Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a23f516-cbb4-3468-a0f3-289c1c4a2354.roa
File: 0a23f516-cbb4-3468-a0f3-289c1c4a2354.roa (raw, json)
Hash identifier: vcgOxZukzPnaVND9nGjs9qUZ/CkoCxWZ9oGaD02ki8A=
Subject key identifier: 1C:A4:D8:73:72:1D:29:60:8E:22:A0:4F:53:63:BB:7D:C8:48:CA:93
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858409A7DF1CAD3188E5FA50B5D40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a23f516-cbb4-3468-a0f3-289c1c4a2354.roa
Signing time: Mon 16 Jan 2023 12:00:00 +0000
ROA not before: Mon 16 Jan 2023 12:00:00 +0000
ROA not after: Tue 21 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 136.14.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9a:7d:f1:ca:d3:18:8e:5f:a5:0b:5d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 16 12:00:00 2023 GMT
Not After : Feb 21 05:00:00 2023 GMT
Subject: CN=08a95598-3c5d-46c9-af76-951e9e0dd66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:28:86:14:56:12:07:f3:48:93:ec:13:8a:8d:
97:7e:72:f6:5f:5c:4c:56:e0:13:46:6a:98:af:21:
69:ac:3a:8b:b8:1f:c2:46:3b:d9:3e:a5:90:0e:49:
2f:99:0a:41:a9:2d:fd:ea:58:23:2c:6a:e8:7c:9b:
d3:88:e1:36:08:37:3d:62:e5:1f:66:7c:39:09:4f:
07:0b:69:90:39:7c:d5:5f:41:7e:3f:4c:59:e0:c9:
a9:24:a6:44:5b:a7:5e:60:4b:74:ab:21:bd:76:3b:
b1:03:aa:de:bf:a8:7d:78:35:9e:3c:bf:6b:37:65:
54:d5:1b:f7:1f:ed:29:59:a5:37:5d:7d:66:58:3b:
60:2a:42:b6:fd:29:d2:19:6b:42:9d:18:4b:15:1e:
88:b4:c8:f8:bc:0b:e9:7a:f1:42:d5:0a:13:fd:81:
66:1a:fe:7c:47:10:f1:94:d6:e8:6f:20:a7:f3:76:
27:7d:20:16:bb:92:46:fe:6a:4f:b9:ce:5e:54:7c:
7b:4f:14:d4:1d:3e:da:25:4e:35:1d:50:3a:f7:e9:
83:8f:d8:84:11:cf:0f:3f:34:b7:4d:c4:88:d4:c0:
61:a2:07:66:4c:f7:0c:ee:0b:a8:c9:e9:16:3d:8a:
7a:43:1c:d0:c7:a9:91:fe:43:b5:b4:c4:47:db:d5:
25:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A4:D8:73:72:1D:29:60:8E:22:A0:4F:53:63:BB:7D:C8:48:CA:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a23f516-cbb4-3468-a0f3-289c1c4a2354.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.14.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:90:0e:56:66:e4:07:0b:54:a1:1f:8a:ba:62:1f:cd:d4:be:
cd:b5:13:2d:52:13:10:b0:a0:5c:4e:f1:27:4d:8e:24:17:c1:
9b:93:6d:40:32:28:86:28:dd:9a:46:a9:ef:e7:47:56:30:2e:
1c:c1:f7:7e:c7:76:9d:5d:c3:d5:a5:69:98:81:04:8b:76:0d:
d0:d6:9f:d1:05:b2:4a:34:3e:57:e0:8f:ae:e9:97:e9:ce:3e:
11:b7:00:86:80:4e:21:15:3e:76:82:8b:57:3e:2a:e0:f8:45:
25:fd:a0:1c:78:ab:01:7a:82:d6:eb:f1:5a:df:46:fe:a5:57:
01:e9:72:ec:48:14:18:d4:f9:48:8b:a7:f7:08:42:46:10:93:
d2:58:fa:8d:de:4b:46:53:fe:76:2d:95:9b:e2:fb:ae:bb:a8:
df:98:f7:b2:b7:ad:d3:d2:7d:c4:bd:26:54:af:91:a7:84:fb:
cd:6e:62:62:1a:e1:42:8f:ee:14:50:c0:ee:d8:6b:d5:bd:65:
fd:31:45:c8:0b:cf:d0:91:97:2e:a6:1d:74:2b:22:3d:11:24:
50:af:a9:bb:71:ba:02:58:bd:1d:b3:c0:f0:ee:f8:d4:c7:85:
5d:0e:e8:a8:18:a1:8b:9d:b9:77:fe:dc:2c:1a:e8:d4:b1:c8:
1c:6e:8e:35
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECaffHK0xiOX6ULXUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExNjEyMDAwMFoXDTIzMDIyMTA1MDAwMFowLzEtMCsGA1UEAxMk
MDhhOTU1OTgtM2M1ZC00NmM5LWFmNzYtOTUxZTllMGRkNjZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SiGFFYSB/NIk+wTio2XfnL2X1xMVuATRmqY
ryFprDqLuB/CRjvZPqWQDkkvmQpBqS396lgjLGrofJvTiOE2CDc9YuUfZnw5CU8H
C2mQOXzVX0F+P0xZ4MmpJKZEW6deYEt0qyG9djuxA6rev6h9eDWePL9rN2VU1Rv3
H+0pWaU3XX1mWDtgKkK2/SnSGWtCnRhLFR6ItMj4vAvpevFC1QoT/YFmGv58RxDx
lNbobyCn83YnfSAWu5JG/mpPuc5eVHx7TxTUHT7aJU41HVA69+mDj9iEEc8PPzS3
TcSI1MBhogdmTPcM7guoyekWPYp6QxzQx6mR/kO1tMRH29Ul5wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFByk2HNyHSlgjiKgT1Nju33ISMqTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMGEyM2Y1MTYtY2JiNC0z
NDY4LWEwZjMtMjg5YzFjNGEyMzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBiA4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAg5AOVmbkBwtUoR+KumIfzdS+zbUTLVITELCgXE7xJ02OJBfBm5NtQDIo
hijdmkap7+dHVjAuHMH3fsd2nV3D1aVpmIEEi3YN0Naf0QWySjQ+V+CPrumX6c4+
EbcAhoBOIRU+doKLVz4q4PhFJf2gHHirAXqC1uvxWt9G/qVXAely7EgUGNT5SIun
9whCRhCT0lj6jd5LRlP+di2Vm+L7rruo35j3sret09J9xL0mVK+Rp4T7zW5iYhrh
Qo/uFFDA7thr1b1l/TFFyAvP0JGXLqYddCsiPREkUK+pu3G6Ali9HbPA8O741MeF
XQ7oqBihi525d/7cLBro1LHIHG6ONQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:43:02 2025 by rpki-client