Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/16249771-6b85-339b-8b00-0850ea2508c1.roa
File: 16249771-6b85-339b-8b00-0850ea2508c1.roa (raw, json)
Hash identifier: Fi/eT3QfkF0FOnEfIOvxd6hQQ46V5eZ3tVN6TrJDwUM=
Subject key identifier: F2:62:46:7F:3E:90:5C:9D:67:28:2F:89:98:2D:F5:84:1D:92:03:0A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858402492230D5C61D17995526D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/16249771-6b85-339b-8b00-0850ea2508c1.roa
Signing time: Mon 05 Dec 2022 12:00:00 +0000
ROA not before: Mon 05 Dec 2022 12:00:00 +0000
ROA not after: Tue 10 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 136.4.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:24:92:23:0d:5c:61:d1:79:95:52:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 5 12:00:00 2022 GMT
Not After : Jan 10 05:00:00 2023 GMT
Subject: CN=d813ac72-57ca-4f30-bb7d-53c019c42f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3e:4e:53:9a:3d:22:19:f6:26:e1:10:de:ed:
8f:7d:b9:f9:bd:26:3a:b7:50:36:72:bd:3d:a8:6a:
b2:ad:fb:05:0b:be:fb:bc:16:00:bf:e3:95:b5:3d:
0d:fb:e1:f8:a9:92:6c:f5:01:6d:55:ae:fd:8a:e7:
5c:3c:21:c3:b1:68:d6:d2:39:ea:61:fe:56:45:fd:
98:5a:6a:3e:03:05:ef:3b:72:fd:90:d9:4a:db:32:
0f:fc:c9:a5:23:6e:a1:b9:10:57:2d:c3:45:34:6b:
15:65:70:e9:5e:86:c5:d2:41:bf:b1:05:7d:c3:d8:
8d:f6:b7:0e:f5:11:11:6d:37:00:cf:78:2c:9a:3d:
a1:1a:26:ad:60:d5:b1:e2:b5:36:48:8a:cb:e8:a6:
fa:24:b0:b0:1b:91:63:61:d9:b1:45:a5:26:b7:54:
7e:d7:4b:14:60:db:4b:82:97:ad:2a:a8:4d:ba:6b:
c4:4e:df:1f:c8:81:1e:5f:82:27:ac:b0:7e:a0:39:
a7:51:e8:d3:da:ba:70:2d:ad:f0:6c:d8:e6:1e:7c:
57:89:e8:a8:6c:d7:f1:d7:a2:8e:98:ae:54:09:dc:
d5:54:6d:67:d9:28:fe:0a:49:7b:e8:c1:31:e4:a5:
7d:4b:a1:f8:37:4f:1c:d1:ba:ff:e9:96:84:0c:a0:
56:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:62:46:7F:3E:90:5C:9D:67:28:2F:89:98:2D:F5:84:1D:92:03:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/16249771-6b85-339b-8b00-0850ea2508c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.4.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:a6:40:65:ce:a7:65:6f:45:e8:5d:68:d2:52:3e:f8:9e:38:
b4:55:63:af:85:6d:75:b3:f6:20:a6:b1:36:6a:88:25:75:8a:
44:71:8d:b9:45:f5:7f:ca:d9:50:e0:fa:36:12:f7:87:d6:82:
30:ca:9a:87:7d:dc:a4:46:21:aa:da:3d:36:42:0d:6d:14:d6:
1c:ea:66:c1:36:43:5c:3a:80:ef:53:bb:b6:e8:33:82:2d:26:
e8:18:90:67:f9:7a:99:ce:94:b4:c8:26:72:c3:7a:45:a6:4f:
21:5e:8e:bf:9e:75:f2:9e:67:69:88:09:58:39:87:10:76:25:
6b:30:4e:94:c8:40:04:21:4f:f4:c3:b7:4e:07:fd:87:0d:ab:
b9:a5:98:d6:e1:c4:22:2d:76:58:98:4f:32:99:b3:6c:76:81:
f9:35:2a:23:e5:74:dc:a2:29:59:f1:d1:4a:4a:f5:4d:f5:af:
27:6d:4a:d1:0b:26:ff:6d:65:d2:ba:8b:f6:2f:4d:ee:c8:dc:
14:14:34:28:9f:e4:43:91:db:ec:ef:5a:d0:90:08:26:03:2c:
6d:0b:0e:92:1c:22:21:a7:92:d4:2c:b1:3e:65:1f:21:91:c0:
da:2e:4a:30:1b:a2:02:c7:e0:3d:34:e1:bf:50:a2:91:fb:78:
8c:94:26:ac
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAkkiMNXGHReZVSbYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIwNTEyMDAwMFoXDTIzMDExMDA1MDAwMFowLzEtMCsGA1UEAxMk
ZDgxM2FjNzItNTdjYS00ZjMwLWJiN2QtNTNjMDE5YzQyZjYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7D5OU5o9Ihn2JuEQ3u2Pfbn5vSY6t1A2cr09
qGqyrfsFC777vBYAv+OVtT0N++H4qZJs9QFtVa79iudcPCHDsWjW0jnqYf5WRf2Y
Wmo+AwXvO3L9kNlK2zIP/MmlI26huRBXLcNFNGsVZXDpXobF0kG/sQV9w9iN9rcO
9RERbTcAz3gsmj2hGiatYNWx4rU2SIrL6Kb6JLCwG5FjYdmxRaUmt1R+10sUYNtL
gpetKqhNumvETt8fyIEeX4InrLB+oDmnUejT2rpwLa3wbNjmHnxXieiobNfx16KO
mK5UCdzVVG1n2Sj+Ckl76MEx5KV9S6H4N08c0br/6ZaEDKBW3QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPJiRn8+kFydZygviZgt9YQdkgMKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMTYyNDk3NzEtNmI4NS0z
MzliLThiMDAtMDg1MGVhMjUwOGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCiAQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATKZAZc6nZW9F6F1o0lI++J44tFVjr4VtdbP2IKaxNmqIJXWKRHGNuUX1
f8rZUOD6NhL3h9aCMMqah33cpEYhqto9NkINbRTWHOpmwTZDXDqA71O7tugzgi0m
6BiQZ/l6mc6UtMgmcsN6RaZPIV6Ov5518p5naYgJWDmHEHYlazBOlMhABCFP9MO3
Tgf9hw2ruaWY1uHEIi12WJhPMpmzbHaB+TUqI+V03KIpWfHRSkr1TfWvJ21K0Qsm
/21l0rqL9i9N7sjcFBQ0KJ/kQ5Hb7O9a0JAIJgMsbQsOkhwiIaeS1CyxPmUfIZHA
2i5KMBuiAsfgPTThv1Cikft4jJQmrA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 06:20:03 2025 by rpki-client