Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f0d11278-0cc7-377f-ae69-e00cec49b196.roa
File: f0d11278-0cc7-377f-ae69-e00cec49b196.roa (raw, json)
Hash identifier: eTA71f1RJsORpGxjTADc6JOTUageRQo+DAZEy4xXgz8=
Subject key identifier: 7F:48:59:A4:AE:5C:29:E2:FF:80:55:D5:E1:E2:CD:2F:FC:F9:34:06
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0CA4472307E4199CEFDF4A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f0d11278-0cc7-377f-ae69-e00cec49b196.roa
Signing time: Sat 27 Aug 2022 12:00:00 +0000
ROA not before: Sat 27 Aug 2022 12:00:00 +0000
ROA not after: Sun 02 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.128.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0c:a4:47:23:07:e4:19:9c:ef:df:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 27 12:00:00 2022 GMT
Not After : Oct 2 04:00:00 2022 GMT
Subject: CN=e12ea0d3-094a-4ae0-bbf9-9e8f1b58de2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:de:15:53:52:7b:c8:6e:e7:08:27:05:31:a8:
16:7b:28:61:08:e6:1e:af:b3:ac:51:1d:80:31:ed:
16:b7:d2:e2:01:c3:8b:0a:c9:ca:47:c2:48:32:a7:
96:d6:67:6a:72:36:3d:2c:c3:80:f1:e6:3f:7b:fa:
7b:3b:1d:b8:3d:d3:ad:c5:16:d4:8c:4b:91:d2:73:
7d:91:0e:91:ef:f9:2c:07:ad:9c:42:d3:45:46:5b:
e4:cf:3c:36:75:b9:e1:43:3b:ae:f9:91:72:c1:bc:
65:60:7a:ed:c1:2b:62:67:16:65:93:18:a2:89:9a:
04:48:58:46:f6:7b:9d:1b:b6:53:c4:ee:23:44:60:
a1:10:25:58:1a:5c:a6:5b:e0:25:95:65:da:83:b7:
1a:c1:bb:0c:02:e5:8e:e0:23:76:db:61:85:9e:db:
c4:62:13:85:2a:39:95:c7:dd:b7:08:52:43:35:28:
58:59:93:d9:e5:36:c9:bb:ec:0c:0c:0a:c8:9e:0a:
61:06:ae:ab:b2:fc:26:de:09:d5:32:78:b5:63:33:
9b:cc:55:ed:43:b6:d7:b3:0d:55:f3:98:0d:dd:21:
35:ff:49:ac:78:2d:a6:da:a6:b4:be:c5:5f:e5:54:
12:cf:5a:98:d4:53:31:bb:33:c6:c2:70:ec:41:3f:
61:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:48:59:A4:AE:5C:29:E2:FF:80:55:D5:E1:E2:CD:2F:FC:F9:34:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f0d11278-0cc7-377f-ae69-e00cec49b196.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.128.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:79:af:e4:cd:2e:d5:38:a4:38:26:40:b1:fc:d4:f4:75:b2:
51:78:c2:81:47:da:23:f4:a0:54:b6:fc:e1:dd:06:6b:61:9c:
7b:7b:91:87:c8:6b:38:93:84:3a:52:4f:dc:82:8f:05:4c:59:
c9:29:c3:87:6f:bf:31:d2:be:4a:88:ed:70:2a:a2:2d:44:6d:
20:79:7c:e7:2f:04:5d:ac:7f:f3:74:86:14:cf:b2:a9:40:e3:
5c:c2:ea:6d:d4:38:f1:3e:f1:ae:8c:90:de:e3:9e:b0:7f:6f:
b9:ef:f6:d2:93:bb:64:71:88:a2:5c:24:89:7a:17:d7:47:fa:
51:a1:65:fd:e5:d2:93:e8:aa:a9:ff:d7:87:2a:bd:6f:2d:cd:
34:63:12:67:01:72:86:d4:f9:81:b7:fc:3f:d4:9f:c1:a8:5c:
ec:cf:ef:e7:92:b6:70:9f:c5:38:d1:85:7b:ba:b4:2a:b0:12:
cf:56:04:a1:f9:18:58:34:f6:ed:b6:5f:81:a6:a2:6a:8a:2d:
8f:3c:73:d0:f9:c9:61:28:69:84:ff:da:e4:6f:da:8b:5e:51:
32:f4:28:5b:61:9b:06:9a:c9:9a:a2:8e:84:11:1f:4a:e1:f3:
6a:5d:36:61:41:19:39:5b:fa:b7:17:02:55:c6:16:c6:00:94:
c7:53:5e:11
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8MpEcjB+QZnO/fSoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgyNzEyMDAwMFoXDTIyMTAwMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZTEyZWEwZDMtMDk0YS00YWUwLWJiZjktOWU4ZjFiNThkZTJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit4VU1J7yG7nCCcFMagWeyhhCOYer7OsUR2A
Me0Wt9LiAcOLCsnKR8JIMqeW1mdqcjY9LMOA8eY/e/p7Ox24PdOtxRbUjEuR0nN9
kQ6R7/ksB62cQtNFRlvkzzw2dbnhQzuu+ZFywbxlYHrtwStiZxZlkxiiiZoESFhG
9nudG7ZTxO4jRGChECVYGlymW+AllWXag7cawbsMAuWO4CN222GFntvEYhOFKjmV
x923CFJDNShYWZPZ5TbJu+wMDArIngphBq6rsvwm3gnVMni1YzObzFXtQ7bXsw1V
85gN3SE1/0mseC2m2qa0vsVf5VQSz1qY1FMxuzPGwnDsQT9h/wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFH9IWaSuXCni/4BV1eHizS/8+TQGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZjBkMTEyNzgtMGNjNy0z
NzdmLWFlNjktZTAwY2VjNDliMTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEoAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAcnmv5M0u1TikOCZAsfzU9HWyUXjCgUfaI/SgVLb84d0Ga2Gce3uRh8hr
OJOEOlJP3IKPBUxZySnDh2+/MdK+SojtcCqiLURtIHl85y8EXax/83SGFM+yqUDj
XMLqbdQ48T7xroyQ3uOesH9vue/20pO7ZHGIolwkiXoX10f6UaFl/eXSk+iqqf/X
hyq9by3NNGMSZwFyhtT5gbf8P9Sfwahc7M/v55K2cJ/FONGFe7q0KrASz1YEofkY
WDT27bZfgaaiaootjzxz0PnJYShphP/a5G/ai15RMvQoW2GbBprJmqKOhBEfSuHz
al02YUEZOVv6txcCVcYWxgCUx1NeEQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 06:15:20 2025 by rpki-client