Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1825ac33-c2e2-3293-821e-27127b4ca692.roa
File: 1825ac33-c2e2-3293-821e-27127b4ca692.roa (raw, json)
Hash identifier: MF+iwS4FSNc/dmR3lzEM/vxvF5wD6Yf7oxoq3PZVBiA=
Subject key identifier: B3:46:B6:CE:FF:60:7F:0C:C9:21:00:44:B6:A5:EF:51:24:F2:29:BF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C68ED91744A25F33040481F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1825ac33-c2e2-3293-821e-27127b4ca692.roa
Signing time: Wed 29 Dec 2021 05:00:00 +0000
ROA not before: Wed 29 Dec 2021 05:00:00 +0000
ROA not after: Wed 02 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 3.64.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:68:ed:91:74:4a:25:f3:30:40:48:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 29 05:00:00 2021 GMT
Not After : Feb 2 05:00:00 2022 GMT
Subject: CN=7e9f1c51-2fae-4f01-a384-917f192ebad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2f:30:88:bb:e2:33:e0:e8:1a:b3:7b:68:f1:
98:6a:25:41:1d:f9:91:c9:70:7d:3d:92:2b:50:f4:
ec:61:e1:6d:7c:16:37:44:4c:c2:1b:57:82:dd:bd:
ef:83:8e:51:78:8a:ac:38:7b:56:93:58:ec:af:0b:
e3:fc:03:3d:6e:88:22:bf:dd:0f:51:6c:88:0c:d1:
a0:9d:cf:36:5e:be:6e:81:19:c0:a9:f4:db:a4:00:
c8:6a:0e:8d:be:cf:aa:fd:f0:a5:48:70:41:a3:2b:
5f:6f:4f:dd:e8:ed:1e:8f:e8:1b:d7:9b:06:e8:56:
60:0f:58:00:bf:99:a4:35:b6:07:1e:2f:4f:f2:33:
5a:21:33:ea:d9:af:a2:61:8e:b1:4d:bb:93:10:c1:
99:e9:65:b1:c4:c1:d7:13:7f:e8:f0:3d:cf:d3:c3:
d2:d0:b0:90:2c:34:79:55:cd:bc:77:b7:61:5a:f9:
c1:19:0d:10:f3:7c:99:df:b3:96:07:6e:58:8b:42:
a6:6b:d1:5e:02:39:5a:ed:0f:e3:79:65:8d:28:2b:
71:88:31:60:aa:b1:a8:ef:1b:39:3c:16:fa:00:04:
23:0d:2e:bb:ef:cf:d2:c8:5c:10:0c:e8:1e:08:e2:
45:a3:93:e4:f1:fc:4c:ee:59:58:ed:20:cd:6e:d6:
05:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:46:B6:CE:FF:60:7F:0C:C9:21:00:44:B6:A5:EF:51:24:F2:29:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1825ac33-c2e2-3293-821e-27127b4ca692.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.64.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:7d:1d:96:e4:56:48:ba:cf:a2:7c:15:b3:5f:95:21:61:c4:
22:09:63:d9:c0:d7:3c:1c:e0:d6:c9:9f:95:ca:01:50:a4:59:
e7:ca:6a:25:c1:00:ea:9d:5b:9e:d9:b4:75:7f:2b:26:34:8b:
57:f1:63:b8:84:71:39:aa:0c:96:32:13:9c:af:c4:31:70:9d:
67:2d:68:fa:80:a1:25:6c:31:c9:53:20:e9:00:3e:8f:32:49:
23:78:87:ef:67:69:9b:1f:85:a8:06:74:f0:b2:d8:50:05:34:
0b:8b:1f:1a:ab:33:d2:fb:2f:6b:78:c9:be:67:eb:66:1a:a6:
04:39:7a:cd:63:c6:44:34:9b:ac:fa:18:20:63:34:07:de:39:
58:56:6e:b4:2a:6f:0b:cd:9a:0d:2a:4c:f6:da:c7:c0:dd:e5:
64:40:d7:04:d3:95:39:54:fb:3f:c0:72:90:2a:b8:eb:d1:26:
93:cc:ce:82:70:2b:14:0e:9e:eb:77:30:2f:5a:ad:27:79:c1:
87:32:f5:34:ee:79:1c:b2:c7:eb:a2:f6:6c:15:4c:a0:d5:31:
d5:d1:2a:42:4f:c8:c6:c9:ea:e7:10:0e:5d:55:eb:6d:df:b2:
86:22:56:47:2c:17:29:b3:5a:fd:af:1d:01:f7:7e:3f:bb:b6:
7a:2a:d9:7a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDxo7ZF0SiXzMEBIHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIxMTIyOTA1MDAwMFoXDTIyMDIwMjA1MDAwMFowLzEtMCsGA1UEAxMk
N2U5ZjFjNTEtMmZhZS00ZjAxLWEzODQtOTE3ZjE5MmViYWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi8wiLviM+DoGrN7aPGYaiVBHfmRyXB9PZIr
UPTsYeFtfBY3REzCG1eC3b3vg45ReIqsOHtWk1jsrwvj/AM9bogiv90PUWyIDNGg
nc82Xr5ugRnAqfTbpADIag6Nvs+q/fClSHBBoytfb0/d6O0ej+gb15sG6FZgD1gA
v5mkNbYHHi9P8jNaITPq2a+iYY6xTbuTEMGZ6WWxxMHXE3/o8D3P08PS0LCQLDR5
Vc28d7dhWvnBGQ0Q83yZ37OWB25Yi0Kma9FeAjla7Q/jeWWNKCtxiDFgqrGo7xs5
PBb6AAQjDS6778/SyFwQDOgeCOJFo5Pk8fxM7llY7SDNbtYFtwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLNGts7/YH8MySEARLal71Ek8im/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMTgyNWFjMzMtYzJlMi0z
MjkzLTgyMWUtMjcxMjdiNGNhNjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMGA0AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAs30dluRWSLrPonwVs1+VIWHEIglj2cDXPBzg1smflcoBUKRZ58pqJcEA
6p1bntm0dX8rJjSLV/FjuIRxOaoMljITnK/EMXCdZy1o+oChJWwxyVMg6QA+jzJJ
I3iH72dpmx+FqAZ08LLYUAU0C4sfGqsz0vsva3jJvmfrZhqmBDl6zWPGRDSbrPoY
IGM0B945WFZutCpvC82aDSpM9trHwN3lZEDXBNOVOVT7P8BykCq469Emk8zOgnAr
FA6e63cwL1qtJ3nBhzL1NO55HLLH66L2bBVMoNUx1dEqQk/Ixsnq5xAOXVXrbd+y
hiJWRywXKbNa/a8dAfd+P7u2eirZeg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 18:02:00 2025 by rpki-client