Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0db428ca-a3c0-38a1-8a06-cdcc8813f983.roa
File: 0db428ca-a3c0-38a1-8a06-cdcc8813f983.roa (raw, json)
Hash identifier: LCBfQX/Lj6didyGDkIIdwx6CnlZJ/MGgw0AVMqbcG8I=
Subject key identifier: F3:59:D0:52:C8:C3:FD:E9:2B:C3:09:9D:F4:65:78:67:D8:C2:3C:53
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E29FCB13E7E96831C54A74400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0db428ca-a3c0-38a1-8a06-cdcc8813f983.roa
Signing time: Mon 06 Jun 2022 12:00:00 +0000
ROA not before: Mon 06 Jun 2022 12:00:00 +0000
ROA not after: Tue 12 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 136.140.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:29:fc:b1:3e:7e:96:83:1c:54:a7:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 6 12:00:00 2022 GMT
Not After : Jul 12 04:00:00 2022 GMT
Subject: CN=92b11092-6b08-4339-9145-a08cc8fe5750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:83:83:ea:a7:5f:07:c9:a0:00:83:3e:dd:cf:
e2:02:a3:3d:75:b3:56:d2:8e:ef:34:56:cb:2b:78:
e0:03:03:95:c9:1a:62:c5:aa:c4:46:e7:99:0a:5e:
e2:60:5e:87:d0:5b:b2:34:4a:bb:bb:40:f5:3f:c7:
7c:1f:ce:b1:81:a2:21:5b:4b:26:ea:89:2e:21:77:
a5:3e:2d:6e:08:f0:2c:79:4b:a4:8c:2e:91:5f:84:
b9:d1:fc:76:62:55:8b:97:db:25:39:80:4c:1f:76:
16:e1:56:94:16:3f:91:10:b9:9c:39:03:39:e6:1b:
e4:4a:06:41:86:48:e7:3f:f7:df:8e:6a:19:70:02:
b4:f0:e3:05:01:ba:52:5f:dc:e9:a9:87:ec:d6:f8:
79:8e:1a:c9:03:a4:00:cb:81:8f:c4:d3:93:50:6f:
f7:de:26:a9:d4:89:7e:a8:40:02:27:46:69:b3:62:
ef:e5:f1:22:da:f9:91:f0:c3:59:c6:ca:15:09:bb:
5b:2d:b7:ee:3b:61:e8:7e:58:ac:60:af:bb:f3:61:
38:79:be:38:9a:27:58:98:ae:23:ff:d5:fc:92:84:
c3:40:d4:be:6e:13:b0:1c:b1:be:e8:d2:47:de:14:
c9:cd:36:d4:32:18:b5:64:a7:5e:1d:9e:21:58:7f:
d5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:59:D0:52:C8:C3:FD:E9:2B:C3:09:9D:F4:65:78:67:D8:C2:3C:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0db428ca-a3c0-38a1-8a06-cdcc8813f983.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.140.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:9c:48:df:69:75:7f:58:e7:78:7c:95:86:9c:5f:85:38:b4:
7e:9e:a9:67:1e:cf:c1:20:e6:16:db:ea:59:62:4a:85:2c:37:
7f:99:b3:1d:2b:e0:f1:64:e7:45:43:42:57:3f:22:a9:e2:60:
85:11:11:2a:6a:df:53:91:1d:5b:c3:a3:7d:a1:50:2a:f9:dc:
89:f6:88:b8:f4:03:59:b7:0d:d0:d2:13:a4:ae:ad:c5:01:1e:
af:73:33:53:5d:03:ad:3c:20:2c:67:33:4a:ad:36:32:90:a5:
e6:27:b2:71:fb:18:f3:71:d3:ba:3b:e3:d2:cf:20:20:c0:88:
42:d0:25:d7:72:7d:7b:8e:c1:c1:bd:86:3f:32:c4:4b:20:45:
ee:a8:bd:a8:17:3e:a8:46:7d:f9:bb:f6:da:43:bd:69:7f:f4:
54:b3:65:b9:9c:30:a2:92:5f:30:a8:41:61:bb:ac:7d:89:a1:
a5:c7:f9:37:19:66:75:d1:3e:cf:0f:fc:53:32:9e:78:7d:8a:
6b:d1:a6:08:d4:ae:81:8a:99:a4:d2:62:c1:37:ee:31:12:ad:
7f:da:f2:89:e1:24:e5:5c:79:c3:d0:70:ee:05:ac:36:bf:c3:
2d:e9:76:86:d1:80:46:b0:52:78:75:e0:22:e2:b2:b8:e3:ab:
27:d8:dd:97
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4p/LE+fpaDHFSnRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYwNjEyMDAwMFoXDTIyMDcxMjA0MDAwMFowLzEtMCsGA1UEAxMk
OTJiMTEwOTItNmIwOC00MzM5LTkxNDUtYTA4Y2M4ZmU1NzUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IOD6qdfB8mgAIM+3c/iAqM9dbNW0o7vNFbL
K3jgAwOVyRpixarERueZCl7iYF6H0FuyNEq7u0D1P8d8H86xgaIhW0sm6okuIXel
Pi1uCPAseUukjC6RX4S50fx2YlWLl9slOYBMH3YW4VaUFj+RELmcOQM55hvkSgZB
hkjnP/ffjmoZcAK08OMFAbpSX9zpqYfs1vh5jhrJA6QAy4GPxNOTUG/33iap1Il+
qEACJ0Zps2Lv5fEi2vmR8MNZxsoVCbtbLbfuO2HoflisYK+782E4eb44midYmK4j
/9X8koTDQNS+bhOwHLG+6NJH3hTJzTbUMhi1ZKdeHZ4hWH/VxQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPNZ0FLIw/3pK8MJnfRleGfYwjxTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMGRiNDI4Y2EtYTNjMC0z
OGExLThhMDYtY2RjYzg4MTNmOTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiIwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEArZxI32l1f1jneHyVhpxfhTi0fp6pZx7PwSDmFtvqWWJKhSw3f5mzHSvg
8WTnRUNCVz8iqeJghRERKmrfU5EdW8OjfaFQKvncifaIuPQDWbcN0NITpK6txQEe
r3MzU10DrTwgLGczSq02MpCl5ieycfsY83HTujvj0s8gIMCIQtAl13J9e47Bwb2G
PzLESyBF7qi9qBc+qEZ9+bv22kO9aX/0VLNluZwwopJfMKhBYbusfYmhpcf5Nxlm
ddE+zw/8UzKeeH2Ka9GmCNSugYqZpNJiwTfuMRKtf9ryieEk5Vx5w9Bw7gWsNr/D
Lel2htGARrBSeHXgIuKyuOOrJ9jdlw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:53:25 2025 by rpki-client