Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f153aad7-db5d-3062-bf99-5642d4f33cdc.roa
File: f153aad7-db5d-3062-bf99-5642d4f33cdc.roa (raw, json)
Hash identifier: My5cHRi6vmDLdo2TDYpoRj1gBsIw5uT/KOdQEEWrrNU=
Subject key identifier: 84:37:9F:DD:D0:9D:EC:F9:45:97:71:AF:DC:18:E8:C5:CA:42:38:DD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E2248086CE985D3B801053000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f153aad7-db5d-3062-bf99-5642d4f33cdc.roa
Signing time: Sat 04 Jun 2022 12:00:00 +0000
ROA not before: Sat 04 Jun 2022 12:00:00 +0000
ROA not after: Sun 10 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.76.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:22:48:08:6c:e9:85:d3:b8:01:05:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 4 12:00:00 2022 GMT
Not After : Jul 10 04:00:00 2022 GMT
Subject: CN=e7c85d03-c3d8-429c-bdff-a1126877b993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:29:52:1e:87:cf:70:24:81:7b:1a:b0:f9:e7:
09:57:07:c5:79:cc:98:63:46:74:aa:68:da:23:7d:
1f:12:0e:7b:dc:c1:bc:11:99:f0:15:3d:80:fb:2d:
ef:30:23:6e:d8:6a:c1:87:ab:21:29:62:fa:fb:28:
9b:64:2b:b9:cc:b4:72:d0:c4:47:74:8b:f5:1c:d4:
48:11:14:c5:81:9f:13:91:ee:72:c2:65:93:62:ae:
e9:b0:5e:d8:29:1e:a1:7a:10:0f:e8:88:b1:f1:ba:
23:38:ea:3b:ce:f8:93:13:72:8f:e8:45:41:8e:a0:
a8:cf:a4:88:9b:ca:c8:3b:62:20:e4:24:4c:79:f5:
dc:3e:83:f4:26:34:2e:80:dc:58:34:ac:3d:da:7e:
a0:c5:fd:64:3b:28:84:76:93:0c:46:57:81:72:50:
bc:7e:69:47:2e:38:54:6d:86:1d:58:32:0b:a7:57:
ba:f4:34:26:81:00:f4:36:0d:e4:b4:2b:77:26:41:
13:e1:1c:16:f3:d2:d4:df:c9:6c:3b:10:a7:1b:d8:
ba:ab:0f:37:d7:cc:7f:7e:5c:42:63:47:b3:04:b7:
bb:01:b9:9b:33:7b:b6:37:f1:78:92:84:c9:9e:2c:
3d:b6:a5:9c:64:45:b6:2f:e4:c8:91:83:0a:07:48:
7a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:37:9F:DD:D0:9D:EC:F9:45:97:71:AF:DC:18:E8:C5:CA:42:38:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f153aad7-db5d-3062-bf99-5642d4f33cdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.76.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:6f:0a:04:26:e0:4f:7f:19:cf:ed:93:03:01:9b:c6:b7:a9:
c6:77:69:2e:53:22:b1:b2:23:08:5b:35:e0:f3:d4:b2:29:82:
4a:92:fa:5a:5c:f1:e2:17:15:a5:2b:f8:c5:1e:b3:68:ed:68:
a7:94:62:57:23:d6:83:66:9c:41:a6:ce:ba:00:8f:07:3e:ad:
b9:bd:06:81:f3:87:d2:86:c1:6f:d7:6f:62:3b:1b:9a:e9:37:
f9:a9:c0:7d:92:05:fb:9e:07:25:57:9e:5b:36:d2:d8:6b:d3:
ab:72:3a:be:ea:30:a6:3b:6a:08:80:c2:e6:0b:65:03:9b:e6:
5c:d8:64:1d:13:00:a0:0f:e5:65:c8:78:f9:d1:9b:58:30:f2:
45:59:fe:61:3a:2c:f8:a6:47:5d:e5:82:cc:d5:f1:a6:67:39:
e1:2c:c7:1b:96:de:64:26:4e:ec:13:b8:a7:34:75:8a:12:93:
d6:26:43:7a:6c:a6:e3:ee:c4:d4:09:78:1b:53:b4:40:72:26:
d8:f9:ef:96:e2:04:03:2f:ea:3e:7f:0f:80:55:95:68:b9:9c:
b8:08:5d:3d:13:cc:d9:32:54:36:80:b1:3d:50:6f:79:d9:fc:
56:8b:e3:0f:3e:f5:68:91:a2:66:ef:65:00:20:dc:c6:9a:5e:
25:2c:bf:86
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4iSAhs6YXTuAEFMAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYwNDEyMDAwMFoXDTIyMDcxMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZTdjODVkMDMtYzNkOC00MjljLWJkZmYtYTExMjY4NzdiOTkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkClSHofPcCSBexqw+ecJVwfFecyYY0Z0qmja
I30fEg573MG8EZnwFT2A+y3vMCNu2GrBh6shKWL6+yibZCu5zLRy0MRHdIv1HNRI
ERTFgZ8Tke5ywmWTYq7psF7YKR6hehAP6Iix8bojOOo7zviTE3KP6EVBjqCoz6SI
m8rIO2Ig5CRMefXcPoP0JjQugNxYNKw92n6gxf1kOyiEdpMMRleBclC8fmlHLjhU
bYYdWDILp1e69DQmgQD0Ng3ktCt3JkET4RwW89LU38lsOxCnG9i6qw8318x/flxC
Y0ezBLe7AbmbM3u2N/F4koTJniw9tqWcZEW2L+TIkYMKB0h6SQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIQ3n93Qnez5RZdxr9wY6MXKQjjdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZjE1M2FhZDctZGI1ZC0z
MDYyLWJmOTktNTY0MmQ0ZjMzY2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEkwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAuW8KBCbgT38Zz+2TAwGbxrepxndpLlMisbIjCFs14PPUsimCSpL6Wlzx
4hcVpSv4xR6zaO1op5RiVyPWg2acQabOugCPBz6tub0GgfOH0obBb9dvYjsbmuk3
+anAfZIF+54HJVeeWzbS2GvTq3I6vuowpjtqCIDC5gtlA5vmXNhkHRMAoA/lZch4
+dGbWDDyRVn+YTos+KZHXeWCzNXxpmc54SzHG5beZCZO7BO4pzR1ihKT1iZDemym
4+7E1Al4G1O0QHIm2PnvluIEAy/qPn8PgFWVaLmcuAhdPRPM2TJUNoCxPVBvedn8
VovjDz71aJGiZu9lACDcxppeJSy/hg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:35:41 2025 by rpki-client