Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ddde0220-40fe-3de1-b005-a38509c5af10.roa
File: ddde0220-40fe-3de1-b005-a38509c5af10.roa (raw, json)
Hash identifier: 8820gfWtAmcV0qnADhBKh3vjr8hCG+OVGt2VgYaVDBA=
Subject key identifier: 0C:33:5D:B7:FA:36:3E:45:F8:FC:AC:2D:BE:3F:0B:D4:18:BE:6F:66
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DA7F7DEEAD894C1E98A2AC180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ddde0220-40fe-3de1-b005-a38509c5af10.roa
Signing time: Thu 21 Apr 2022 12:00:00 +0000
ROA not before: Thu 21 Apr 2022 12:00:00 +0000
ROA not after: Fri 27 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.202.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a7:f7:de:ea:d8:94:c1:e9:8a:2a:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 21 12:00:00 2022 GMT
Not After : May 27 04:00:00 2022 GMT
Subject: CN=f022ffeb-12b9-4320-8024-0cea732e0a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:05:33:7f:5f:ee:b7:6b:bc:bd:1c:ec:60:78:
c2:61:b3:39:cf:5f:42:c5:5d:d5:f0:71:9f:5c:d5:
1c:33:7f:07:49:ac:b3:bd:db:38:ee:3e:89:06:28:
db:c2:d6:b0:72:17:30:84:84:5d:85:58:f9:30:8e:
89:de:3a:35:1d:ff:c5:5b:7c:d5:ba:5e:96:c1:de:
6d:40:e0:06:f1:34:13:90:ba:ef:bd:4c:33:0b:78:
73:58:52:be:eb:d6:0a:78:42:76:db:64:ed:37:f1:
a5:69:f4:34:a1:09:35:f1:f2:f1:35:b2:71:07:ca:
15:72:62:2c:05:d5:ef:6e:84:8a:10:c8:a4:72:8b:
30:54:72:ee:d9:25:41:21:b6:4a:b7:a5:d7:18:f2:
d4:b7:39:39:f0:16:24:a8:4a:8e:4a:3d:3c:6a:1a:
c8:ed:40:d7:e2:07:f6:61:d6:26:68:2e:20:d4:ba:
cb:dd:c8:d2:ce:59:69:66:2c:e7:b4:0f:8c:f2:83:
5a:b4:ac:b6:bf:34:f6:c0:b6:eb:65:34:be:d4:c7:
c4:3a:4e:6d:be:fd:f4:29:96:4b:f3:23:59:2e:7d:
d7:0f:bf:3e:60:ea:09:15:d7:a9:3f:5f:62:14:58:
0b:f3:57:86:c6:ac:69:b3:4c:43:49:00:78:f7:2c:
64:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:33:5D:B7:FA:36:3E:45:F8:FC:AC:2D:BE:3F:0B:D4:18:BE:6F:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ddde0220-40fe-3de1-b005-a38509c5af10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.202.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:b0:f3:03:02:58:51:a7:f9:7f:5f:57:fe:0f:d1:2d:a1:d0:
8f:cd:51:1c:96:eb:39:47:a4:39:95:4f:6c:56:2f:00:84:e6:
2b:bb:62:7d:99:d2:cf:ed:95:eb:7f:44:3e:bd:c5:93:24:03:
52:ee:9a:1b:85:bd:cb:32:11:e6:c9:38:c2:2c:98:c2:6c:c8:
84:10:7b:4c:53:27:ab:46:03:b7:2a:4b:1c:f5:c6:66:7e:43:
15:dd:4f:54:88:8a:39:2d:34:40:94:49:15:ea:ea:ef:51:ba:
09:ef:e9:bc:c6:49:74:f8:a5:66:1a:a7:ce:67:15:43:29:c5:
23:a2:38:4a:b8:64:86:f9:13:11:a0:3b:78:7b:b4:11:84:21:
d9:33:f2:7f:a7:75:c2:de:77:d7:c8:ae:83:2d:ff:cb:2e:94:
c4:54:a7:88:af:29:7e:15:d7:b1:d0:9d:33:5c:c5:42:f3:87:
56:69:62:00:b2:d7:3c:33:5e:ab:2f:ff:89:80:6b:d5:e0:cc:
f8:21:9c:90:5a:c5:b8:38:c3:92:3c:49:f5:79:6f:cd:1a:04:
85:54:04:f5:5f:9d:63:fb:21:28:99:93:63:13:16:41:30:b6:
f7:f9:22:bd:e0:88:51:4f:f5:c9:a7:00:47:70:9c:4a:30:08:
18:8b:fd:d7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2n997q2JTB6YoqwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQyMTEyMDAwMFoXDTIyMDUyNzA0MDAwMFowLzEtMCsGA1UEAxMk
ZjAyMmZmZWItMTJiOS00MzIwLTgwMjQtMGNlYTczMmUwYTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwUzf1/ut2u8vRzsYHjCYbM5z19CxV3V8HGf
XNUcM38HSayzvds47j6JBijbwtawchcwhIRdhVj5MI6J3jo1Hf/FW3zVul6Wwd5t
QOAG8TQTkLrvvUwzC3hzWFK+69YKeEJ222TtN/GlafQ0oQk18fLxNbJxB8oVcmIs
BdXvboSKEMikcoswVHLu2SVBIbZKt6XXGPLUtzk58BYkqEqOSj08ahrI7UDX4gf2
YdYmaC4g1LrL3cjSzllpZizntA+M8oNatKy2vzT2wLbrZTS+1MfEOk5tvv30KZZL
8yNZLn3XD78+YOoJFdepP19iFFgL81eGxqxps0xDSQB49yxk/QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAwzXbf6Nj5F+PysLb4/C9QYvm9mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZGRkZTAyMjAtNDBmZS0z
ZGUxLWIwMDUtYTM4NTA5YzVhZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEsowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPrDzAwJYUaf5f19X/g/RLaHQj81RHJbrOUekOZVPbFYvAITmK7tifZnS
z+2V639EPr3FkyQDUu6aG4W9yzIR5sk4wiyYwmzIhBB7TFMnq0YDtypLHPXGZn5D
Fd1PVIiKOS00QJRJFerq71G6Ce/pvMZJdPilZhqnzmcVQynFI6I4SrhkhvkTEaA7
eHu0EYQh2TPyf6d1wt5318iugy3/yy6UxFSniK8pfhXXsdCdM1zFQvOHVmliALLX
PDNeqy//iYBr1eDM+CGckFrFuDjDkjxJ9XlvzRoEhVQE9V+dY/shKJmTYxMWQTC2
9/kiveCIUU/1yacAR3CcSjAIGIv91w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 21:20:02 2025 by rpki-client