Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f72d12a2-85e7-370d-b654-2e5eeb1cb888.roa
File: f72d12a2-85e7-370d-b654-2e5eeb1cb888.roa (raw, json)
Hash identifier: SSh4i2IpIKoV1CgtM/FB6ggjEcs36C7qCJT/ZT1SDEs=
Subject key identifier: 43:78:7D:4C:C4:53:B4:DE:A4:9D:9F:03:E4:AD:17:CA:38:4C:A9:97
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858404682191ED84EE7689B035D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f72d12a2-85e7-370d-b654-2e5eeb1cb888.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.54.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:46:82:19:1e:d8:4e:e7:68:9b:03:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=1e228d82-9795-4856-9e42-4ebe4793e686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:29:a9:eb:76:72:ab:44:63:8f:8b:b9:b2:7a:
e5:ba:47:55:a2:7e:02:4d:e4:b1:aa:bc:2e:cb:09:
ee:ee:fe:20:99:6f:69:64:77:9e:8d:74:4c:02:13:
1c:33:b5:d7:05:32:9f:b4:de:3e:e3:bf:ac:f0:44:
e4:0c:5d:1b:bf:1b:f3:aa:e9:68:71:d0:6b:41:14:
0a:0c:af:3f:e1:2f:10:d9:7e:f6:d6:50:8e:14:18:
3d:70:c3:9d:b4:0d:67:88:c0:ef:81:57:a1:f3:45:
5a:b1:27:d4:e8:70:85:7e:8a:50:40:51:e6:12:5a:
3f:db:25:d2:5a:59:34:a4:24:1a:52:d0:e8:82:6f:
6e:92:0c:18:bc:c2:b1:f7:c5:f0:eb:83:0f:3e:fa:
69:6c:4a:9b:97:09:0c:4f:17:6b:04:fc:c1:db:25:
7d:9f:8b:d4:1b:48:7e:28:a8:41:c3:75:a5:a9:1a:
1b:54:16:32:a4:4e:68:e3:8b:81:60:fe:be:30:74:
4b:a9:68:86:e6:8e:67:7a:0a:58:b2:09:41:af:da:
95:05:d5:ce:36:86:25:ab:d8:a3:c8:90:ca:8f:78:
13:f5:fc:bb:21:c1:bf:79:2d:57:43:c1:a5:5c:20:
b5:69:c8:1b:52:12:35:40:c0:45:b7:3c:db:4a:d0:
21:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:78:7D:4C:C4:53:B4:DE:A4:9D:9F:03:E4:AD:17:CA:38:4C:A9:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f72d12a2-85e7-370d-b654-2e5eeb1cb888.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.54.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:17:f6:41:8f:81:61:e5:3e:30:2d:6d:3c:54:5e:40:bb:c1:
2b:9c:d5:22:28:7e:8d:61:2d:0a:1b:35:80:67:ed:80:ef:32:
a3:5d:ab:96:22:c0:2f:c2:cf:1c:91:5e:7d:3f:00:71:4a:04:
53:d6:8b:31:72:09:37:56:81:ab:0b:9a:68:26:c8:38:c2:2f:
31:0a:aa:29:a3:9b:b8:f1:03:93:f5:9e:9f:98:d1:cc:90:92:
00:34:60:b6:47:c6:5c:56:08:e1:ac:68:a5:84:cf:98:e5:21:
87:0b:9d:82:9c:e9:b9:62:15:b4:91:ba:8d:21:2a:80:f8:17:
e1:01:7e:a2:0a:c2:69:96:48:29:1f:bc:f5:46:05:f5:71:9a:
99:22:72:a0:d6:c5:8b:af:6c:6a:f7:d5:bf:2b:c8:59:d3:9f:
7f:41:72:6b:b3:e1:93:27:4f:64:4e:77:84:ca:8a:ba:29:ec:
06:d1:34:71:14:69:97:0f:4b:a7:7d:d3:8e:98:9d:76:67:4b:
dd:a6:62:37:2c:39:53:94:f0:ad:34:b4:9a:14:1f:16:66:e3:
aa:75:e5:ff:4a:55:04:db:1a:12:b3:a9:b4:f7:8f:67:a7:7f:
12:8a:e3:de:4c:f2:9d:48:2b:a1:5e:85:cf:cb:47:43:07:5c:
65:bd:26:fc
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBGghke2E7naJsDXYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNzEyMDAwMFoXDTIzMDEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
MWUyMjhkODItOTc5NS00ODU2LTllNDItNGViZTQ3OTNlNjg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSmp63Zyq0Rjj4u5snrlukdVon4CTeSxqrwu
ywnu7v4gmW9pZHeejXRMAhMcM7XXBTKftN4+47+s8ETkDF0bvxvzqulocdBrQRQK
DK8/4S8Q2X721lCOFBg9cMOdtA1niMDvgVeh80VasSfU6HCFfopQQFHmElo/2yXS
Wlk0pCQaUtDogm9ukgwYvMKx98Xw64MPPvppbEqblwkMTxdrBPzB2yV9n4vUG0h+
KKhBw3WlqRobVBYypE5o44uBYP6+MHRLqWiG5o5negpYsglBr9qVBdXONoYlq9ij
yJDKj3gT9fy7IcG/eS1XQ8GlXCC1acgbUhI1QMBFtzzbStAhnQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEN4fUzEU7TepJ2fA+StF8o4TKmXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZjcyZDEyYTItODVlNy0z
NzBkLWI2NTQtMmU1ZWViMWNiODg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEjYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAsRf2QY+BYeU+MC1tPFReQLvBK5zVIih+jWEtChs1gGftgO8yo12rliLA
L8LPHJFefT8AcUoEU9aLMXIJN1aBqwuaaCbIOMIvMQqqKaObuPEDk/Wen5jRzJCS
ADRgtkfGXFYI4axopYTPmOUhhwudgpzpuWIVtJG6jSEqgPgX4QF+ogrCaZZIKR+8
9UYF9XGamSJyoNbFi69savfVvyvIWdOff0Fya7PhkydPZE53hMqKuinsBtE0cRRp
lw9Lp33TjpiddmdL3aZiNyw5U5TwrTS0mhQfFmbjqnXl/0pVBNsaErOptPePZ6d/
Eorj3kzynUgroV6Fz8tHQwdcZb0m/A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:13:15 2025 by rpki-client