Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/186f2e0a-815f-3058-9d43-01c750d7ebc7.roa
File: 186f2e0a-815f-3058-9d43-01c750d7ebc7.roa (raw, json)
Hash identifier: TCqAjqyM78VhXxuQeaJ9DL7kZhD4+58y0L3ei2nPHF8=
Subject key identifier: 25:F6:CD:AC:EB:C4:48:85:C2:3E:65:46:3A:FF:D8:96:C3:FE:62:57
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE493516C0E4A3CCFE3E2DF00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/186f2e0a-815f-3058-9d43-01c750d7ebc7.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 52.124.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:93:51:6c:0e:4a:3c:cf:e3:e2:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=37760d3f-e253-44b8-8d1a-d73d3c92b593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:aa:2d:ed:c7:3f:a1:cc:68:93:d6:88:5f:
ce:af:e7:77:b3:1c:71:67:96:b5:ce:5c:80:cb:8c:
30:25:e9:a8:38:40:33:98:77:a7:5c:ee:71:93:81:
1c:d5:5c:32:4d:8f:1b:ec:0c:a6:07:90:05:8a:7a:
7c:59:58:6b:49:ae:29:79:ae:66:e6:7b:be:54:85:
83:15:1d:1a:e9:93:a6:5b:ac:09:3a:11:30:88:2d:
5a:dc:64:b0:c5:26:d1:31:92:5d:8b:88:69:63:bb:
56:36:52:fb:fe:db:c5:14:ea:87:b3:bd:f7:f7:f8:
89:9a:b3:58:5f:be:fd:ab:e9:6b:6b:37:08:c6:ef:
29:96:ab:36:e8:75:53:f8:eb:50:f2:92:ec:44:b4:
c0:5c:dc:c7:a0:8c:e8:9a:f0:1e:db:0a:5e:3c:9c:
10:03:d0:f6:fe:3f:14:7c:31:ce:57:1f:e5:35:8c:
6b:b4:fd:bb:13:c0:0e:91:52:40:00:4b:c3:ee:44:
23:a8:32:29:6f:29:72:7c:56:1b:e0:dd:23:be:42:
c4:3c:a7:01:a3:f7:23:1e:7b:57:6e:80:0f:00:b3:
f3:fc:4a:d5:23:a1:26:3f:36:d8:16:79:de:8e:42:
de:50:4a:1e:90:98:49:1c:21:ef:1f:63:dd:ca:c5:
f0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F6:CD:AC:EB:C4:48:85:C2:3E:65:46:3A:FF:D8:96:C3:FE:62:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/186f2e0a-815f-3058-9d43-01c750d7ebc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.124.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:dc:db:14:86:6b:d5:2b:79:ae:5f:56:f4:4c:80:ca:79:ab:
81:ba:3b:58:17:77:cc:ec:b4:2e:c2:ca:69:1c:d1:9f:59:d4:
ce:17:34:84:f0:88:c3:1b:40:35:40:47:d2:f3:b5:19:b0:35:
34:98:62:83:38:41:b8:ff:5d:80:3c:c3:d2:57:f9:98:28:f7:
05:08:d7:19:46:ce:77:77:cb:61:77:31:a9:3b:26:27:c3:5f:
5e:c8:2d:32:22:5f:cf:f4:f5:af:ca:79:37:df:d4:f8:e4:d8:
ca:32:52:a3:09:5c:48:a0:84:87:5d:4d:60:e9:50:5c:e6:7d:
13:c4:e6:60:2a:fb:d6:a8:82:8d:06:9a:c8:83:c5:82:79:af:
7a:47:8a:c4:24:21:0c:4c:1e:fc:f4:2c:e2:73:da:02:ea:07:
9a:d4:7d:ef:b9:4b:31:76:17:7a:27:40:ba:17:20:07:3a:7a:
da:58:c5:49:8c:70:1f:1c:bc:a8:f6:d6:de:6b:7e:3e:8f:7b:
09:3b:7c:bb:64:b6:df:4b:36:0d:0c:1c:f7:6d:72:9c:8c:a8:
55:c8:35:52:f6:bd:0b:42:b4:7f:57:59:4d:ef:de:26:8f:a2:
00:2d:0a:7d:63:bb:fe:18:34:fb:62:92:ff:12:2a:cb:57:88:
f9:a7:5d:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDzkk1FsDko8z+Pi3wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIxMTA1MDAwMFoXDTIyMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
Mzc3NjBkM2YtZTI1My00NGI4LThkMWEtZDczZDNjOTJiNTkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1aqLe3HP6HMaJPWiF/Or+d3sxxxZ5a1zlyA
y4wwJemoOEAzmHenXO5xk4Ec1VwyTY8b7AymB5AFinp8WVhrSa4pea5m5nu+VIWD
FR0a6ZOmW6wJOhEwiC1a3GSwxSbRMZJdi4hpY7tWNlL7/tvFFOqHs7339/iJmrNY
X779q+lrazcIxu8plqs26HVT+OtQ8pLsRLTAXNzHoIzomvAe2wpePJwQA9D2/j8U
fDHOVx/lNYxrtP27E8AOkVJAAEvD7kQjqDIpbylyfFYb4N0jvkLEPKcBo/cjHntX
boAPALPz/ErVI6EmPzbYFnnejkLeUEoekJhJHCHvH2PdysXwjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCX2zazrxEiFwj5lRjr/2JbD/mJXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMTg2ZjJlMGEtODE1Zi0z
MDU4LTlkNDMtMDFjNzUwZDdlYmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHNHyAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIXc2xSGa9Urea5fVvRMgMp5q4G6O1gXd8zstC7Cymkc0Z9Z1M4XNITw
iMMbQDVAR9LztRmwNTSYYoM4Qbj/XYA8w9JX+Zgo9wUI1xlGznd3y2F3Mak7JifD
X17ILTIiX8/09a/KeTff1Pjk2MoyUqMJXEighIddTWDpUFzmfRPE5mAq+9aogo0G
msiDxYJ5r3pHisQkIQxMHvz0LOJz2gLqB5rUfe+5SzF2F3onQLoXIAc6etpYxUmM
cB8cvKj21t5rfj6Pewk7fLtktt9LNg0MHPdtcpyMqFXINVL2vQtCtH9XWU3v3iaP
ogAtCn1ju/4YNPtikv8SKstXiPmnXUc=
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:30:40 2025 by rpki-client