Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a33ee86-7f7b-330c-ace0-81a6c6312f8d.roa
File: 0a33ee86-7f7b-330c-ace0-81a6c6312f8d.roa (raw, json)
Hash identifier: fJmvflSudETfitl9wOtQU8amsQIUjgm7/WjIdhAxIlM=
Subject key identifier: 41:D7:26:35:1D:73:EB:5D:1C:29:42:A2:1B:FD:E5:01:CA:E6:89:F6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF6CC6C6F072EF943D47DC780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a33ee86-7f7b-330c-ace0-81a6c6312f8d.roa
Signing time: Fri 18 Nov 2022 12:00:00 +0000
ROA not before: Fri 18 Nov 2022 12:00:00 +0000
ROA not after: Sat 24 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 52.144.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f6:cc:6c:6f:07:2e:f9:43:d4:7d:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 18 12:00:00 2022 GMT
Not After : Dec 24 05:00:00 2022 GMT
Subject: CN=a27b7eac-6ad6-4ec8-8abf-fd92890ad3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:aa:b5:10:22:bf:ab:f5:00:34:e8:e0:01:12:
90:92:61:46:f2:73:3d:26:0a:a4:80:0b:fd:bf:45:
97:fc:d9:cb:20:ac:28:71:86:da:7a:25:f8:d3:af:
7c:be:4e:6e:1c:43:e6:c5:b4:a7:09:28:2c:dc:2c:
c4:5b:1f:4d:d9:98:93:b8:ce:f5:6c:b4:75:ea:b2:
74:61:24:ad:26:06:37:d0:67:f6:8b:d6:3e:dc:84:
51:88:fd:21:88:9a:a1:2b:39:03:94:ac:f2:3e:fa:
83:a9:5c:25:5a:7a:34:67:49:61:24:cd:be:bb:8c:
ad:13:e9:4f:f3:f1:72:4b:d5:d3:0a:d8:fd:af:c0:
d3:51:56:86:2a:14:dc:d6:b2:b9:59:6d:38:b2:ed:
8f:33:27:7a:d0:3f:1d:92:c3:59:0e:69:4e:8b:21:
f5:50:95:57:a0:e5:27:c3:77:4c:e0:37:d4:5e:0d:
89:31:58:ad:b9:05:aa:2c:02:da:a8:64:60:72:6f:
ec:f1:f0:8e:34:db:f7:06:2d:3a:9c:84:39:6b:ad:
59:a5:a4:b1:49:b8:c3:b3:74:aa:a0:2c:a5:2c:db:
c4:c4:bc:ed:1b:79:b7:68:b4:cf:67:9f:4c:8a:36:
8a:b7:02:08:af:2d:8d:45:3c:04:66:12:06:99:25:
40:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D7:26:35:1D:73:EB:5D:1C:29:42:A2:1B:FD:E5:01:CA:E6:89:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a33ee86-7f7b-330c-ace0-81a6c6312f8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.144.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:2f:d0:f5:6f:96:ac:13:04:49:66:9d:d1:79:3a:72:06:8a:
37:a4:da:d4:fc:fc:47:45:42:06:12:6f:d7:76:7a:79:93:bb:
40:43:6c:56:c0:58:8e:dc:5c:f2:81:5b:fa:c4:d4:16:6a:bc:
cd:76:c2:a4:c6:10:7d:ae:76:20:28:36:fb:eb:99:78:11:83:
8f:77:c2:03:c1:28:fa:d0:52:16:4e:64:a9:cf:d4:e3:81:c4:
c7:eb:dd:c7:b4:72:6b:86:bb:48:52:c8:46:d8:bc:43:8a:a1:
4f:1f:63:5c:72:75:ce:3c:df:60:2b:1a:4c:31:d0:e0:63:de:
d3:98:7c:33:a0:fd:12:ad:37:eb:1c:58:5f:a4:34:86:9b:87:
03:88:96:7b:5f:0c:86:92:d8:85:8f:d4:57:99:d3:07:74:b0:
6c:01:af:fb:c9:b5:a5:d8:d1:52:71:23:c6:7d:90:ef:9c:91:
02:d4:1b:cb:74:c0:63:39:23:f2:24:ff:c3:9e:9a:0b:b1:f4:
08:f2:10:6b:90:4f:2f:43:b3:8b:e5:29:50:68:af:43:be:e1:
0c:99:03:0d:37:25:44:28:a5:ce:63:98:ee:1c:50:1e:ca:5e:
a6:48:e1:25:61:17:a5:3b:ca:bf:3e:3d:2c:4c:94:c2:78:15:
3d:4c:40:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD/2zGxvBy75Q9R9x4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTExODEyMDAwMFoXDTIyMTIyNDA1MDAwMFowLzEtMCsGA1UEAxMk
YTI3YjdlYWMtNmFkNi00ZWM4LThhYmYtZmQ5Mjg5MGFkM2VmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6q1ECK/q/UANOjgARKQkmFG8nM9JgqkgAv9
v0WX/NnLIKwocYbaeiX40698vk5uHEPmxbSnCSgs3CzEWx9N2ZiTuM71bLR16rJ0
YSStJgY30Gf2i9Y+3IRRiP0hiJqhKzkDlKzyPvqDqVwlWno0Z0lhJM2+u4ytE+lP
8/FyS9XTCtj9r8DTUVaGKhTc1rK5WW04su2PMyd60D8dksNZDmlOiyH1UJVXoOUn
w3dM4DfUXg2JMVituQWqLALaqGRgcm/s8fCONNv3Bi06nIQ5a61ZpaSxSbjDs3Sq
oCylLNvExLztG3m3aLTPZ59MijaKtwIIry2NRTwEZhIGmSVAhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEHXJjUdc+tdHClCohv95QHK5on2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMGEzM2VlODYtN2Y3Yi0z
MzBjLWFjZTAtODFhNmM2MzEyZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHNJCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH4v0PVvlqwTBElmndF5OnIGijek2tT8/EdFQgYSb9d2enmTu0BDbFbA
WI7cXPKBW/rE1BZqvM12wqTGEH2udiAoNvvrmXgRg493wgPBKPrQUhZOZKnP1OOB
xMfr3ce0cmuGu0hSyEbYvEOKoU8fY1xydc4832ArGkwx0OBj3tOYfDOg/RKtN+sc
WF+kNIabhwOIlntfDIaS2IWP1FeZ0wd0sGwBr/vJtaXY0VJxI8Z9kO+ckQLUG8t0
wGM5I/Ik/8Oemgux9AjyEGuQTy9Ds4vlKVBor0O+4QyZAw03JUQopc5jmO4cUB7K
XqZI4SVhF6U7yr8+PSxMlMJ4FT1MQIc=
-----END CERTIFICATE-----
Generated at Sun Jun 15 21:39:28 2025 by rpki-client