Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd986123-98d3-3c03-b287-4cb9523c379b.roa
File: fd986123-98d3-3c03-b287-4cb9523c379b.roa (raw, json)
Hash identifier: MoKINvNYlRJol/++Lj+S13KvDw9Jb9NCs++PbS9xcNw=
Subject key identifier: 59:FD:DF:73:62:76:B1:94:3B:39:7B:02:7A:42:43:EF:F8:90:A1:27
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCAEA4464D4D1702BE840E580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd986123-98d3-3c03-b287-4cb9523c379b.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.47.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ca:ea:44:64:d4:d1:70:2b:e8:40:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=b881981d-8dfc-411e-b867-abea62ec6da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fb:41:26:b4:e7:f4:6e:7a:b0:ad:a4:08:5f:
aa:7d:72:0b:8b:2c:4e:d2:ff:b8:a1:a9:f9:60:40:
f7:7f:34:42:9b:c2:e0:3a:83:7d:0a:1b:19:42:b4:
c1:99:76:5e:9c:3f:71:02:19:52:9d:3a:32:0c:d5:
8e:08:01:f4:79:6a:5d:a0:8f:31:db:14:83:40:ae:
46:9a:25:be:8d:9e:00:3a:c5:2b:4f:da:69:33:68:
a7:9a:6f:2f:31:82:75:11:c7:db:9a:20:43:94:a2:
d3:64:d1:fc:b5:7a:82:db:27:98:57:81:bd:47:b4:
0c:ee:a7:82:04:13:44:24:52:c1:09:52:1d:43:e9:
a5:3a:17:09:33:60:2f:4e:74:56:67:56:b1:ff:a0:
5d:56:35:6e:ce:f4:4a:24:4d:93:5f:d8:47:14:54:
fb:46:95:e9:0a:dd:07:67:02:e2:18:cd:83:67:92:
c9:12:ae:1c:83:75:52:fe:1b:ef:11:fd:9d:d4:54:
e5:46:aa:f1:36:99:98:94:1c:41:64:80:0e:7c:cc:
cc:67:22:81:e4:81:cc:73:5c:60:d7:18:1e:74:d8:
00:3a:fa:d7:24:8a:fc:b1:cd:67:f5:d2:ab:f4:d2:
aa:7b:23:0c:e1:2a:0b:f0:4e:42:2a:77:47:0d:e6:
ac:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FD:DF:73:62:76:B1:94:3B:39:7B:02:7A:42:43:EF:F8:90:A1:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd986123-98d3-3c03-b287-4cb9523c379b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.47.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:d7:87:5e:7d:16:e3:f1:de:ed:0d:19:72:b5:7b:0b:6a:06:
37:bb:d4:f5:04:ae:d7:f2:fe:7e:77:69:e8:68:ff:60:f5:41:
61:93:1f:66:ce:42:02:87:9c:5c:3b:76:25:af:96:19:62:9f:
28:59:02:ec:37:52:a1:9c:59:9f:2f:2b:f2:32:1b:4a:3e:3f:
c3:34:96:5f:e1:aa:eb:30:d1:71:bf:12:f0:79:7f:9e:b5:92:
92:d6:4d:31:5c:00:5a:bc:5e:0f:c3:c6:d5:fe:7a:41:b7:c8:
19:97:1b:6e:c3:48:1e:f3:92:e8:06:e7:3c:e9:2d:b1:1b:04:
3b:ca:5c:dc:d1:37:58:ea:6a:fa:56:75:92:6b:79:4a:61:82:
7a:2e:91:d2:8e:2b:25:63:3c:72:0b:bc:85:af:5c:b3:c9:f5:
5a:48:71:b7:a0:c3:23:fa:68:17:ba:7e:95:99:30:00:f8:27:
3a:7e:d9:aa:67:14:82:15:c7:96:4d:76:38:a2:50:6d:d2:4b:
7f:2f:fc:b8:7d:9a:8c:18:dd:9e:24:be:45:4b:93:d6:ce:b5:
68:9f:b6:5b:d1:b6:7e:15:62:38:ef:3c:59:e6:1c:87:f8:27:
b2:57:a2:70:b2:2e:a2:2e:bd:90:23:23:6f:7c:5f:c9:1f:32:
39:60:11:87
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/K6kRk1NFwK+hA5YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEwMzEyMDAwMFoXDTIyMTIwOTA1MDAwMFowLzEtMCsGA1UEAxMk
Yjg4MTk4MWQtOGRmYy00MTFlLWI4NjctYWJlYTYyZWM2ZGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/tBJrTn9G56sK2kCF+qfXILiyxO0v+4oan5
YED3fzRCm8LgOoN9ChsZQrTBmXZenD9xAhlSnToyDNWOCAH0eWpdoI8x2xSDQK5G
miW+jZ4AOsUrT9ppM2inmm8vMYJ1EcfbmiBDlKLTZNH8tXqC2yeYV4G9R7QM7qeC
BBNEJFLBCVIdQ+mlOhcJM2AvTnRWZ1ax/6BdVjVuzvRKJE2TX9hHFFT7RpXpCt0H
ZwLiGM2DZ5LJEq4cg3VS/hvvEf2d1FTlRqrxNpmYlBxBZIAOfMzMZyKB5IHMc1xg
1xgedNgAOvrXJIr8sc1n9dKr9NKqeyMM4SoL8E5CKndHDeas+QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFn933NidrGUOzl7AnpCQ+/4kKEnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZmQ5ODYxMjMtOThkMy0z
YzAzLWIyODctNGNiOTUyM2MzNzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEi8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAjNeHXn0W4/He7Q0ZcrV7C2oGN7vU9QSu1/L+fndp6Gj/YPVBYZMfZs5C
AoecXDt2Ja+WGWKfKFkC7DdSoZxZny8r8jIbSj4/wzSWX+Gq6zDRcb8S8Hl/nrWS
ktZNMVwAWrxeD8PG1f56QbfIGZcbbsNIHvOS6AbnPOktsRsEO8pc3NE3WOpq+lZ1
kmt5SmGCei6R0o4rJWM8cgu8ha9cs8n1Wkhxt6DDI/poF7p+lZkwAPgnOn7ZqmcU
ghXHlk12OKJQbdJLfy/8uH2ajBjdniS+RUuT1s61aJ+2W9G2fhViOO88WeYch/gn
sleicLIuoi69kCMjb3xfyR8yOWARhw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:52:48 2025 by rpki-client