Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ecd47c07-5674-3b5c-9fd1-dd68b73e8aaa.roa
File: ecd47c07-5674-3b5c-9fd1-dd68b73e8aaa.roa (raw, json)
Hash identifier: yPDi+lCwd50iocmfwQCSXc2t27iwmABij2uuWylgKnU=
Subject key identifier: E2:BB:9F:76:63:0E:9F:9A:30:9D:94:1B:A7:CF:6A:2D:AB:E4:A4:C5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858404111C0E9AE3A95CA0FA2EB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ecd47c07-5674-3b5c-9fd1-dd68b73e8aaa.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.36.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:41:11:c0:e9:ae:3a:95:ca:0f:a2:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=3dd59c13-2ecb-4967-b60b-336bd4bddb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:ff:a6:40:cc:fb:c8:dd:9e:45:4a:ef:46:
86:44:52:84:6c:a4:47:a4:78:85:77:54:c5:ea:8a:
46:d8:f5:20:32:98:cf:2e:af:ef:20:63:94:5d:fd:
91:8c:e5:f5:28:1e:dd:d6:9c:e8:52:30:97:d0:fe:
ce:1c:a6:e1:e3:39:6d:10:7c:b2:9f:a1:87:83:4d:
be:ce:3d:7b:58:b2:de:ba:1b:01:20:b9:1e:95:88:
97:0b:da:33:db:c7:98:de:5d:1d:4a:01:0b:23:01:
10:d2:5a:9f:fe:0d:09:57:e0:91:ac:c3:8b:c6:4a:
88:24:b7:17:8d:82:83:25:d1:01:bb:09:f9:ae:1b:
ea:c5:31:6e:01:0d:ef:8b:d2:4a:1c:d4:09:e1:5f:
31:64:6e:5f:c5:76:b7:42:b3:61:15:0c:36:3a:64:
ab:f4:c7:a4:81:fc:05:82:db:79:e7:b9:e2:1d:30:
58:eb:3b:d4:59:fe:3c:24:d9:83:13:4b:71:09:62:
5f:b2:17:0b:5e:51:e8:94:d2:3e:a7:9c:68:d8:dc:
f5:1a:3a:12:39:b5:30:af:34:40:6a:2e:80:e8:be:
4f:3f:4c:03:05:3a:4b:a0:95:8d:53:2b:e1:99:9c:
21:72:10:0b:72:df:2d:9c:d3:21:a4:9b:4a:db:ca:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BB:9F:76:63:0E:9F:9A:30:9D:94:1B:A7:CF:6A:2D:AB:E4:A4:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ecd47c07-5674-3b5c-9fd1-dd68b73e8aaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.36.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:f9:a6:91:20:55:62:b1:67:5d:71:c1:10:35:fd:9c:d8:25:
08:aa:39:21:ca:41:b6:ec:3a:e5:92:97:93:d4:ab:29:c9:f7:
12:86:36:54:de:da:6a:c3:35:06:29:61:b0:d7:91:05:5f:4a:
3a:70:ea:16:e7:81:26:2b:0f:36:cf:8e:c7:a8:14:c6:30:06:
cc:7c:a8:b9:fe:20:1b:2e:15:04:e5:0c:f3:cf:f1:81:b3:c6:
83:67:a1:8a:2b:01:12:e8:20:52:94:ff:c3:09:e1:fa:e4:a0:
76:3a:c7:fb:e7:47:87:11:51:5e:2e:4b:20:f8:ce:4c:06:b4:
24:03:d3:28:b3:8a:69:0f:a1:ff:d3:1a:cb:26:0c:e8:36:e2:
3f:f2:d0:a2:54:5d:7a:6c:23:33:de:f8:92:5e:2e:d1:56:f1:
77:46:9f:d4:70:c7:53:2c:33:f9:3d:14:67:50:e5:14:06:d4:
aa:52:60:6a:96:1f:a9:4f:90:a7:d0:df:6d:1c:19:24:b2:af:
25:dd:03:4b:e8:d5:fa:0f:19:91:88:51:9e:ca:c1:eb:2b:5a:
2d:f0:3e:a9:c5:4a:3c:b2:9e:5e:c9:0c:72:87:de:72:68:ec:
ac:e6:b1:68:42:8d:74:d9:69:05:05:10:8d:7a:5c:43:4f:f2:
9a:a2:0e:a8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBBEcDprjqVyg+i64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNTEyMDAwMFoXDTIzMDEyMDA1MDAwMFowLzEtMCsGA1UEAxMk
M2RkNTljMTMtMmVjYi00OTY3LWI2MGItMzM2YmQ0YmRkYjY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5b/pkDM+8jdnkVK70aGRFKEbKRHpHiFd1TF
6opG2PUgMpjPLq/vIGOUXf2RjOX1KB7d1pzoUjCX0P7OHKbh4zltEHyyn6GHg02+
zj17WLLeuhsBILkelYiXC9oz28eY3l0dSgELIwEQ0lqf/g0JV+CRrMOLxkqIJLcX
jYKDJdEBuwn5rhvqxTFuAQ3vi9JKHNQJ4V8xZG5fxXa3QrNhFQw2OmSr9MekgfwF
gtt557niHTBY6zvUWf48JNmDE0txCWJfshcLXlHolNI+p5xo2Nz1GjoSObUwrzRA
ai6A6L5PP0wDBTpLoJWNUyvhmZwhchALct8tnNMhpJtK28pOlQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOK7n3ZjDp+aMJ2UG6fPai2r5KTFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZWNkNDdjMDctNTY3NC0z
YjVjLTlmZDEtZGQ2OGI3M2U4YWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEiQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYvmmkSBVYrFnXXHBEDX9nNglCKo5IcpBtuw65ZKXk9SrKcn3EoY2VN7a
asM1BilhsNeRBV9KOnDqFueBJisPNs+Ox6gUxjAGzHyouf4gGy4VBOUM88/xgbPG
g2ehiisBEuggUpT/wwnh+uSgdjrH++dHhxFRXi5LIPjOTAa0JAPTKLOKaQ+h/9Ma
yyYM6DbiP/LQolRdemwjM974kl4u0Vbxd0af1HDHUywz+T0UZ1DlFAbUqlJgapYf
qU+Qp9DfbRwZJLKvJd0DS+jV+g8ZkYhRnsrB6ytaLfA+qcVKPLKeXskMcofecmjs
rOaxaEKNdNlpBQUQjXpcQ0/ymqIOqA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 08:11:32 2025 by rpki-client