Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1566840e-b1a3-32f6-88a0-9e46916a867e.roa
File: 1566840e-b1a3-32f6-88a0-9e46916a867e.roa (raw, json)
Hash identifier: te9NwNuZU+SKAIDa/uLaqy11eojIzAxbsoNe6qe+jXM=
Subject key identifier: 56:2A:D5:73:2E:DB:BA:73:79:41:12:FC:F1:24:3B:C6:71:54:4A:57
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840467AA96B9640270DDA474CC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1566840e-b1a3-32f6-88a0-9e46916a867e.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 130.71.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:46:7a:a9:6b:96:40:27:0d:da:47:4c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=02216c2b-35cf-4cd8-bfe8-8994b1cbcb1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:34:16:df:88:52:96:c9:ff:84:d1:75:21:a2:
94:a7:a1:19:8b:6d:2e:df:9f:96:12:98:9c:5a:62:
9b:f5:ab:f0:61:48:4e:91:fd:41:58:51:fb:4e:90:
9a:8f:2c:3e:6a:39:de:0f:2f:7b:a1:c1:a4:dd:f0:
e8:ab:bb:58:36:77:25:c9:ac:6d:68:f0:19:05:18:
bc:72:eb:9c:b0:5d:b1:9f:fe:c6:6c:6a:c0:fc:dc:
9d:51:b5:40:80:96:73:05:ef:40:62:6f:b2:41:fb:
a3:d0:4a:d9:04:4a:24:e3:e8:e4:cf:da:a7:09:40:
22:bc:0a:25:cb:7d:3d:6a:50:8d:4e:89:37:8f:24:
a1:0d:c8:0a:bf:0c:d7:84:5e:59:58:ab:1a:86:63:
2e:63:12:53:d7:7d:9f:e7:4c:00:8b:7b:45:a1:5a:
10:4a:9f:d0:08:73:75:78:99:88:4f:3a:4c:de:68:
d0:0c:b1:55:40:41:84:d6:f3:d7:d8:df:c3:3d:d8:
e4:2f:64:c2:aa:c6:30:fa:67:0f:9f:75:e0:2a:e4:
72:7b:c6:d6:e3:9e:73:05:8e:b8:e6:4b:55:97:9b:
22:87:e6:bf:97:8d:bb:e1:b1:54:12:e8:b3:18:f6:
9f:2f:95:89:d3:19:10:7d:9f:ff:d8:f5:69:2f:8e:
f3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2A:D5:73:2E:DB:BA:73:79:41:12:FC:F1:24:3B:C6:71:54:4A:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1566840e-b1a3-32f6-88a0-9e46916a867e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
130.71.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:de:bc:45:be:04:48:2b:19:7c:6f:6c:74:76:66:59:72:bd:
35:71:c9:b5:65:cc:47:77:61:f4:3d:fb:60:68:77:b3:97:f9:
06:4c:c3:92:c8:81:c5:6d:c4:8c:57:5b:c9:84:5a:f4:35:3d:
95:c1:f0:73:4f:f6:1e:30:6d:b8:3f:3c:6d:5f:e2:96:48:a2:
38:82:14:43:b8:5f:b1:01:69:1c:10:76:f9:d8:be:34:8f:07:
5e:90:25:95:85:41:fa:2f:a0:12:58:fe:ef:6a:db:24:49:2e:
60:b9:00:52:39:ba:fa:7e:3b:b8:71:a1:3d:55:4f:8f:6a:0b:
24:28:f1:31:47:70:3f:f0:9c:ac:2c:1a:62:88:fd:31:a5:2b:
90:1d:96:8d:64:0a:68:05:04:58:ba:1e:fe:6d:46:d4:cc:dd:
a9:6b:16:08:39:29:44:9a:27:a8:5a:35:86:85:dc:24:44:4f:
bf:77:f4:af:53:09:17:0f:ac:25:93:0f:f8:24:7d:12:29:f5:
a6:82:ac:da:b3:04:df:a9:51:f2:8d:9d:cc:38:a9:38:ca:07:
f9:33:ad:33:89:ce:8b:69:93:4f:ca:9a:f5:f9:ef:4d:67:34:
bb:a6:22:36:03:8e:ee:75:fe:6c:b3:75:72:6a:58:82:1b:08:
c7:a1:46:6d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBGeqlrlkAnDdpHTMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNzEyMDAwMFoXDTIzMDEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
MDIyMTZjMmItMzVjZi00Y2Q4LWJmZTgtODk5NGIxY2JjYjFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzQW34hSlsn/hNF1IaKUp6EZi20u35+WEpic
WmKb9avwYUhOkf1BWFH7TpCajyw+ajneDy97ocGk3fDoq7tYNnclyaxtaPAZBRi8
cuucsF2xn/7GbGrA/NydUbVAgJZzBe9AYm+yQfuj0ErZBEok4+jkz9qnCUAivAol
y309alCNTok3jyShDcgKvwzXhF5ZWKsahmMuYxJT132f50wAi3tFoVoQSp/QCHN1
eJmITzpM3mjQDLFVQEGE1vPX2N/DPdjkL2TCqsYw+mcPn3XgKuRye8bW455zBY64
5ktVl5sih+a/l4274bFUEuizGPafL5WJ0xkQfZ//2PVpL47zAwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFYq1XMu27pzeUES/PEkO8ZxVEpXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMTU2Njg0MGUtYjFhMy0z
MmY2LTg4YTAtOWU0NjkxNmE4NjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgkcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmN68Rb4ESCsZfG9sdHZmWXK9NXHJtWXMR3dh9D37YGh3s5f5BkzDksiB
xW3EjFdbyYRa9DU9lcHwc0/2HjBtuD88bV/ilkiiOIIUQ7hfsQFpHBB2+di+NI8H
XpAllYVB+i+gElj+72rbJEkuYLkAUjm6+n47uHGhPVVPj2oLJCjxMUdwP/CcrCwa
Yoj9MaUrkB2WjWQKaAUEWLoe/m1G1MzdqWsWCDkpRJonqFo1hoXcJERPv3f0r1MJ
Fw+sJZMP+CR9Ein1poKs2rME36lR8o2dzDipOMoH+TOtM4nOi2mTT8qa9fnvTWc0
u6YiNgOO7nX+bLN1cmpYghsIx6FGbQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:03:33 2025 by rpki-client