5kpTXOl2+hf4XwyC
JvZXH61VVHaGQGzAsF097Jgzuq4iXLgxu1cAjVOkl/Nx181DDzv4yUoj+KHLZcJX
0xXxuewgpAbPyMkHM83Pyng/3PsRwApubtcMdGnuoScMxAVqfDhN03oq+RNKgy+r
TyfNoSh2Gz8Acz3yoPoFp9y0sr2Z0w==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:23:36 2025 by rpki-client