Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/132327e7-c654-3ce2-af30-d23585d2b88e.roa
File: 132327e7-c654-3ce2-af30-d23585d2b88e.roa (raw, json)
Hash identifier: e5VkPeyTXi8/xL1nkR9hJSdEK1o7tU7cyBy2jywxB5k=
Subject key identifier: 64:A8:BA:1F:4A:86:A4:97:4B:1F:07:DC:F7:BC:EF:72:16:DB:9F:2D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DC8F233EFB94E6C676F7DE180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/132327e7-c654-3ce2-af30-d23585d2b88e.roa
Signing time: Tue 03 May 2022 12:00:00 +0000
ROA not before: Tue 03 May 2022 12:00:00 +0000
ROA not after: Wed 08 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 3.128.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:c8:f2:33:ef:b9:4e:6c:67:6f:7d:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 3 12:00:00 2022 GMT
Not After : Jun 8 04:00:00 2022 GMT
Subject: CN=8f1597aa-d665-4f22-b1d8-32588fa03d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:48:b5:36:f7:6d:e1:d6:fd:76:ba:5a:0d:
cc:b6:20:39:74:be:96:47:2d:71:cd:2b:db:6d:de:
c0:19:da:24:75:d7:db:13:cd:5a:57:b7:f7:c3:fa:
44:ad:a8:9b:55:02:c7:e7:e4:4a:80:59:de:20:7c:
55:9c:a5:d9:6f:c0:83:b5:6e:6c:a4:3b:02:a3:2e:
ef:65:21:ca:fe:62:10:4e:81:b6:14:32:4b:d9:89:
ab:9c:f6:8e:a0:79:3a:75:eb:59:08:80:a4:c5:41:
bc:b9:45:4c:b0:ad:d8:6e:79:95:bf:ae:10:e0:53:
86:a2:fa:2a:49:51:ab:21:08:e6:51:83:2f:c9:45:
e4:a6:f3:f9:e6:d5:cc:97:93:09:ff:27:4a:eb:64:
6a:c4:3c:91:6a:8f:e1:7e:a6:c8:20:66:05:35:22:
60:da:f1:98:9e:c1:a7:03:9b:b3:c4:8f:56:b6:f8:
e3:15:e1:a7:b5:c7:4c:6f:07:6b:ad:72:18:44:08:
f9:bb:b8:69:f9:25:02:82:ab:1d:29:f2:e0:a7:a3:
0d:39:a7:97:6b:75:18:8b:d2:d2:49:7c:27:9e:9a:
93:6b:9f:23:e8:56:6a:5a:1e:e1:50:3a:40:8b:a5:
31:5a:7c:7f:f3:00:0c:bf:c3:f7:5f:eb:6f:37:d1:
35:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A8:BA:1F:4A:86:A4:97:4B:1F:07:DC:F7:BC:EF:72:16:DB:9F:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/132327e7-c654-3ce2-af30-d23585d2b88e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.128.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:d6:67:4e:c0:4f:77:9d:c9:23:e0:0d:01:99:92:2e:30:f1:
5a:d5:39:fb:5d:d4:1e:34:c8:d1:e6:b1:30:29:ff:f8:35:68:
ed:1f:a3:b1:83:cd:d7:ab:8b:15:3e:5c:5f:2b:aa:96:46:bc:
70:f5:ce:05:ca:83:32:89:60:63:ce:3a:82:62:32:55:e7:4c:
bb:01:36:0d:b8:a6:69:77:22:28:02:00:30:5c:21:ec:c5:5d:
72:ab:89:fe:d9:b5:fb:0d:9b:0e:80:e4:20:3d:5d:b7:9f:f0:
f9:8d:26:4b:f0:cb:b7:b6:ce:fb:16:4b:9b:e2:0a:b1:f7:be:
05:53:39:17:05:96:c0:ab:a4:a4:81:f5:5b:35:2d:28:ac:5e:
85:25:5d:19:6a:70:5d:d9:60:49:36:8a:c2:e8:42:84:9b:5b:
bf:6c:06:7e:cb:9c:82:f6:fc:d6:7d:29:15:16:0a:eb:90:b6:
4c:e1:c3:e4:09:74:95:ee:2a:f4:a7:1a:13:b7:ba:73:3d:98:
e4:eb:5a:80:9d:f1:e7:03:9c:e5:34:5e:74:90:30:98:37:07:
8f:4f:68:35:f3:7b:98:d5:e0:4c:37:a6:bf:01:40:b2:1a:7a:
f8:1d:ba:54:08:3b:bb:96:22:de:0b:17:ea:e7:d0:ba:ef:29:
0e:ba:f0:57
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3I8jPvuU5sZ2994YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUwMzEyMDAwMFoXDTIyMDYwODA0MDAwMFowLzEtMCsGA1UEAxMk
OGYxNTk3YWEtZDY2NS00ZjIyLWIxZDgtMzI1ODhmYTAzZDdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm05ItTb3beHW/Xa6Wg3MtiA5dL6WRy1xzSvb
bd7AGdokddfbE81aV7f3w/pEraibVQLH5+RKgFneIHxVnKXZb8CDtW5spDsCoy7v
ZSHK/mIQToG2FDJL2YmrnPaOoHk6detZCICkxUG8uUVMsK3YbnmVv64Q4FOGovoq
SVGrIQjmUYMvyUXkpvP55tXMl5MJ/ydK62RqxDyRao/hfqbIIGYFNSJg2vGYnsGn
A5uzxI9WtvjjFeGntcdMbwdrrXIYRAj5u7hp+SUCgqsdKfLgp6MNOaeXa3UYi9LS
SXwnnpqTa58j6FZqWh7hUDpAi6UxWnx/8wAMv8P3X+tvN9E1UwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGSouh9KhqSXSx8H3Pe873IW258tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMTMyMzI3ZTctYzY1NC0z
Y2UyLWFmMzAtZDIzNTg1ZDJiODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMGA4AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAD9ZnTsBPd53JI+ANAZmSLjDxWtU5+13UHjTI0eaxMCn/+DVo7R+jsYPN
16uLFT5cXyuqlka8cPXOBcqDMolgY846gmIyVedMuwE2DbimaXciKAIAMFwh7MVd
cquJ/tm1+w2bDoDkID1dt5/w+Y0mS/DLt7bO+xZLm+IKsfe+BVM5FwWWwKukpIH1
WzUtKKxehSVdGWpwXdlgSTaKwuhChJtbv2wGfsucgvb81n0pFRYK65C2TOHD5Al0
le4q9KcaE7e6cz2Y5OtagJ3x5wOc5TRedJAwmDcHj09oNfN7mNXgTDemvwFAshp6
+B26VAg7u5Yi3gsX6ufQuu8pDrrwVw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:24:34 2025 by rpki-client