Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e76bbdac-7cd0-3fba-8f11-b7e633049205.roa
File: e76bbdac-7cd0-3fba-8f11-b7e633049205.roa (raw, json)
Hash identifier: WCTxsh5uxcrTY1g2Jl0bFNUlHlsVndB41vwH9ppTEoY=
Subject key identifier: 31:7C:17:B1:71:B9:DD:8F:68:BA:24:75:85:42:28:53:E2:52:C6:00
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF7A448519FB0740D302D3F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e76bbdac-7cd0-3fba-8f11-b7e633049205.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.68.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f7:a4:48:51:9f:b0:74:0d:30:2d:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=4d242bec-0fe8-4e91-87b9-5382dfacce85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:75:75:56:cc:d2:0d:d5:db:c2:0f:96:bd:eb:
b6:62:f9:12:1c:1e:50:68:b9:a7:7d:06:1a:ac:ad:
96:2f:25:42:e3:d8:50:0b:44:ec:f4:9f:42:1e:d3:
a8:9a:32:87:4c:e1:fd:34:b5:6d:64:0a:5f:26:99:
d8:77:ff:e6:23:c4:c4:74:b1:42:e9:ef:b5:4e:19:
4c:d5:63:af:86:7b:b6:2b:72:f1:99:15:bf:6e:8f:
bf:f2:1a:0a:28:99:4e:14:91:c3:cd:ce:d2:a7:d9:
f0:e7:fb:43:c0:1b:1b:3f:16:51:d0:a8:39:a1:86:
13:5e:1c:c4:28:9c:7e:63:5e:b1:d3:81:67:36:cb:
c4:68:ff:46:b3:d5:c2:5e:4e:31:c8:a3:3f:2b:93:
24:16:a4:59:15:2e:a8:fc:bc:24:a5:6d:a3:cd:88:
ea:44:c2:25:8f:35:b6:14:d9:81:ae:b7:3a:b3:8f:
ca:95:23:9c:a6:50:75:a9:ec:b6:b3:8c:bb:79:38:
59:78:e1:1e:db:91:ac:47:05:f0:93:07:43:0e:ac:
fb:b5:7b:da:74:c5:44:64:29:b3:55:a8:e2:32:fc:
20:f0:c6:34:18:34:59:e3:ca:ef:39:06:8d:d2:b8:
c1:e3:22:61:fb:89:7a:39:e9:49:b2:37:1d:7f:09:
07:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7C:17:B1:71:B9:DD:8F:68:BA:24:75:85:42:28:53:E2:52:C6:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e76bbdac-7cd0-3fba-8f11-b7e633049205.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.68.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:2e:93:36:d3:11:e9:a7:c4:92:9e:18:6a:d0:d0:bc:d9:d5:
35:c8:f9:95:33:2b:0b:43:22:1b:17:4a:2b:e1:77:69:8b:59:
65:89:ed:31:39:fe:ed:be:8f:1d:99:ca:9a:36:4d:a8:35:2d:
cb:c3:c9:46:54:37:0d:85:ea:85:d2:f2:56:cb:a7:3f:e1:d0:
7a:67:99:82:6d:c9:52:c5:cf:33:7d:5c:eb:7b:47:9c:2f:33:
12:8e:92:2d:f3:74:b0:93:41:26:3d:6f:d2:44:7c:c5:f9:f9:
45:c8:9f:c7:25:2c:1c:04:3f:be:57:56:2a:f6:68:f9:d7:ba:
0f:17:7a:76:f3:53:03:71:23:93:54:bc:d6:05:ca:bb:e2:7f:
7e:bf:9a:f7:ee:32:82:b9:f7:dc:42:67:02:59:26:e0:2e:eb:
3c:58:aa:73:a0:97:cf:f9:fb:53:78:61:34:90:4b:c3:53:6a:
01:19:01:29:2c:60:38:e4:4b:1c:4b:a2:8f:7e:18:42:6a:a9:
39:8d:e1:dc:69:88:95:ee:8e:e7:72:73:31:1f:95:69:df:8f:
03:9c:42:58:b2:83:0e:e0:d9:07:7e:e7:a3:13:9c:1d:af:14:
1a:18:53:56:e8:88:1c:ae:20:6b:f2:3b:d8:46:15:a9:cf:49:
e0:be:12:90
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/3pEhRn7B0DTAtP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTExOTEyMDAwMFoXDTIyMTIyNTA1MDAwMFowLzEtMCsGA1UEAxMk
NGQyNDJiZWMtMGZlOC00ZTkxLTg3YjktNTM4MmRmYWNjZTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXV1VszSDdXbwg+Wveu2YvkSHB5QaLmnfQYa
rK2WLyVC49hQC0Ts9J9CHtOomjKHTOH9NLVtZApfJpnYd//mI8TEdLFC6e+1ThlM
1WOvhnu2K3LxmRW/bo+/8hoKKJlOFJHDzc7Sp9nw5/tDwBsbPxZR0Kg5oYYTXhzE
KJx+Y16x04FnNsvEaP9Gs9XCXk4xyKM/K5MkFqRZFS6o/LwkpW2jzYjqRMIljzW2
FNmBrrc6s4/KlSOcplB1qey2s4y7eThZeOEe25GsRwXwkwdDDqz7tXvadMVEZCmz
VajiMvwg8MY0GDRZ48rvOQaN0rjB4yJh+4l6OelJsjcdfwkHsQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDF8F7Fxud2PaLokdYVCKFPiUsYAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZTc2YmJkYWMtN2NkMC0z
ZmJhLThmMTEtYjdlNjMzMDQ5MjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEkQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEALS6TNtMR6afEkp4YatDQvNnVNcj5lTMrC0MiGxdKK+F3aYtZZYntMTn+
7b6PHZnKmjZNqDUty8PJRlQ3DYXqhdLyVsunP+HQemeZgm3JUsXPM31c63tHnC8z
Eo6SLfN0sJNBJj1v0kR8xfn5RcifxyUsHAQ/vldWKvZo+de6Dxd6dvNTA3Ejk1S8
1gXKu+J/fr+a9+4ygrn33EJnAlkm4C7rPFiqc6CXz/n7U3hhNJBLw1NqARkBKSxg
OORLHEuij34YQmqpOY3h3GmIle6O53JzMR+Vad+PA5xCWLKDDuDZB37noxOcHa8U
GhhTVuiIHK4ga/I72EYVqc9J4L4SkA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:01:05 2025 by rpki-client