Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/006bea3d-98e2-3ebc-b215-d809734f5f23.roa
File: 006bea3d-98e2-3ebc-b215-d809734f5f23.roa (raw, json)
Hash identifier: /5K7LBP/0YQFtXrbsg9A8tZWHqj4sWSSxPQHiCtaaHM=
Subject key identifier: 1A:4C:9E:5B:7E:3A:56:82:1B:4A:A1:BB:16:D1:27:D6:E7:43:48:BD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F4FFDFA65C1374CF0C16B3400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/006bea3d-98e2-3ebc-b215-d809734f5f23.roa
Signing time: Tue 20 Sep 2022 12:00:00 +0000
ROA not before: Tue 20 Sep 2022 12:00:00 +0000
ROA not after: Wed 26 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 146.65.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:4f:fd:fa:65:c1:37:4c:f0:c1:6b:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 20 12:00:00 2022 GMT
Not After : Oct 26 04:00:00 2022 GMT
Subject: CN=cb784c7c-8718-4022-9ace-a2956ee13347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:48:e0:70:98:32:95:85:cc:7b:03:df:95:1a:
42:e1:04:ec:8a:eb:b4:1c:65:1e:dd:06:2f:20:eb:
1d:d7:d2:29:4a:ea:e4:8e:e6:74:1c:2c:a8:00:3e:
1f:6c:0d:a9:ca:c2:44:cf:39:f9:cc:67:32:1a:73:
07:9e:45:95:64:16:0e:55:24:3c:c4:a2:4d:9b:ec:
30:ba:63:0f:4b:77:1f:47:1e:2a:93:6f:11:b4:71:
c4:01:39:9a:6e:63:dd:4e:20:11:3f:ed:67:27:64:
70:7c:97:11:5a:54:b7:59:11:ed:d3:9a:e4:58:52:
23:2a:95:5a:a4:8d:4e:e6:ec:df:6c:b3:7c:d0:96:
00:35:03:87:5c:1a:0b:14:14:61:7b:99:6a:06:46:
2b:48:f1:8d:ff:29:58:c5:a0:28:fd:2e:3d:fd:63:
b2:ed:c7:b8:36:52:cd:5e:72:81:d2:af:36:c7:62:
e5:51:e1:49:21:1c:d8:0e:91:81:9a:4d:33:4f:39:
c3:e6:58:67:4c:08:5b:ca:e4:6b:f2:d6:88:a0:af:
6f:c8:6a:5c:be:b1:6d:13:68:d5:ef:f1:26:20:04:
ed:f8:44:f0:b7:d4:cb:05:c4:1a:3f:32:b7:bb:e9:
b3:23:94:19:13:f8:dd:df:2d:4a:fa:14:7f:9d:5a:
1c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4C:9E:5B:7E:3A:56:82:1B:4A:A1:BB:16:D1:27:D6:E7:43:48:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/006bea3d-98e2-3ebc-b215-d809734f5f23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
146.65.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:da:c1:71:e7:b6:43:5d:0c:ed:59:db:d1:0f:32:42:61:46:
0e:57:26:9c:85:c3:1e:b7:08:af:ca:45:04:0d:c2:0b:48:25:
a9:98:10:0b:82:8e:dc:1d:a4:67:9a:73:30:ee:c2:0d:13:7c:
73:11:18:30:97:1b:9b:aa:5f:b4:a4:a5:48:ac:06:86:08:78:
55:0e:3d:e1:f6:6a:b1:e2:52:08:fd:33:6a:07:f8:6e:5a:49:
56:62:0f:34:c8:71:ce:9f:69:57:88:74:e7:1e:16:dc:43:92:
06:56:c6:48:59:c4:59:e1:eb:da:f7:fd:0a:c2:fb:4f:e7:51:
a7:1d:8b:45:a8:af:4e:3b:a9:70:18:e7:0e:88:be:f3:9d:0e:
44:d2:c7:ae:0b:4b:cc:9f:8d:a6:f9:d5:b3:85:de:c1:61:e1:
3b:f2:e7:12:e5:59:76:19:ec:66:0b:57:ed:4b:80:44:cd:66:
2a:76:fe:de:41:df:75:fe:d0:42:53:de:a5:b5:3a:af:ae:eb:
fc:cb:08:fe:a3:c6:dc:18:8f:b4:cc:22:a6:28:76:6c:3e:8b:
f9:a8:15:f3:00:1c:b6:46:58:48:ab:f6:d6:b6:ed:86:db:43:
f8:25:eb:e0:b9:b9:f2:25:ff:40:26:0f:47:d9:8b:56:25:ac:
38:fe:43:87
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9P/fplwTdM8MFrNAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkyMDEyMDAwMFoXDTIyMTAyNjA0MDAwMFowLzEtMCsGA1UEAxMk
Y2I3ODRjN2MtODcxOC00MDIyLTlhY2UtYTI5NTZlZTEzMzQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkjgcJgylYXMewPflRpC4QTsiuu0HGUe3QYv
IOsd19IpSurkjuZ0HCyoAD4fbA2pysJEzzn5zGcyGnMHnkWVZBYOVSQ8xKJNm+ww
umMPS3cfRx4qk28RtHHEATmabmPdTiARP+1nJ2RwfJcRWlS3WRHt05rkWFIjKpVa
pI1O5uzfbLN80JYANQOHXBoLFBRhe5lqBkYrSPGN/ylYxaAo/S49/WOy7ce4NlLN
XnKB0q82x2LlUeFJIRzYDpGBmk0zTznD5lhnTAhbyuRr8taIoK9vyGpcvrFtE2jV
7/EmIATt+ETwt9TLBcQaPzK3u+mzI5QZE/jd3y1K+hR/nVoceQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBpMnlt+OlaCG0qhuxbRJ9bnQ0i9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMDA2YmVhM2QtOThlMi0z
ZWJjLWIyMTUtZDgwOTczNGY1ZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkkEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEARNrBcee2Q10M7Vnb0Q8yQmFGDlcmnIXDHrcIr8pFBA3CC0glqZgQC4KO
3B2kZ5pzMO7CDRN8cxEYMJcbm6pftKSlSKwGhgh4VQ494fZqseJSCP0zagf4blpJ
VmIPNMhxzp9pV4h05x4W3EOSBlbGSFnEWeHr2vf9CsL7T+dRpx2LRaivTjupcBjn
Doi+850ORNLHrgtLzJ+NpvnVs4XewWHhO/LnEuVZdhnsZgtX7UuARM1mKnb+3kHf
df7QQlPepbU6r67r/MsI/qPG3BiPtMwipih2bD6L+agV8wActkZYSKv21rbthttD
+CXr4Lm58iX/QCYPR9mLViWsOP5Dhw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:26:53 2025 by rpki-client