Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01ca4f55-8c90-3848-bf71-dddba273df85.roa
File: 01ca4f55-8c90-3848-bf71-dddba273df85.roa (raw, json)
Hash identifier: 9j6voa/fkwiyOgSkVdUns6VlDw95UNufLBFd+V2Zjcw=
Subject key identifier: CB:2F:7A:45:66:91:8D:AA:81:DE:91:99:35:97:21:99:C4:DE:C3:35
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E4500B1EEC6FA85EFD94A8000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01ca4f55-8c90-3848-bf71-dddba273df85.roa
Signing time: Thu 16 Jun 2022 12:00:00 +0000
ROA not before: Thu 16 Jun 2022 12:00:00 +0000
ROA not after: Fri 22 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 134.64.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:45:00:b1:ee:c6:fa:85:ef:d9:4a:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 16 12:00:00 2022 GMT
Not After : Jul 22 04:00:00 2022 GMT
Subject: CN=4e157611-6f4d-4d0b-bbc9-49ec57d8e3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:b6:4f:3a:fd:92:4c:14:c0:63:c6:24:a3:
20:8e:dd:63:c6:f7:f0:2d:74:2e:3c:92:cd:83:5e:
c3:fd:d0:d9:b4:f7:ee:eb:6f:8d:3d:7d:51:6c:cc:
b7:03:b8:75:d2:fc:31:8f:cf:38:de:af:3c:70:74:
99:a9:32:56:46:7b:f2:f4:ae:3d:29:7c:d2:58:2e:
5c:2f:be:5d:70:2c:17:c4:fb:11:d9:7a:cb:9b:a8:
b7:45:19:72:e5:1e:d4:f6:b0:6c:56:f9:75:5e:97:
ab:54:c6:62:70:0e:cc:49:de:2b:98:27:ef:36:05:
ed:96:6a:78:aa:4d:70:67:17:62:e8:9d:99:0c:ed:
bc:e9:77:9e:cd:e7:ea:bb:a3:2b:ea:65:47:51:9e:
50:73:9d:76:ab:da:4d:e6:f7:f2:c3:69:4d:ac:29:
e7:00:a6:18:69:84:94:d8:28:d6:3a:0f:04:f5:35:
34:48:f4:e6:4f:f0:ad:a9:d5:47:76:da:f8:27:a5:
fc:c7:c3:05:c9:d5:ff:8f:d8:ea:cf:67:cf:bb:ff:
72:69:29:9b:6d:34:f8:8d:17:e5:91:09:07:a9:26:
6c:e5:e9:e8:cc:e3:8f:a2:1f:73:a2:76:7c:ca:bc:
fe:3a:46:86:4a:b9:2a:cf:f3:76:cb:97:dd:9e:09:
8d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2F:7A:45:66:91:8D:AA:81:DE:91:99:35:97:21:99:C4:DE:C3:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01ca4f55-8c90-3848-bf71-dddba273df85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
134.64.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:ff:ed:c7:01:92:83:73:0b:88:6e:5a:32:29:76:82:7e:aa:
09:d5:42:d7:90:5b:85:67:37:bc:d9:de:24:f5:fa:9d:43:22:
c4:9f:2d:a5:b3:89:08:d8:db:04:a7:8e:ad:7c:22:b6:33:87:
94:b3:4d:78:ab:c5:22:92:79:e2:66:56:37:45:10:e1:04:ab:
b3:00:31:62:5f:50:6a:b3:50:fe:d2:05:8e:25:3f:75:d6:51:
dc:e1:7a:51:87:66:5e:59:39:21:ae:3d:01:c7:b1:f0:7d:68:
fd:40:70:fa:8a:97:f0:bd:74:34:36:b3:c7:55:4a:45:94:e0:
38:53:fc:e7:11:14:b3:5b:b2:92:7f:2a:9f:6c:c9:70:48:f9:
83:e8:21:ab:97:f8:48:16:bb:1f:e5:66:2e:00:b8:1d:2f:df:
5b:b2:28:72:35:6d:5f:95:f7:bb:7a:f3:b1:ef:df:bb:e5:f7:
c0:bd:74:30:03:02:96:c3:5e:6a:97:61:bf:d1:4e:18:3c:78:
af:82:7a:95:8f:62:d1:f1:42:8d:de:49:d7:8e:3d:bc:ab:eb:
0e:d0:48:bc:78:8d:e6:ff:8f:fc:28:c5:a9:22:bd:24:fe:d9:
9e:1f:20:59:c0:46:14:8a:f8:1d:b5:db:c4:db:0a:4a:de:43:
59:be:83:68
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5FALHuxvqF79lKgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYxNjEyMDAwMFoXDTIyMDcyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NGUxNTc2MTEtNmY0ZC00ZDBiLWJiYzktNDllYzU3ZDhlM2NkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKa2Tzr9kkwUwGPGJKMgjt1jxvfwLXQuPJLN
g17D/dDZtPfu62+NPX1RbMy3A7h10vwxj8843q88cHSZqTJWRnvy9K49KXzSWC5c
L75dcCwXxPsR2XrLm6i3RRly5R7U9rBsVvl1XperVMZicA7MSd4rmCfvNgXtlmp4
qk1wZxdi6J2ZDO286Xeezefqu6Mr6mVHUZ5Qc512q9pN5vfyw2lNrCnnAKYYaYSU
2CjWOg8E9TU0SPTmT/CtqdVHdtr4J6X8x8MFydX/j9jqz2fPu/9yaSmbbTT4jRfl
kQkHqSZs5enozOOPoh9zonZ8yrz+OkaGSrkqz/N2y5fdngmNUQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMsvekVmkY2qgd6RmTWXIZnE3sM1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMDFjYTRmNTUtOGM5MC0z
ODQ4LWJmNzEtZGRkYmEyNzNkZjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhkAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAtv/txwGSg3MLiG5aMil2gn6qCdVC15BbhWc3vNneJPX6nUMixJ8tpbOJ
CNjbBKeOrXwitjOHlLNNeKvFIpJ54mZWN0UQ4QSrswAxYl9QarNQ/tIFjiU/ddZR
3OF6UYdmXlk5Ia49Acex8H1o/UBw+oqX8L10NDazx1VKRZTgOFP85xEUs1uykn8q
n2zJcEj5g+ghq5f4SBa7H+VmLgC4HS/fW7IocjVtX5X3u3rzse/fu+X3wL10MAMC
lsNeapdhv9FOGDx4r4J6lY9i0fFCjd5J1449vKvrDtBIvHiN5v+P/CjFqSK9JP7Z
nh8gWcBGFIr4HbXbxNsKSt5DWb6DaA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:21 2025 by rpki-client