Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f16a4a6b-dadb-3ef2-ad6a-3f20331900a1.roa
File: f16a4a6b-dadb-3ef2-ad6a-3f20331900a1.roa (raw, json)
Hash identifier: pLaZUxcr/Qj9jPpjTfIPEUlDD1a6Y0zTtRt3R+KFzGA=
Subject key identifier: A8:1A:7D:77:B8:A9:32:03:11:D2:F0:1A:88:23:75:AD:B0:28:02:21
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D80DB44B41E035B064337A980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f16a4a6b-dadb-3ef2-ad6a-3f20331900a1.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 18.230.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:db:44:b4:1e:03:5b:06:43:37:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=512afa44-1cfa-4d62-9e48-7ea8bdaf4e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:53:47:00:45:02:81:0e:17:b3:aa:57:f9:
b9:83:9f:ee:9b:82:00:7b:28:25:b2:eb:d4:94:37:
92:7a:3a:df:d4:1c:a2:a7:a1:22:5e:95:43:00:e8:
02:29:cb:e6:0f:91:4c:d6:fb:e7:9f:50:2e:b5:ce:
f3:1d:14:e7:c3:2f:1f:ca:be:00:a3:87:16:58:52:
aa:c4:99:e9:9c:57:b9:7d:64:f8:c6:c8:ac:2a:64:
52:84:dd:2f:bc:35:68:89:62:f7:30:6f:1e:dc:17:
31:f1:b7:3d:f1:9a:8d:9f:a8:d7:c9:d9:a3:af:2a:
d9:58:a0:07:82:12:b2:6d:c7:b4:52:83:8b:4e:5e:
78:7b:6b:21:aa:73:75:98:98:3e:0c:1e:b6:84:95:
80:1d:a5:05:bf:8a:97:c1:c4:54:02:85:92:4b:2a:
47:b9:bc:7a:9c:15:3a:2f:36:69:ae:e4:cc:06:8f:
a0:d9:ee:07:a5:78:74:1e:09:14:2c:23:bf:f5:c2:
16:0b:44:22:22:5d:a0:61:57:d2:99:80:e5:48:12:
6d:04:f9:72:ea:a4:ef:2f:e1:dd:c7:3c:98:74:69:
57:64:fb:e2:20:34:20:6c:bb:62:84:f2:d0:40:69:
dd:a0:1d:e2:48:1d:86:01:5a:ef:c7:b7:35:86:db:
aa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1A:7D:77:B8:A9:32:03:11:D2:F0:1A:88:23:75:AD:B0:28:02:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f16a4a6b-dadb-3ef2-ad6a-3f20331900a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.230.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:f5:02:53:7c:33:13:4f:03:f0:f6:3c:32:e0:95:66:ca:4b:
cf:39:69:83:71:4c:79:60:3c:f1:bd:55:66:a7:24:bc:e6:26:
fd:f9:6b:aa:5f:16:22:cb:cd:ef:da:ea:aa:42:c8:36:9f:27:
74:32:0d:5d:98:6d:c9:c6:75:1b:90:ce:31:b1:4b:98:ad:fc:
f0:6d:d0:63:50:b6:6c:f3:fa:41:70:90:42:a5:89:59:45:9f:
2f:ee:ac:02:ca:86:d1:63:51:e0:e5:f2:df:21:be:1a:e9:21:
f1:6a:fc:2a:0b:ef:76:cc:28:52:50:bc:b6:a7:eb:c8:c0:e5:
99:3d:bb:7a:e6:d4:27:b7:65:f1:84:bb:a5:14:90:fd:1c:34:
23:ef:dd:2a:56:30:ff:2e:07:49:7f:13:36:40:25:87:38:ba:
49:0a:e3:18:9c:80:70:ac:49:25:a8:02:40:fa:67:71:5d:96:
87:2c:93:2d:b6:f2:16:b8:9d:a2:6b:17:07:13:00:10:d7:43:
bd:5f:52:75:84:bf:e7:6b:f4:b6:b4:b8:d6:c4:1b:e5:d7:f5:
a7:1b:89:ee:f6:73:38:94:cf:55:68:af:40:66:cb:78:2e:3b:
a4:75:df:97:2d:c6:c2:cc:67:59:9e:5b:81:15:c7:e8:a5:f7:
3a:12:c4:47
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2A20S0HgNbBkM3qYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQwODA0MDAwMFoXDTIyMDUxMzA0MDAwMFowLzEtMCsGA1UEAxMk
NTEyYWZhNDQtMWNmYS00ZDYyLTllNDgtN2VhOGJkYWY0ZTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrxTRwBFAoEOF7OqV/m5g5/um4IAeyglsuvU
lDeSejrf1Byip6EiXpVDAOgCKcvmD5FM1vvnn1Autc7zHRTnwy8fyr4Ao4cWWFKq
xJnpnFe5fWT4xsisKmRShN0vvDVoiWL3MG8e3Bcx8bc98ZqNn6jXydmjryrZWKAH
ghKybce0UoOLTl54e2shqnN1mJg+DB62hJWAHaUFv4qXwcRUAoWSSypHubx6nBU6
LzZpruTMBo+g2e4HpXh0HgkULCO/9cIWC0QiIl2gYVfSmYDlSBJtBPly6qTvL+Hd
xzyYdGlXZPviIDQgbLtihPLQQGndoB3iSB2GAVrvx7c1htuqFQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKgafXe4qTIDEdLwGogjda2wKAIhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZjE2YTRhNmItZGFkYi0z
ZWYyLWFkNmEtM2YyMDMzMTkwMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEuYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAQfUCU3wzE08D8PY8MuCVZspLzzlpg3FMeWA88b1VZqckvOYm/flrql8W
IsvN79rqqkLINp8ndDINXZhtycZ1G5DOMbFLmK388G3QY1C2bPP6QXCQQqWJWUWf
L+6sAsqG0WNR4OXy3yG+Gukh8Wr8KgvvdswoUlC8tqfryMDlmT27eubUJ7dl8YS7
pRSQ/Rw0I+/dKlYw/y4HSX8TNkAlhzi6SQrjGJyAcKxJJagCQPpncV2WhyyTLbby
FridomsXBxMAENdDvV9SdYS/52v0trS41sQb5df1pxuJ7vZzOJTPVWivQGbLeC47
pHXfly3GwsxnWZ5bgRXH6KX3OhLERw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:38:32 2025 by rpki-client