Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1329be91-2464-3a54-be89-7053792e2298.roa
File: 1329be91-2464-3a54-be89-7053792e2298.roa (raw, json)
Hash identifier: kfRj61XHfBdi9CcjL6jjuqUajUKlHSjnkifu2hKIl4o=
Subject key identifier: 88:0B:B7:7F:F5:8B:EA:93:63:E7:83:A2:17:03:28:74:7E:34:80:DD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FDE8B92FFF3B40C6EEA689040
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1329be91-2464-3a54-be89-7053792e2298.roa
Signing time: Thu 10 Nov 2022 12:00:00 +0000
ROA not before: Thu 10 Nov 2022 12:00:00 +0000
ROA not after: Fri 16 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 141.185.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:de:8b:92:ff:f3:b4:0c:6e:ea:68:90:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 10 12:00:00 2022 GMT
Not After : Dec 16 05:00:00 2022 GMT
Subject: CN=fb24855c-460e-4a99-a6ad-1bc1c2b37a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:20:42:77:6b:ce:36:e4:21:18:62:d8:fa:a0:
92:ca:4d:06:3d:8d:5b:79:60:ef:cb:30:0d:6f:c4:
41:7b:64:bb:22:f2:48:f7:99:18:b0:aa:07:46:d2:
c1:49:46:aa:e6:6b:17:c4:e7:42:e5:cc:00:ed:df:
39:28:09:b7:cf:31:28:15:32:d7:3c:0a:92:6e:db:
a5:87:16:7b:b6:a7:2c:66:26:f2:d7:84:a4:a2:6f:
97:a3:94:dc:d8:a0:41:a2:04:66:f4:6a:eb:35:7a:
cd:e3:04:41:ab:79:08:e0:ee:53:ae:a9:22:68:43:
15:df:c5:1d:87:ee:0d:8f:f4:a3:ea:e8:49:a9:89:
b8:8b:f2:ef:0b:2f:26:0f:89:64:cc:a4:65:f5:82:
8d:4c:0c:74:be:21:5a:03:4b:50:bd:41:8e:a8:c5:
ea:38:cb:35:f2:a4:15:81:e6:c8:0c:43:b1:c5:67:
8f:1e:e8:da:24:49:f1:b2:ea:99:ab:1d:86:bc:62:
e5:af:0a:e6:26:91:88:8d:b5:36:c7:b7:ac:41:8f:
fd:73:59:04:74:87:6c:dd:21:2e:dc:6b:fe:4a:6f:
b2:5c:07:37:60:9b:4b:1d:2a:8d:9d:d9:0a:8e:55:
8c:d5:4e:90:b1:fa:28:79:95:b6:96:86:b0:70:95:
bb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0B:B7:7F:F5:8B:EA:93:63:E7:83:A2:17:03:28:74:7E:34:80:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1329be91-2464-3a54-be89-7053792e2298.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.185.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:ae:7e:81:e9:a4:75:c2:bf:b1:09:d8:ad:99:f8:0f:a1:5c:
3b:e6:07:d1:7b:0b:dd:dc:56:fc:46:cc:cd:00:6b:86:ef:80:
86:aa:26:f5:43:1c:96:8b:aa:45:18:1e:e0:13:1c:6b:d6:9b:
95:dd:e6:d7:08:16:70:a7:54:d2:48:4e:42:24:65:c6:1a:b5:
f0:2b:85:ba:5c:61:a1:08:96:fa:7f:f4:6d:5e:ec:3f:27:48:
08:ec:fb:ae:7b:74:d9:18:63:8c:ec:59:4d:35:95:3b:50:a9:
ba:53:58:98:ed:dd:9e:1d:16:f3:8c:c7:ba:0a:ac:20:f6:9b:
ec:6b:e1:ec:a8:e6:cb:5d:1e:09:0a:96:3d:26:6b:24:da:1e:
e5:f7:96:fb:ce:f8:40:94:5f:47:e1:61:57:96:b7:a5:03:0c:
13:ee:b0:5f:4c:a1:c4:94:89:bb:0a:22:45:9e:9a:25:be:51:
64:1c:d7:b3:d7:03:e7:fb:40:46:e1:8c:07:06:ad:c6:2c:47:
e9:65:f3:ef:ae:b4:59:14:1e:db:7f:fb:0c:bd:12:8c:e5:48:
dd:b7:e8:c9:59:b2:e2:7f:78:dd:75:65:a3:64:4f:68:35:de:
42:13:70:80:3d:22:1b:05:7f:ea:47:38:1b:89:65:7c:64:a4:
4e:8c:89:9a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/ei5L/87QMbupokEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTExMDEyMDAwMFoXDTIyMTIxNjA1MDAwMFowLzEtMCsGA1UEAxMk
ZmIyNDg1NWMtNDYwZS00YTk5LWE2YWQtMWJjMWMyYjM3YTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSBCd2vONuQhGGLY+qCSyk0GPY1beWDvyzAN
b8RBe2S7IvJI95kYsKoHRtLBSUaq5msXxOdC5cwA7d85KAm3zzEoFTLXPAqSbtul
hxZ7tqcsZiby14Skom+Xo5Tc2KBBogRm9GrrNXrN4wRBq3kI4O5TrqkiaEMV38Ud
h+4Nj/Sj6uhJqYm4i/LvCy8mD4lkzKRl9YKNTAx0viFaA0tQvUGOqMXqOMs18qQV
gebIDEOxxWePHujaJEnxsuqZqx2GvGLlrwrmJpGIjbU2x7esQY/9c1kEdIds3SEu
3Gv+Sm+yXAc3YJtLHSqNndkKjlWM1U6QsfooeZW2loawcJW7rQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIgLt3/1i+qTY+eDohcDKHR+NIDdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMTMyOWJlOTEtMjQ2NC0z
YTU0LWJlODktNzA1Mzc5MmUyMjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjbkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEApq5+gemkdcK/sQnYrZn4D6FcO+YH0XsL3dxW/EbMzQBrhu+Ahqom9UMc
louqRRge4BMca9abld3m1wgWcKdU0khOQiRlxhq18CuFulxhoQiW+n/0bV7sPydI
COz7rnt02RhjjOxZTTWVO1CpulNYmO3dnh0W84zHugqsIPab7Gvh7Kjmy10eCQqW
PSZrJNoe5feW+874QJRfR+FhV5a3pQMME+6wX0yhxJSJuwoiRZ6aJb5RZBzXs9cD
5/tARuGMBwatxixH6WXz7660WRQe23/7DL0SjOVI3bfoyVmy4n943XVlo2RPaDXe
QhNwgD0iGwV/6kc4G4llfGSkToyJmg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:14:05 2025 by rpki-client