Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e524a737-397d-327d-8567-d97a62e84ffd.roa
File: e524a737-397d-327d-8567-d97a62e84ffd.roa (raw, json)
Hash identifier: dxdTRupgWfSH6lCuwRE7JrUiQoy/GbqOuG1+jFCfxxo=
Subject key identifier: C8:FE:10:B4:92:2B:60:F7:FB:E5:94:04:A3:F9:90:EC:8A:F4:B8:AC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F337E4861B20CC706421D0D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e524a737-397d-327d-8567-d97a62e84ffd.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.148.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:33:7e:48:61:b2:0c:c7:06:42:1d:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=0ec54541-6cc1-496c-a94f-61c6cf5f116a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bb:04:73:b2:20:f4:9c:5f:44:89:a9:c0:09:
c5:e5:97:64:28:2f:75:33:85:7f:d9:fa:e6:8d:a2:
fe:4e:38:a4:d7:cc:41:a1:32:fb:73:2f:04:b5:1e:
4e:18:6d:70:dc:a1:39:f5:aa:df:a6:e0:5c:5c:a3:
c9:9f:2f:c1:8e:55:89:f8:9c:09:52:43:e9:46:84:
3d:d8:e6:df:bd:e2:da:a1:10:84:b1:97:68:42:03:
5f:e2:f0:5d:a7:03:e0:60:c8:1e:ac:cd:c4:06:2d:
a0:cf:e0:5c:67:b0:4f:07:dd:c4:a6:7f:82:e9:b1:
9c:08:e8:7d:c9:b2:94:ac:37:2b:ca:d2:a1:75:16:
70:f2:06:d4:14:1a:a8:0f:df:be:f8:04:6c:0c:4e:
3c:69:a5:44:7c:86:c0:a4:d7:a4:21:35:7d:f8:6b:
33:20:6d:cb:fe:b2:5d:72:2c:b0:a7:dc:86:24:fc:
99:78:9c:fc:23:f4:e3:7d:e8:77:7f:ce:4f:92:ba:
c4:7a:0e:9e:62:a7:6b:87:2f:cd:c6:62:78:b4:bd:
ff:00:15:43:d3:c2:e7:7d:ab:ae:7a:4c:22:86:71:
19:7d:76:dc:97:57:45:a7:f3:1a:c1:d0:15:7d:ac:
7d:cf:19:c2:79:23:0f:95:e7:25:16:5f:4e:64:db:
28:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FE:10:B4:92:2B:60:F7:FB:E5:94:04:A3:F9:90:EC:8A:F4:B8:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e524a737-397d-327d-8567-d97a62e84ffd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.148.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:89:2f:a0:98:49:b3:f9:70:6e:d8:0f:66:e7:be:c2:ab:2f:
6b:f1:33:8d:18:93:07:2f:9a:23:64:a8:19:b8:0a:fc:b0:25:
17:79:ec:e7:0a:54:de:7d:d4:3e:24:1f:5e:4a:26:1c:95:c1:
15:e9:c9:b0:7f:57:cc:9d:b2:da:bb:33:49:83:85:e3:56:c0:
de:c6:c3:12:60:de:96:c8:9a:5b:f3:68:b1:c9:bd:6b:0e:da:
2b:07:73:b8:c1:3d:c4:52:ed:59:16:88:00:2e:54:bc:bd:5a:
a6:6d:ab:a2:07:27:c8:49:5f:05:5e:57:7c:a7:13:55:c8:33:
ad:f8:57:79:a3:f2:23:e5:fc:56:b1:22:03:68:19:e1:2e:c8:
14:07:65:94:db:a8:78:c3:3d:05:f9:f2:61:67:bd:9d:42:a5:
34:00:2f:07:52:0b:04:c3:52:20:18:24:21:5a:8a:b3:ac:e9:
c2:48:25:7b:9d:fd:4c:94:f8:bf:56:50:dd:01:73:e8:30:43:
7a:12:fc:15:47:5b:5b:32:a4:10:6d:e4:1e:33:9c:d8:a4:cf:
49:48:f1:40:f5:fd:21:21:33:81:e1:68:6c:3d:46:49:85:0a:
6e:d7:2c:ad:48:83:8a:db:ed:1d:0c:f6:33:d9:95:41:1c:16:
bc:6d:0b:2c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8zfkhhsgzHBkIdDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkwOTEyMDAwMFoXDTIyMTAxNTA0MDAwMFowLzEtMCsGA1UEAxMk
MGVjNTQ1NDEtNmNjMS00OTZjLWE5NGYtNjFjNmNmNWYxMTZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLsEc7Ig9JxfRImpwAnF5ZdkKC91M4V/2frm
jaL+Tjik18xBoTL7cy8EtR5OGG1w3KE59arfpuBcXKPJny/BjlWJ+JwJUkPpRoQ9
2ObfveLaoRCEsZdoQgNf4vBdpwPgYMgerM3EBi2gz+BcZ7BPB93Epn+C6bGcCOh9
ybKUrDcrytKhdRZw8gbUFBqoD9+++ARsDE48aaVEfIbApNekITV9+GszIG3L/rJd
ciywp9yGJPyZeJz8I/Tjfeh3f85PkrrEeg6eYqdrhy/NxmJ4tL3/ABVD08Lnfauu
ekwihnEZfXbcl1dFp/MawdAVfax9zxnCeSMPleclFl9OZNsoJQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMj+ELSSK2D3++WUBKP5kOyK9LisMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZTUyNGE3MzctMzk3ZC0z
MjdkLTg1NjctZDk3YTYyZTg0ZmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEpQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAU4kvoJhJs/lwbtgPZue+wqsva/EzjRiTBy+aI2SoGbgK/LAlF3ns5wpU
3n3UPiQfXkomHJXBFenJsH9XzJ2y2rszSYOF41bA3sbDEmDelsiaW/Noscm9aw7a
KwdzuME9xFLtWRaIAC5UvL1apm2rogcnyElfBV5XfKcTVcgzrfhXeaPyI+X8VrEi
A2gZ4S7IFAdllNuoeMM9BfnyYWe9nUKlNAAvB1ILBMNSIBgkIVqKs6zpwkgle539
TJT4v1ZQ3QFz6DBDehL8FUdbWzKkEG3kHjOc2KTPSUjxQPX9ISEzgeFobD1GSYUK
btcsrUiDitvtHQz2M9mVQRwWvG0LLA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:21:17 2025 by rpki-client