Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/125ef1cd-a455-3559-bc89-1826a2f400f3.roa
File: 125ef1cd-a455-3559-bc89-1826a2f400f3.roa (raw, json)
Hash identifier: adztyfyi5+xtY7sWU1wG4LFCEwLS37iNSB/o/R9dW28=
Subject key identifier: 96:14:AA:36:2C:31:CF:9E:54:DD:22:02:2C:CF:65:B5:21:01:B3:56
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840ADEAFB6EFEE1939939ED8100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/125ef1cd-a455-3559-bc89-1826a2f400f3.roa
Signing time: Mon 23 Jan 2023 12:00:00 +0000
ROA not before: Mon 23 Jan 2023 12:00:00 +0000
ROA not after: Tue 28 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 3.0.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:ad:ea:fb:6e:fe:e1:93:99:39:ed:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 23 12:00:00 2023 GMT
Not After : Feb 28 05:00:00 2023 GMT
Subject: CN=0a3819f8-fcd1-45b2-bce0-be4ca0d6a3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8a:52:b8:42:b3:da:13:bf:97:eb:3a:39:a0:
f2:98:9d:cb:71:10:9e:a0:f2:eb:89:12:6a:26:e4:
40:51:c6:ac:80:fe:1b:1a:af:3b:94:48:17:e5:02:
6d:b4:01:63:55:f9:76:04:a2:d9:1f:17:36:d3:86:
90:7e:ed:ab:fc:6b:3b:02:fd:17:34:65:eb:f2:2f:
f4:e6:33:9b:a4:fa:0b:cd:5b:0f:7e:dc:56:d5:3b:
4f:f0:0e:42:d8:e8:02:a5:f3:96:a6:61:07:c5:a4:
05:18:c8:15:c5:76:7d:f9:74:47:24:68:e5:60:9e:
d3:18:47:59:f7:e0:4c:f9:45:6a:e8:2b:7c:b2:aa:
7c:05:4b:92:a0:2d:19:65:75:3a:1e:2f:6d:d7:5c:
8b:5b:c3:46:91:4b:05:5e:7a:89:35:19:0b:1d:f0:
b0:34:6d:eb:b9:be:bb:93:13:1a:a9:12:f2:36:93:
06:9c:be:82:09:9d:d8:99:5a:01:98:0e:6f:d3:89:
80:4e:dd:f8:41:c9:bc:ff:ef:5f:8e:b5:6d:8e:42:
94:18:27:6f:78:71:92:bc:ff:01:6e:d9:22:1d:ff:
16:5f:fb:75:72:de:2d:b7:a6:a5:d6:44:25:22:7e:
45:9c:55:dc:1b:fe:28:c5:15:74:b4:40:f2:e9:05:
5c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:14:AA:36:2C:31:CF:9E:54:DD:22:02:2C:CF:65:B5:21:01:B3:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/125ef1cd-a455-3559-bc89-1826a2f400f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.0.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:22:74:d7:12:da:8f:f5:7c:70:1b:07:fc:03:19:8e:5d:20:
92:24:4c:b3:21:b6:91:ef:53:35:01:80:98:0f:70:7a:54:9f:
3a:5a:5b:46:f1:52:ff:ab:d8:e9:e2:20:8d:d2:85:6a:77:3e:
6e:8c:57:2b:8f:0d:ad:ce:74:00:07:01:c0:83:bf:0e:d3:9e:
77:63:f1:74:c3:43:70:29:b6:d1:9c:30:33:73:75:ae:54:53:
8b:ae:8b:ba:41:da:aa:e9:7e:90:7a:c6:52:57:94:64:16:be:
8b:79:0b:77:16:1e:30:bb:1d:90:19:16:38:e5:c9:f7:46:a4:
f8:a2:b5:1f:2f:a4:c0:c6:35:98:e8:85:04:7d:40:39:ea:c0:
8c:47:d8:92:43:c2:c4:7e:f9:58:4b:8a:bd:64:d8:c2:6a:d4:
e9:2b:cf:08:a1:a0:3b:46:a5:e5:1d:84:07:e3:f3:e7:0a:34:
7c:16:62:6b:b9:7d:25:58:2f:ca:90:85:5a:ea:80:0e:9d:56:
0c:13:e4:7a:73:ac:b4:40:15:b6:85:ae:b3:12:42:42:02:8f:
66:86:8a:e6:69:26:0f:37:b3:5b:09:9d:e8:af:8c:77:d1:c1:
25:c7:f4:ed:e4:03:bb:f9:b9:42:55:91:3f:d1:95:01:0f:eb:
3f:d0:22:4c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECt6vtu/uGTmTntgQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEyMzEyMDAwMFoXDTIzMDIyODA1MDAwMFowLzEtMCsGA1UEAxMk
MGEzODE5ZjgtZmNkMS00NWIyLWJjZTAtYmU0Y2EwZDZhM2JmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4pSuEKz2hO/l+s6OaDymJ3LcRCeoPLriRJq
JuRAUcasgP4bGq87lEgX5QJttAFjVfl2BKLZHxc204aQfu2r/Gs7Av0XNGXr8i/0
5jObpPoLzVsPftxW1TtP8A5C2OgCpfOWpmEHxaQFGMgVxXZ9+XRHJGjlYJ7TGEdZ
9+BM+UVq6Ct8sqp8BUuSoC0ZZXU6Hi9t11yLW8NGkUsFXnqJNRkLHfCwNG3rub67
kxMaqRLyNpMGnL6CCZ3YmVoBmA5v04mATt34Qcm8/+9fjrVtjkKUGCdveHGSvP8B
btkiHf8WX/t1ct4tt6al1kQlIn5FnFXcG/4oxRV0tEDy6QVcRwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJYUqjYsMc+eVN0iAizPZbUhAbNWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMTI1ZWYxY2QtYTQ1NS0z
NTU5LWJjODktMTgyNmEyZjQwMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMGAwAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKCJ01xLaj/V8cBsH/AMZjl0gkiRMsyG2ke9TNQGAmA9welSfOlpbRvFS
/6vY6eIgjdKFanc+boxXK48Nrc50AAcBwIO/DtOed2PxdMNDcCm20ZwwM3N1rlRT
i66LukHaqul+kHrGUleUZBa+i3kLdxYeMLsdkBkWOOXJ90ak+KK1Hy+kwMY1mOiF
BH1AOerAjEfYkkPCxH75WEuKvWTYwmrU6SvPCKGgO0al5R2EB+Pz5wo0fBZia7l9
JVgvypCFWuqADp1WDBPkenOstEAVtoWusxJCQgKPZoaK5mkmDzezWwmd6K+Md9HB
Jcf07eQDu/m5QlWRP9GVAQ/rP9AiTA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:16:55 2025 by rpki-client