Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f8f3a4ae-bb40-3e15-8ffc-c527391658a7.roa
File: f8f3a4ae-bb40-3e15-8ffc-c527391658a7.roa (raw, json)
Hash identifier: iSZcO6dPE5iGpdB47YcpHpLM4MRXi0weAX4v2VjaGGY=
Subject key identifier: F5:2F:F0:B7:A7:69:97:49:EC:01:15:C4:BA:01:C1:71:67:28:C8:BE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D32833A5B4C678392BFC7D540
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f8f3a4ae-bb40-3e15-8ffc-c527391658a7.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.153.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:83:3a:5b:4c:67:83:92:bf:c7:d5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=12ea7e75-461b-4911-8bd4-7ce1ba2373c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:be:b2:02:4f:25:a7:ac:dd:e6:18:bd:08:
c5:46:90:69:6b:44:9c:cf:d7:dc:8b:1d:8c:9c:91:
ae:f6:d9:d8:b4:7f:5c:ba:93:c9:39:8e:cc:b9:97:
eb:a8:6b:8f:3d:c8:0d:36:f6:15:fc:27:b8:b5:ed:
54:a4:d9:00:66:1c:3a:a5:c6:f7:71:11:e8:e2:4e:
aa:53:6a:96:8f:25:20:96:9c:8f:44:6b:fe:8f:72:
61:e6:9a:f4:6f:23:16:20:6c:9a:e3:89:75:41:73:
d8:a4:f7:ed:6c:45:4a:a1:c1:4b:98:dc:a4:e7:91:
a6:7c:6f:1c:cd:61:c7:7e:ea:4b:a7:1f:14:63:60:
78:03:76:6e:66:c0:88:a5:ae:b8:3a:7c:cc:70:97:
42:84:91:20:ab:8c:fc:1a:09:ad:66:a7:42:f1:49:
f2:7f:9e:79:6c:43:d1:09:01:79:bc:42:db:ed:34:
99:48:62:2b:b5:30:0c:ed:fb:45:c4:30:74:07:61:
94:44:41:ae:a1:4b:f8:14:f7:4a:eb:da:7f:fc:8b:
c4:1b:92:52:d5:f2:56:37:e2:eb:cb:8b:78:94:b4:
bd:d0:99:3a:b5:73:a3:f3:22:a3:98:1a:c3:de:c0:
73:03:fe:ec:32:5f:90:ac:01:95:cf:80:ff:69:0b:
45:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2F:F0:B7:A7:69:97:49:EC:01:15:C4:BA:01:C1:71:67:28:C8:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f8f3a4ae-bb40-3e15-8ffc-c527391658a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.153.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:2f:32:d7:28:2f:c6:cc:70:c1:5f:62:01:f0:b8:f0:f1:1c:
4a:f8:3a:8d:42:58:6b:e4:7f:ab:6a:84:41:52:52:d8:08:df:
b5:c4:83:1d:07:79:99:c2:6d:c1:95:2b:25:91:02:9d:48:f2:
55:5d:f9:70:2c:0f:8a:3d:b3:50:9d:24:94:e9:ea:18:91:52:
ab:f4:2f:1f:c4:9c:a7:e8:30:4c:cd:82:13:21:4e:39:d2:07:
0d:45:eb:db:3b:e8:2c:da:0b:7e:fb:0c:7e:c0:93:82:6d:a5:
59:63:1e:39:e8:2f:44:1c:ed:0f:00:ca:c3:33:10:1d:49:1c:
76:cc:cb:c2:4c:03:48:d0:78:4b:bb:aa:c9:8f:a8:67:b8:e0:
5a:17:b0:a7:ec:2b:f8:57:15:3b:94:9b:17:94:dd:30:a6:a1:
b3:0f:32:3c:e9:ca:a8:72:dc:4c:eb:ef:4b:4d:51:a0:f1:a3:
f9:c9:dc:63:4d:51:29:8c:89:a7:3e:cb:c4:2a:87:fa:72:b2:
2a:68:ce:61:52:f6:39:45:e2:cd:3d:e0:7b:eb:e8:98:9d:a2:
d9:4c:ea:8f:ef:38:f9:e8:52:f8:33:8c:e8:18:10:43:67:ea:
2c:68:97:b8:20:73:a8:f3:d8:1c:31:2c:08:99:ee:21:ff:d5:
16:5c:4d:55
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0ygzpbTGeDkr/H1UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
MTJlYTdlNzUtNDYxYi00OTExLThiZDQtN2NlMWJhMjM3M2M5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAy+sgJPJaes3eYYvQjFRpBpa0Scz9fcix2M
nJGu9tnYtH9cupPJOY7MuZfrqGuPPcgNNvYV/Ce4te1UpNkAZhw6pcb3cRHo4k6q
U2qWjyUglpyPRGv+j3Jh5pr0byMWIGya44l1QXPYpPftbEVKocFLmNyk55GmfG8c
zWHHfupLpx8UY2B4A3ZuZsCIpa64OnzMcJdChJEgq4z8GgmtZqdC8Unyf555bEPR
CQF5vELb7TSZSGIrtTAM7ftFxDB0B2GUREGuoUv4FPdK69p//IvEG5JS1fJWN+Lr
y4t4lLS90Jk6tXOj8yKjmBrD3sBzA/7sMl+QrAGVz4D/aQtFnQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPUv8LenaZdJ7AEVxLoBwXFnKMi+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZjhmM2E0YWUtYmI0MC0z
ZTE1LThmZmMtYzUyNzM5MTY1OGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEpkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAhC8y1ygvxsxwwV9iAfC48PEcSvg6jUJYa+R/q2qEQVJS2AjftcSDHQd5
mcJtwZUrJZECnUjyVV35cCwPij2zUJ0klOnqGJFSq/QvH8Scp+gwTM2CEyFOOdIH
DUXr2zvoLNoLfvsMfsCTgm2lWWMeOegvRBztDwDKwzMQHUkcdszLwkwDSNB4S7uq
yY+oZ7jgWhewp+wr+FcVO5SbF5TdMKahsw8yPOnKqHLcTOvvS01RoPGj+cncY01R
KYyJpz7LxCqH+nKyKmjOYVL2OUXizT3ge+vomJ2i2Uzqj+84+ehS+DOM6BgQQ2fq
LGiXuCBzqPPYHDEsCJnuIf/VFlxNVQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:43:01 2025 by rpki-client