Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7b3c955-c9d4-3a62-acf3-da4c1ea14869.roa
File: f7b3c955-c9d4-3a62-acf3-da4c1ea14869.roa (raw, json)
Hash identifier: sFWYwy4d9hXVrf3PJtt2kB5HuyLo/eij2KFBY28i6Eo=
Subject key identifier: 66:8D:B1:2F:6D:60:28:21:FE:97:30:59:ED:4B:A3:95:44:C0:A1:9C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA95B1A78A934888E6A1CB700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7b3c955-c9d4-3a62-acf3-da4c1ea14869.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 18.138.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a9:5b:1a:78:a9:34:88:8e:6a:1c:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=821511f4-3f6b-4a25-b643-e80b26848517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:36:91:87:26:9d:f0:12:d4:44:63:49:06:4b:
8e:42:fc:a9:9c:09:b7:84:b6:c3:2b:23:84:3f:b7:
a5:6f:3a:ec:56:d7:08:82:55:78:80:17:75:ca:69:
db:05:9e:45:17:7a:3a:69:49:7d:7a:2f:2f:bc:06:
5d:47:a5:ad:d3:91:8e:f4:4e:10:34:25:c1:f0:65:
ef:ff:ab:57:97:16:67:b4:99:57:4b:c9:5e:a7:87:
1f:72:12:34:28:90:fe:a4:76:39:b7:4e:b1:17:7b:
d0:5b:c3:58:fe:23:87:61:dc:ec:1f:98:85:65:d5:
45:51:d1:dc:34:14:b3:b8:c7:fc:bb:b1:05:09:25:
6b:65:70:7e:ff:f9:08:25:de:8e:48:83:96:50:d0:
d1:f8:98:cb:96:6a:00:32:6a:8a:02:d9:52:43:e6:
f3:31:cd:9a:d7:3c:8d:a7:ec:d6:cf:9f:0b:cb:a1:
38:b8:5a:4c:b1:22:97:a2:59:6e:15:4a:4d:a1:99:
7a:b4:7f:b0:79:04:d7:82:a1:36:25:89:7b:c0:61:
6a:b6:70:4b:f0:15:1e:2f:cb:54:35:fb:51:aa:2c:
36:ac:66:f4:17:45:3e:b2:c5:bb:c2:f6:22:ce:11:
4e:e8:6a:0b:03:49:86:24:41:08:ff:f2:99:0f:32:
aa:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8D:B1:2F:6D:60:28:21:FE:97:30:59:ED:4B:A3:95:44:C0:A1:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7b3c955-c9d4-3a62-acf3-da4c1ea14869.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.138.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:76:8d:6a:22:3c:b8:63:fa:fc:45:02:02:5d:1f:2d:9b:a6:
e5:a5:10:b7:21:13:3d:48:39:64:37:12:ed:b8:46:f8:fd:a3:
6f:84:4d:7e:94:ee:32:a5:44:18:a4:a7:4f:70:3f:04:57:a6:
31:d0:43:0b:8e:e2:cd:e7:14:8b:47:60:66:e1:28:e3:5e:ee:
df:c2:5f:45:18:ed:05:5a:03:ca:77:dd:c2:94:f4:82:c4:49:
51:42:59:36:e4:9d:9a:84:d3:28:0e:e8:fb:75:0f:4c:42:00:
ed:40:47:cd:da:f0:df:4f:22:c3:16:66:e4:f3:6d:ca:7a:a0:
07:6c:ff:de:dd:96:8d:77:30:4c:c3:f9:45:3b:54:a1:0e:76:
6d:b8:5e:a9:37:f9:cb:ac:1d:68:4a:da:c0:3b:f0:c1:28:0c:
8c:7c:6f:e1:b4:92:38:ed:ae:71:b4:c8:dc:cd:b0:1b:6c:5d:
75:fb:e6:89:8c:71:e1:bb:e6:12:0c:b9:28:eb:02:27:83:90:
da:49:a5:c6:8b:c3:81:0c:94:0a:09:94:36:9f:1a:e2:2c:fc:
89:de:82:cd:cb:cf:fe:0a:a9:61:c3:33:1f:0e:9c:3d:11:8d:
81:77:63:36:a3:3b:30:9d:16:fa:ff:45:51:6c:5f:3e:8b:22:
f1:8a:57:fa
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+pWxp4qTSIjmoctwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAyMjEyMDAwMFoXDTIyMTEyNzA1MDAwMFowLzEtMCsGA1UEAxMk
ODIxNTExZjQtM2Y2Yi00YTI1LWI2NDMtZTgwYjI2ODQ4NTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjaRhyad8BLURGNJBkuOQvypnAm3hLbDKyOE
P7elbzrsVtcIglV4gBd1ymnbBZ5FF3o6aUl9ei8vvAZdR6Wt05GO9E4QNCXB8GXv
/6tXlxZntJlXS8lep4cfchI0KJD+pHY5t06xF3vQW8NY/iOHYdzsH5iFZdVFUdHc
NBSzuMf8u7EFCSVrZXB+//kIJd6OSIOWUNDR+JjLlmoAMmqKAtlSQ+bzMc2a1zyN
p+zWz58Ly6E4uFpMsSKXolluFUpNoZl6tH+weQTXgqE2JYl7wGFqtnBL8BUeL8tU
NftRqiw2rGb0F0U+ssW7wvYizhFO6GoLA0mGJEEI//KZDzKqYQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGaNsS9tYCgh/pcwWe1Lo5VEwKGcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZjdiM2M5NTUtYzlkNC0z
YTYyLWFjZjMtZGE0YzFlYTE0ODY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEoowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAL3aNaiI8uGP6/EUCAl0fLZum5aUQtyETPUg5ZDcS7bhG+P2jb4RNfpTu
MqVEGKSnT3A/BFemMdBDC47izecUi0dgZuEo417u38JfRRjtBVoDynfdwpT0gsRJ
UUJZNuSdmoTTKA7o+3UPTEIA7UBHzdrw308iwxZm5PNtynqgB2z/3t2WjXcwTMP5
RTtUoQ52bbheqTf5y6wdaErawDvwwSgMjHxv4bSSOO2ucbTI3M2wG2xddfvmiYxx
4bvmEgy5KOsCJ4OQ2kmlxovDgQyUCgmUNp8a4iz8id6CzcvP/gqpYcMzHw6cPRGN
gXdjNqM7MJ0W+v9FUWxfPosi8YpX+g==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:59:24 2025 by rpki-client