Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f5ff5626-a983-3a26-9299-4f329088f716.roa
File: f5ff5626-a983-3a26-9299-4f329088f716.roa (raw, json)
Hash identifier: 68F9BWiyPRxBvo3nu+UTzcn9wnIJZN3lP9PDzOhrW6k=
Subject key identifier: 51:28:72:3C:FF:8B:50:07:38:E6:64:2F:D0:CA:D0:69:77:07:C9:E6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCBFDB2092FFF0508F44FC300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f5ff5626-a983-3a26-9299-4f329088f716.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.43.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cb:fd:b2:09:2f:ff:05:08:f4:4f:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=00bb0167-ab21-4ee9-b19c-5accb6385b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:2f:db:5e:89:c6:ec:11:b2:e7:d4:5d:25:
64:07:3c:68:d6:9e:bf:54:24:ab:18:8a:9a:57:89:
cd:fa:ef:51:6f:c0:01:1c:05:6c:e9:4b:39:4c:00:
22:60:d5:8f:35:4b:b6:df:e7:52:d2:98:22:ab:56:
78:06:c2:38:f3:5e:06:b5:72:12:9b:b2:40:9a:c2:
85:44:b5:cd:80:ec:1c:87:47:c8:4e:59:80:80:64:
a2:91:18:8a:9f:6d:33:86:87:df:a5:cb:54:7e:bd:
6d:52:28:77:ba:f4:b9:0a:00:2c:c7:4e:20:3f:40:
0c:3e:b8:6a:13:69:8c:4b:8a:4c:a2:8f:c1:78:5e:
90:2e:35:52:b8:3b:a1:e5:7d:76:39:50:bb:7f:3c:
ec:eb:48:23:18:ab:ec:f4:78:10:c3:8a:bf:df:f5:
f7:13:ba:a1:d8:9c:3f:49:6d:89:7e:85:f3:07:3e:
bd:77:41:9f:82:cf:df:d1:dd:40:c8:83:79:d4:43:
c5:fd:84:1a:7b:4b:db:af:1c:6e:81:7c:37:31:0f:
58:33:d9:78:ad:e0:83:08:24:80:48:71:81:07:d7:
49:63:c8:dc:73:8d:07:12:3c:81:ce:78:e6:f8:65:
1e:01:14:e9:5a:29:1a:19:20:86:9c:73:1f:1c:9a:
48:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:28:72:3C:FF:8B:50:07:38:E6:64:2F:D0:CA:D0:69:77:07:C9:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f5ff5626-a983-3a26-9299-4f329088f716.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.43.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:e5:e6:40:e3:18:2d:7e:12:89:07:9c:1d:48:3f:63:7b:8b:
df:34:65:2f:81:44:e2:f0:44:26:76:dc:c0:13:d4:2e:57:48:
54:3f:18:43:28:5c:83:0d:07:62:39:f3:55:48:7d:01:11:66:
68:a6:35:ff:36:38:7a:94:03:a9:8a:84:b0:e2:09:20:c5:f6:
25:26:03:cb:79:83:dd:37:d8:b9:f0:63:f9:45:5d:45:70:4b:
bc:3f:ab:c6:36:f8:04:39:f9:32:7e:78:05:28:a5:94:e7:6f:
ff:6e:78:d7:8a:a0:a2:4a:53:6e:10:41:f6:e1:1a:a5:59:86:
65:68:79:01:b6:de:69:8e:c8:ae:2a:f9:76:00:39:80:0f:e5:
0b:3e:e8:5c:1b:9d:9b:0b:cf:68:cc:c2:a9:21:9b:a8:54:de:
fd:a7:6d:fc:a4:86:ff:fa:f7:22:9e:15:25:fd:06:f3:64:d1:
76:d9:a7:05:ae:12:48:8c:f0:70:44:2c:b4:78:e7:d3:dd:09:
ad:5b:ba:c9:0c:5d:d0:3c:13:af:a8:1f:3f:d3:bc:93:be:c5:
f2:52:d3:a6:ba:60:92:cd:64:c9:49:ba:ed:ff:d3:79:82:30:
fb:5e:38:50:bd:90:4f:97:f0:e4:5f:31:4d:a4:87:9c:17:f9:
ea:87:e8:86
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/L/bIJL/8FCPRPwwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEwMzEyMDAwMFoXDTIyMTIwOTA1MDAwMFowLzEtMCsGA1UEAxMk
MDBiYjAxNjctYWIyMS00ZWU5LWIxOWMtNWFjY2I2Mzg1YjNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDEv216JxuwRsufUXSVkBzxo1p6/VCSrGIqa
V4nN+u9Rb8ABHAVs6Us5TAAiYNWPNUu23+dS0pgiq1Z4BsI4814GtXISm7JAmsKF
RLXNgOwch0fITlmAgGSikRiKn20zhoffpctUfr1tUih3uvS5CgAsx04gP0AMPrhq
E2mMS4pMoo/BeF6QLjVSuDuh5X12OVC7fzzs60gjGKvs9HgQw4q/3/X3E7qh2Jw/
SW2JfoXzBz69d0Gfgs/f0d1AyIN51EPF/YQae0vbrxxugXw3MQ9YM9l4reCDCCSA
SHGBB9dJY8jcc40HEjyBznjm+GUeARTpWikaGSCGnHMfHJpINwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFEocjz/i1AHOOZkL9DK0Gl3B8nmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZjVmZjU2MjYtYTk4My0z
YTI2LTkyOTktNGYzMjkwODhmNzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEiswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAUOXmQOMYLX4SiQecHUg/Y3uL3zRlL4FE4vBEJnbcwBPULldIVD8YQyhc
gw0HYjnzVUh9ARFmaKY1/zY4epQDqYqEsOIJIMX2JSYDy3mD3TfYufBj+UVdRXBL
vD+rxjb4BDn5Mn54BSillOdv/25414qgokpTbhBB9uEapVmGZWh5AbbeaY7Irir5
dgA5gA/lCz7oXBudmwvPaMzCqSGbqFTe/adt/KSG//r3Ip4VJf0G82TRdtmnBa4S
SIzwcEQstHjn090JrVu6yQxd0DwTr6gfP9O8k77F8lLTprpgks1kyUm67f/TeYIw
+144UL2QT5fw5F8xTaSHnBf56ofohg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:50:17 2025 by rpki-client