Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ded51075-b1fb-3d18-ba5c-25707a818751.roa
File: ded51075-b1fb-3d18-ba5c-25707a818751.roa (raw, json)
Hash identifier: hKQDI0Z92ES8Er9KvDafPKs6f/ytcfg22QPLQlrRGp0=
Subject key identifier: 70:54:41:1C:E1:CA:C6:28:92:CE:1F:92:08:1B:3F:11:31:2E:E1:6E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCC74EAC7B6D4E00AF3449CC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ded51075-b1fb-3d18-ba5c-25707a818751.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 18.240.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cc:74:ea:c7:b6:d4:e0:0a:f3:44:9c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=3a002686-9a7a-4c29-80c4-f62733d25d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:4b:9c:53:4c:a7:79:a2:f6:7e:7f:98:04:
fb:6e:a8:72:a2:d8:f7:df:04:1a:4c:4c:48:8f:8e:
ff:2d:46:bc:48:35:6a:d0:27:24:26:98:d5:38:f9:
b4:07:c9:82:5e:e1:c9:50:b0:1f:d4:76:96:97:49:
8e:cd:5d:40:30:87:f8:df:61:d4:60:90:21:f2:ef:
fa:57:68:cc:93:8a:2c:f6:ea:3b:48:7b:3c:8e:e5:
a6:c4:f0:a9:8d:1a:19:72:89:4e:9d:f3:ab:c8:ec:
f5:dc:5f:b1:0e:ce:9a:a9:b3:79:f5:cb:f2:4d:45:
1c:3e:84:80:d1:a2:d9:ad:04:3b:1f:f5:56:7e:86:
d1:ef:97:de:23:17:95:82:e5:df:39:ba:96:8d:bb:
d0:e6:ff:53:f2:dc:12:01:3a:fa:c1:cc:b9:7d:64:
3b:c9:f7:15:0c:b0:0d:f4:9f:49:1c:a8:e1:1b:2e:
5d:24:b3:95:a2:f2:ba:82:b3:2a:4e:76:90:30:66:
47:57:35:99:f3:c1:ca:5e:5b:82:cf:69:7a:d1:c1:
93:e5:3d:14:0a:03:cc:b3:04:56:ba:39:dc:63:a3:
c8:90:61:88:1a:d8:1a:54:d1:13:96:98:ec:55:00:
49:e4:2e:f3:63:fd:25:be:48:56:fd:77:b9:70:1a:
bd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:54:41:1C:E1:CA:C6:28:92:CE:1F:92:08:1B:3F:11:31:2E:E1:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ded51075-b1fb-3d18-ba5c-25707a818751.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.240.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:f1:8b:09:8b:49:ca:bb:68:2d:df:57:7b:1d:15:27:7c:ef:
c0:0d:f6:04:07:16:dd:8d:58:02:c0:a6:92:d7:2b:d1:ae:39:
2e:bd:c2:57:ba:bb:8b:83:dd:4c:9a:41:c5:d5:98:7a:b7:d9:
4a:fd:b9:ef:65:d7:1e:64:a2:2b:dc:98:d7:18:55:a3:4e:eb:
35:a8:2f:cc:d1:c5:b9:5d:79:54:93:fc:9a:3c:50:e1:3e:27:
06:c1:67:09:3a:2d:99:16:02:d8:c9:cd:a6:3b:d0:96:92:7c:
a5:66:e7:80:48:24:dd:40:8e:7c:65:e7:a2:a4:17:24:f2:11:
5f:e2:8b:21:c4:f9:6d:af:d9:80:bb:15:a5:fe:03:f2:a3:ea:
3a:79:7e:45:95:dd:8f:ec:8f:1f:64:3f:69:dd:a2:bf:f6:88:
c9:86:2a:8a:f4:e0:8a:20:bf:f6:24:4a:93:ed:5b:29:ff:b8:
53:01:4f:9a:5f:67:93:01:16:97:b5:99:e4:6c:29:9a:f9:bf:
4d:97:eb:75:d2:3c:62:0b:aa:71:3e:91:6f:eb:5a:d2:b1:05:
af:0d:71:2f:f9:72:f6:bb:fd:1c:d0:b7:ea:d9:f5:1f:22:80:
fd:2a:83:bb:93:2b:3b:e5:23:b4:83:b0:71:ac:1d:eb:f8:d2:
a6:d9:c3:eb
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/MdOrHttTgCvNEnMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEwMzEyMDAwMFoXDTIyMTIwOTA1MDAwMFowLzEtMCsGA1UEAxMk
M2EwMDI2ODYtOWE3YS00YzI5LTgwYzQtZjYyNzMzZDI1ZDg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4dLnFNMp3mi9n5/mAT7bqhyotj33wQaTExI
j47/LUa8SDVq0CckJpjVOPm0B8mCXuHJULAf1HaWl0mOzV1AMIf432HUYJAh8u/6
V2jMk4os9uo7SHs8juWmxPCpjRoZcolOnfOryOz13F+xDs6aqbN59cvyTUUcPoSA
0aLZrQQ7H/VWfobR75feIxeVguXfObqWjbvQ5v9T8twSATr6wcy5fWQ7yfcVDLAN
9J9JHKjhGy5dJLOVovK6grMqTnaQMGZHVzWZ88HKXluCz2l60cGT5T0UCgPMswRW
ujncY6PIkGGIGtgaVNETlpjsVQBJ5C7zY/0lvkhW/Xe5cBq9YwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHBUQRzhysYoks4fkggbPxExLuFuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZGVkNTEwNzUtYjFmYi0z
ZDE4LWJhNWMtMjU3MDdhODE4NzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEvAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbvGLCYtJyrtoLd9Xex0VJ3zvwA32BAcW3Y1YAsCmktcr0a45Lr3CV7q7
i4PdTJpBxdWYerfZSv2572XXHmSiK9yY1xhVo07rNagvzNHFuV15VJP8mjxQ4T4n
BsFnCTotmRYC2MnNpjvQlpJ8pWbngEgk3UCOfGXnoqQXJPIRX+KLIcT5ba/ZgLsV
pf4D8qPqOnl+RZXdj+yPH2Q/ad2iv/aIyYYqivTgiiC/9iRKk+1bKf+4UwFPml9n
kwEWl7WZ5Gwpmvm/TZfrddI8YguqcT6Rb+ta0rEFrw1xL/ly9rv9HNC36tn1HyKA
/SqDu5MrO+UjtIOwcawd6/jSptnD6w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:04 2025 by rpki-client