Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e48d1fed-3af0-3066-9db7-ca981c853dbb.roa
File: e48d1fed-3af0-3066-9db7-ca981c853dbb.roa (raw, json)
Hash identifier: Wafttz0gj/5+nXUJKYiD5amcbo1wcDQU9WJe+sGRk1A=
Subject key identifier: A7:6C:68:21:68:5C:AD:20:42:66:3D:45:E6:B8:C2:C6:7B:2D:AB:A3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E92A5F8CE8723A9AA26A61700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e48d1fed-3af0-3066-9db7-ca981c853dbb.roa
Signing time: Thu 14 Jul 2022 12:00:00 +0000
ROA not before: Thu 14 Jul 2022 12:00:00 +0000
ROA not after: Fri 19 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.229.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:92:a5:f8:ce:87:23:a9:aa:26:a6:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 14 12:00:00 2022 GMT
Not After : Aug 19 04:00:00 2022 GMT
Subject: CN=db25a9ef-ff74-4414-a006-4b1d62e19e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:99:c2:28:e8:3e:e6:2e:6d:b2:67:d3:0c:
b5:a0:3d:98:59:1c:ac:f3:34:2e:c1:b7:31:ff:e7:
01:e3:7c:de:84:5b:e2:0a:9d:a4:25:a1:6c:ee:3b:
b4:b4:0b:e2:44:4e:17:57:82:b9:fa:04:ad:ca:64:
97:80:b3:e3:ea:da:f9:9b:d8:53:e2:e5:05:e3:8f:
c3:aa:f6:ce:4b:98:16:5a:98:7e:42:27:b4:7f:27:
59:c3:5a:8e:38:32:ef:da:4d:12:c0:d3:10:a6:02:
35:42:1d:19:12:d2:22:c3:0c:50:10:02:4b:7b:ff:
6f:fe:c9:b7:2b:37:31:76:7a:a3:c8:55:b5:37:fa:
9b:01:5e:19:cc:de:16:da:cc:1a:97:54:43:7c:15:
ed:31:7a:8e:c7:21:c1:32:6e:10:f9:17:23:29:64:
f8:76:37:f4:08:32:44:b0:c2:de:6f:17:0b:65:db:
94:3c:37:18:31:24:1b:11:d4:10:c6:e7:78:54:6a:
26:8f:9c:9f:50:ef:65:18:0a:0e:01:76:85:b3:05:
b1:59:79:de:13:10:9b:a2:45:58:f2:1f:10:50:78:
a0:fe:93:32:09:6b:13:40:7a:91:fb:0e:76:75:d5:
18:56:56:28:61:83:96:66:85:00:82:eb:02:1d:1e:
f8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6C:68:21:68:5C:AD:20:42:66:3D:45:E6:B8:C2:C6:7B:2D:AB:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e48d1fed-3af0-3066-9db7-ca981c853dbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.229.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:a5:70:b9:af:05:fd:dc:26:33:bb:1e:42:24:6f:61:d1:fe:
e4:7b:db:1b:a3:39:14:77:15:0c:1e:9d:0c:5e:e0:f4:7f:db:
1e:30:51:a7:67:99:ec:7f:48:41:a8:64:ce:a0:84:bd:ec:56:
b5:f1:09:f6:10:83:e7:d7:ed:e0:52:40:c5:af:12:ca:c4:2f:
6d:62:fa:9a:4f:35:92:64:a2:a3:df:58:d6:7d:d7:41:99:01:
e2:71:63:60:e5:d6:b2:02:ac:25:68:98:87:35:01:2b:a2:97:
d5:5b:b9:a2:7d:72:02:6e:54:88:d6:f6:70:23:fa:4d:a1:2e:
7c:68:36:24:1f:91:2d:23:4e:d7:fc:a7:79:90:ec:3b:d2:63:
03:aa:a7:b8:6b:57:ab:35:7e:3d:f8:1e:eb:36:10:31:28:09:
b2:19:ef:54:ee:85:b0:c1:44:b5:b3:94:c0:25:a6:a4:f9:ae:
d3:fd:ae:26:fc:2b:8a:d3:c4:da:20:7f:ee:2c:9c:6e:36:06:
a8:81:02:c2:96:fd:dc:12:f4:b0:8d:dc:00:a8:97:77:59:7e:
0f:c2:aa:cd:eb:d3:bb:be:07:49:a1:64:de:3f:0d:05:14:db:
3b:90:e0:3b:0c:7a:dd:4d:15:6b:9f:24:ff:0e:f0:a5:92:a6:
20:d4:24:45
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6SpfjOhyOpqiamFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcxNDEyMDAwMFoXDTIyMDgxOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZGIyNWE5ZWYtZmY3NC00NDE0LWEwMDYtNGIxZDYyZTE5ZTQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8iZwijoPuYubbJn0wy1oD2YWRys8zQuwbcx
/+cB43zehFviCp2kJaFs7ju0tAviRE4XV4K5+gStymSXgLPj6tr5m9hT4uUF44/D
qvbOS5gWWph+Qie0fydZw1qOODLv2k0SwNMQpgI1Qh0ZEtIiwwxQEAJLe/9v/sm3
KzcxdnqjyFW1N/qbAV4ZzN4W2swal1RDfBXtMXqOxyHBMm4Q+RcjKWT4djf0CDJE
sMLebxcLZduUPDcYMSQbEdQQxud4VGomj5yfUO9lGAoOAXaFswWxWXneExCbokVY
8h8QUHig/pMyCWsTQHqR+w52ddUYVlYoYYOWZoUAgusCHR74IQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKdsaCFoXK0gQmY9Rea4wsZ7LaujMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZTQ4ZDFmZWQtM2FmMC0z
MDY2LTlkYjctY2E5ODFjODUzZGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEuUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEABqVwua8F/dwmM7seQiRvYdH+5HvbG6M5FHcVDB6dDF7g9H/bHjBRp2eZ
7H9IQahkzqCEvexWtfEJ9hCD59ft4FJAxa8SysQvbWL6mk81kmSio99Y1n3XQZkB
4nFjYOXWsgKsJWiYhzUBK6KX1Vu5on1yAm5UiNb2cCP6TaEufGg2JB+RLSNO1/yn
eZDsO9JjA6qnuGtXqzV+Pfge6zYQMSgJshnvVO6FsMFEtbOUwCWmpPmu0/2uJvwr
itPE2iB/7iycbjYGqIECwpb93BL0sI3cAKiXd1l+D8KqzevTu74HSaFk3j8NBRTb
O5DgOwx63U0Va58k/w7wpZKmINQkRQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:24:01 2025 by rpki-client