Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dcc2fee4-9a63-360f-9554-7a996c601f19.roa
File: dcc2fee4-9a63-360f-9554-7a996c601f19.roa (raw, json)
Hash identifier: eJCjgL8WKnmc7iFuAWRAWqFc0EJp25TjAfb/os5QQHI=
Subject key identifier: EC:5D:7D:1C:16:D6:8F:5E:08:F3:EB:63:D8:46:BA:5A:4B:C5:07:DA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E70A747F0BDC0DC8295782D40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dcc2fee4-9a63-360f-9554-7a996c601f19.roa
Signing time: Sat 02 Jul 2022 12:00:00 +0000
ROA not before: Sat 02 Jul 2022 12:00:00 +0000
ROA not after: Sun 07 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.59.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:70:a7:47:f0:bd:c0:dc:82:95:78:2d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 2 12:00:00 2022 GMT
Not After : Aug 7 04:00:00 2022 GMT
Subject: CN=e2c5fa92-2283-4474-904b-c6dd886bf528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fc:25:88:65:48:41:2d:a7:0d:9a:b3:19:c1:
f9:d5:d6:74:64:f5:43:c2:9b:40:42:07:9d:3d:21:
0f:2f:83:b2:ee:6c:5b:2e:46:dd:f5:e2:35:f0:02:
ef:57:7c:2e:66:61:cf:85:b1:b5:b7:82:01:e0:61:
59:af:a8:68:f1:e4:f7:6f:e9:4d:06:6b:35:8b:d6:
6c:0b:10:dd:da:9f:da:eb:e3:87:13:39:b2:ad:7b:
d0:ab:bf:8f:9c:ca:2c:64:d1:c1:be:72:08:46:16:
47:b7:c3:0e:c8:11:b8:36:c1:e3:fd:b3:7b:24:45:
f0:b9:af:85:e5:48:e9:f9:b3:d1:4d:31:b6:37:74:
73:33:9a:06:1e:2a:d8:e4:f2:f5:07:67:0e:77:e5:
ea:5c:d1:3d:94:04:5d:e7:b5:2f:81:d0:3c:3d:fd:
6c:dd:44:07:d6:3e:46:bb:b6:fa:3e:83:27:bc:6f:
5e:26:44:34:a7:8b:5c:cc:32:55:70:23:04:c8:19:
12:0d:4e:da:b5:d8:e6:b9:fb:23:b8:f3:f3:a7:63:
1a:69:66:72:39:ac:db:4b:47:23:fb:a9:8c:42:f5:
8f:00:e3:38:56:bf:4f:55:ca:69:c1:1a:f4:f4:f1:
22:e7:59:d3:24:af:55:2a:da:85:97:71:f7:2c:23:
1c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5D:7D:1C:16:D6:8F:5E:08:F3:EB:63:D8:46:BA:5A:4B:C5:07:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dcc2fee4-9a63-360f-9554-7a996c601f19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.59.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:b2:c8:2d:05:41:e0:da:15:15:7a:65:49:ed:2c:a9:0e:91:
64:52:51:50:9a:6e:0c:86:4f:90:cd:13:68:41:df:ef:21:96:
79:58:78:f9:ed:aa:a7:8e:bb:c1:d6:74:55:80:04:f0:54:c6:
f7:31:4e:35:bd:c1:6e:c4:83:e1:29:ed:ea:2a:77:79:42:12:
8c:11:b6:c7:28:7e:25:6d:aa:b8:f5:19:c2:28:8a:14:f2:2e:
04:c8:e6:40:86:6b:4a:d0:01:31:b4:f7:0e:6e:4f:67:1c:26:
fe:be:2f:e5:bf:63:52:05:a8:f5:6c:b7:c8:34:f0:50:ac:f6:
12:13:61:be:4a:84:17:4c:b9:c0:f8:65:b4:0c:48:d3:62:f9:
fc:66:3e:99:d6:fb:a1:ff:55:ab:a4:f2:86:93:c7:22:b5:e2:
4d:79:cc:0e:37:a4:ba:93:5a:89:45:2b:b1:74:15:89:14:a2:
9e:e3:1d:30:e4:3c:70:c0:7b:28:94:7a:e9:19:93:e8:39:d6:
60:6a:8a:43:c8:e1:8d:0b:38:23:9c:75:aa:96:5a:0e:e8:24:
33:7c:69:f0:96:a6:9a:4e:73:98:c5:54:ec:56:50:0e:35:8f:
a8:5f:86:34:b0:1b:65:c4:a6:ba:5e:49:5d:ca:3b:1c:a9:22:
d8:13:ec:f8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5wp0fwvcDcgpV4LUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcwMjEyMDAwMFoXDTIyMDgwNzA0MDAwMFowLzEtMCsGA1UEAxMk
ZTJjNWZhOTItMjI4My00NDc0LTkwNGItYzZkZDg4NmJmNTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/wliGVIQS2nDZqzGcH51dZ0ZPVDwptAQged
PSEPL4Oy7mxbLkbd9eI18ALvV3wuZmHPhbG1t4IB4GFZr6ho8eT3b+lNBms1i9Zs
CxDd2p/a6+OHEzmyrXvQq7+PnMosZNHBvnIIRhZHt8MOyBG4NsHj/bN7JEXwua+F
5Ujp+bPRTTG2N3RzM5oGHirY5PL1B2cOd+XqXNE9lARd57UvgdA8Pf1s3UQH1j5G
u7b6PoMnvG9eJkQ0p4tczDJVcCMEyBkSDU7atdjmufsjuPPzp2MaaWZyOazbS0cj
+6mMQvWPAOM4Vr9PVcppwRr09PEi51nTJK9VKtqFl3H3LCMcNQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOxdfRwW1o9eCPPrY9hGulpLxQfaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZGNjMmZlZTQtOWE2My0z
NjBmLTk1NTQtN2E5OTZjNjAxZjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEjswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEANbLILQVB4NoVFXplSe0sqQ6RZFJRUJpuDIZPkM0TaEHf7yGWeVh4+e2q
p467wdZ0VYAE8FTG9zFONb3BbsSD4Snt6ip3eUISjBG2xyh+JW2quPUZwiiKFPIu
BMjmQIZrStABMbT3Dm5PZxwm/r4v5b9jUgWo9Wy3yDTwUKz2EhNhvkqEF0y5wPhl
tAxI02L5/GY+mdb7of9Vq6TyhpPHIrXiTXnMDjekupNaiUUrsXQViRSinuMdMOQ8
cMB7KJR66RmT6DnWYGqKQ8jhjQs4I5x1qpZaDugkM3xp8Jammk5zmMVU7FZQDjWP
qF+GNLAbZcSmul5JXco7HKki2BPs+A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:13:35 2025 by rpki-client