Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ed0e979a-d7d5-3258-8080-9b3531de3f0f.roa
File: ed0e979a-d7d5-3258-8080-9b3531de3f0f.roa (raw, json)
Hash identifier: 2pKhoNDZdVzXoX+f37+KcDyMxKMWAYq6TcKzrPiIIso=
Subject key identifier: A6:09:AA:7E:5C:6E:44:F3:BA:FD:F8:6F:D1:F7:52:D7:21:C9:D5:E7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6F1031BCACC8E8E697DCA600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ed0e979a-d7d5-3258-8080-9b3531de3f0f.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:10:31:bc:ac:c8:e8:e6:97:dc:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=0da7cbea-3d06-4143-80c0-21bd4a4856bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:31:d4:1b:90:44:1c:a4:03:66:bd:5b:e4:bc:
29:c9:96:bc:6a:65:b3:60:5c:44:5c:7c:2c:c3:87:
d9:16:d8:33:4f:00:38:d2:3d:a7:e5:e9:ad:e1:61:
7b:83:64:61:b8:4f:92:d4:d2:3a:ff:bf:7c:98:8a:
cb:24:c9:99:ec:be:88:55:12:1b:fa:32:17:d2:19:
8d:0a:a0:09:58:83:5b:13:12:0b:41:5e:e0:88:1d:
5c:cf:81:54:3d:38:d8:e8:9d:cd:38:cb:f1:0d:07:
85:e1:21:56:3e:69:fc:49:2a:8a:fc:1b:3d:78:42:
5a:9f:b7:d9:52:1b:91:29:eb:90:b1:43:2c:75:c5:
ff:bf:1f:8a:31:aa:cb:39:fd:e1:1e:17:7f:cd:77:
66:71:bb:16:f8:f6:c8:e6:87:8f:59:2b:f8:49:0d:
05:ee:bb:e0:07:53:c0:05:3d:e2:b7:a4:f6:10:af:
34:63:7f:79:f6:a2:a2:0e:60:c5:19:e1:be:d9:ec:
e0:a2:75:39:75:d7:06:02:67:f3:92:09:a7:83:bf:
b4:7d:63:d7:7f:d7:46:ef:85:da:e5:06:6b:a3:53:
71:36:4e:d0:01:35:16:d6:38:83:48:a3:68:bb:6c:
89:00:d3:37:02:43:34:17:11:38:e4:dd:c0:20:30:
6c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:09:AA:7E:5C:6E:44:F3:BA:FD:F8:6F:D1:F7:52:D7:21:C9:D5:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ed0e979a-d7d5-3258-8080-9b3531de3f0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:f8:cf:06:df:c9:b4:de:15:7b:e6:8c:99:05:e9:dd:95:3c:
a7:2d:64:b6:9c:d9:51:43:08:f0:d1:86:05:cb:ba:f1:f4:97:
74:4a:c6:2f:9f:63:de:8d:79:86:73:a4:49:4d:aa:f7:43:a3:
96:2f:c9:36:d0:7a:1c:80:ac:30:41:71:2b:a7:bd:e7:dc:75:
b3:4f:fb:92:41:ef:7b:a9:81:54:ed:ab:bc:c4:76:45:fa:13:
54:57:ad:69:8f:92:03:8c:e2:d2:3c:f4:0d:37:f2:4e:06:69:
8b:de:93:70:c7:09:a7:56:b8:b0:04:14:ae:f7:d6:fc:40:d1:
df:54:67:e5:f5:e1:87:37:10:a5:dd:7f:60:18:9a:8f:bc:73:
87:7c:ff:51:ca:83:d1:ce:de:f7:8a:2b:7b:0a:52:5d:e6:0d:
f2:70:af:e3:79:5b:44:62:d4:15:d4:b0:5c:23:05:6d:ee:a4:
d8:6e:84:98:ea:ac:79:34:08:43:bb:f4:f5:8a:12:50:c6:4e:
d9:d6:68:5b:39:2e:61:66:52:f9:7a:fb:3e:c9:b6:c2:0a:d5:
83:7b:53:36:c5:8a:f0:80:33:12:48:99:65:d5:2a:eb:70:4e:
09:82:a9:6d:01:71:30:23:fc:9e:32:ca:51:d7:b4:dc:6a:ca:
7b:df:80:b6
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDxvEDG8rMjo5pfcpgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIxMTIzMTA1MDAwMFoXDTIyMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
MGRhN2NiZWEtM2QwNi00MTQzLTgwYzAtMjFiZDRhNDg1NmJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDHUG5BEHKQDZr1b5LwpyZa8amWzYFxEXHws
w4fZFtgzTwA40j2n5emt4WF7g2RhuE+S1NI6/798mIrLJMmZ7L6IVRIb+jIX0hmN
CqAJWINbExILQV7giB1cz4FUPTjY6J3NOMvxDQeF4SFWPmn8SSqK/Bs9eEJan7fZ
UhuRKeuQsUMsdcX/vx+KMarLOf3hHhd/zXdmcbsW+PbI5oePWSv4SQ0F7rvgB1PA
BT3it6T2EK80Y3959qKiDmDFGeG+2ezgonU5ddcGAmfzkgmng7+0fWPXf9dG74Xa
5QZro1NxNk7QATUW1jiDSKNou2yJANM3AkM0FxE45N3AIDBsIQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKYJqn5cbkTzuv34b9H3UtchydXnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZWQwZTk3OWEtZDdkNS0z
MjU4LTgwODAtOWIzNTMxZGUzZjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEtgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAQvjPBt/JtN4Ve+aMmQXp3ZU8py1ktpzZUUMI8NGGBcu68fSXdErGL59j
3o15hnOkSU2q90Ojli/JNtB6HICsMEFxK6e959x1s0/7kkHve6mBVO2rvMR2RfoT
VFetaY+SA4zi0jz0DTfyTgZpi96TcMcJp1a4sAQUrvfW/EDR31Rn5fXhhzcQpd1/
YBiaj7xzh3z/UcqD0c7e94orewpSXeYN8nCv43lbRGLUFdSwXCMFbe6k2G6EmOqs
eTQIQ7v09YoSUMZO2dZoWzkuYWZS+Xr7Psm2wgrVg3tTNsWK8IAzEkiZZdUq63BO
CYKpbQFxMCP8njLKUde03GrKe9+Atg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:49 2025 by rpki-client