Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/19ab76d1-f56e-3054-a952-6b66a9faf474.roa
File: 19ab76d1-f56e-3054-a952-6b66a9faf474.roa (raw, json)
Hash identifier: 3Da+ZtG874DQ3urz9gF9BBS3Erf4bCGB1JFHuLou7Sc=
Subject key identifier: 26:68:67:77:E1:0A:B9:DF:21:77:B2:EF:B0:56:D0:3B:C0:BE:23:6B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F87C4ABE47E46095264254700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/19ab76d1-f56e-3054-a952-6b66a9faf474.roa
Signing time: Mon 10 Oct 2022 12:00:00 +0000
ROA not before: Mon 10 Oct 2022 12:00:00 +0000
ROA not after: Tue 15 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 136.134.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:87:c4:ab:e4:7e:46:09:52:64:25:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 12:00:00 2022 GMT
Not After : Nov 15 05:00:00 2022 GMT
Subject: CN=aa749a6c-047e-439a-a2e6-07c325484b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:f3:fb:fd:d1:04:dd:74:30:8f:7a:4b:32:
e4:1b:08:e4:1a:75:ef:5b:35:2c:0c:96:b0:b7:26:
1c:bc:b1:7a:4b:47:ce:67:60:23:63:44:7e:7f:04:
b8:7b:b4:dc:d0:f2:5d:ef:28:52:43:37:ab:f1:ef:
8f:ae:93:ab:71:c2:b1:da:31:08:e5:24:31:7f:70:
be:2a:50:ac:82:bf:a5:61:15:96:21:7b:a8:c1:cf:
25:38:e1:97:5b:80:7a:61:25:11:e3:b0:28:91:ef:
2b:e6:31:3f:c1:93:6d:d1:d0:95:ae:bc:9b:0f:c3:
dc:c3:cb:a0:a8:b6:e5:0b:54:79:74:b1:db:75:53:
26:c6:12:89:4c:43:ee:3b:bf:92:ac:21:2f:fc:06:
d5:49:00:d4:99:16:38:9d:cc:30:da:df:9b:76:c2:
e5:c2:43:d7:25:20:c8:7b:1c:f4:0a:31:ea:ea:5e:
f4:6f:16:6c:b6:bb:9a:4e:b7:74:ba:eb:13:2e:d2:
b1:fa:67:98:8e:d7:ef:6c:d7:d9:6d:ac:54:90:5f:
0f:ef:0f:34:03:64:69:44:09:d8:3f:af:9d:3f:0f:
dd:63:83:5d:12:aa:53:b8:0a:a3:4c:3a:c6:ba:c7:
77:f2:50:8d:4f:1d:52:9b:92:fa:32:ec:1f:2f:01:
81:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:68:67:77:E1:0A:B9:DF:21:77:B2:EF:B0:56:D0:3B:C0:BE:23:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/19ab76d1-f56e-3054-a952-6b66a9faf474.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.134.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:5a:2f:74:22:f2:3b:21:bc:aa:18:d9:18:65:7b:aa:ac:95:
38:93:01:74:fc:81:8c:fd:79:11:be:f5:7a:c7:18:9b:9d:c8:
40:e3:6f:a4:12:f8:53:32:8c:08:24:7e:9d:67:bb:24:8f:8a:
07:ef:63:86:3f:a2:7c:41:f5:da:42:02:87:4f:ab:22:0d:97:
3f:b7:45:a4:e6:5e:be:1e:68:23:bf:e4:67:d3:a6:20:a0:53:
2d:57:98:7e:bd:e7:9c:28:60:2e:d4:00:28:25:6c:df:88:b4:
cb:6f:6c:33:ac:d5:eb:f1:f5:a4:2e:32:bb:da:d5:5b:74:94:
22:01:05:88:34:91:61:7c:f1:fa:7f:85:6e:48:ed:8d:be:fa:
cb:8e:81:6d:f4:31:0f:ee:c9:e3:65:e7:18:7f:04:55:9c:81:
dd:07:4e:65:c9:17:a6:fe:ea:25:75:de:9c:f3:cd:6c:a7:b1:
63:29:0a:f6:b7:7b:48:3b:e1:2d:13:16:27:d9:28:1a:ad:53:
99:d6:92:af:05:63:36:15:b4:44:6c:4a:ef:88:a9:a4:4d:41:
a1:dc:f1:ba:e6:32:69:b3:49:3e:08:59:bc:3d:a8:dd:57:b2:
6f:42:7f:19:05:90:18:56:37:d4:9e:ff:a7:7c:cd:ae:ce:6a:
10:60:4f:3e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+HxKvkfkYJUmQlRwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAxMDEyMDAwMFoXDTIyMTExNTA1MDAwMFowLzEtMCsGA1UEAxMk
YWE3NDlhNmMtMDQ3ZS00MzlhLWEyZTYtMDdjMzI1NDg0YjA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV7z+/3RBN10MI96SzLkGwjkGnXvWzUsDJaw
tyYcvLF6S0fOZ2AjY0R+fwS4e7Tc0PJd7yhSQzer8e+PrpOrccKx2jEI5SQxf3C+
KlCsgr+lYRWWIXuowc8lOOGXW4B6YSUR47Aoke8r5jE/wZNt0dCVrrybD8Pcw8ug
qLblC1R5dLHbdVMmxhKJTEPuO7+SrCEv/AbVSQDUmRY4ncww2t+bdsLlwkPXJSDI
exz0CjHq6l70bxZstruaTrd0uusTLtKx+meYjtfvbNfZbaxUkF8P7w80A2RpRAnY
P6+dPw/dY4NdEqpTuAqjTDrGusd38lCNTx1Sm5L6MuwfLwGBQwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCZoZ3fhCrnfIXey77BW0DvAviNrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMTlhYjc2ZDEtZjU2ZS0z
MDU0LWE5NTItNmI2NmE5ZmFmNDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiIYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAClovdCLyOyG8qhjZGGV7qqyVOJMBdPyBjP15Eb71escYm53IQONvpBL4
UzKMCCR+nWe7JI+KB+9jhj+ifEH12kICh0+rIg2XP7dFpOZevh5oI7/kZ9OmIKBT
LVeYfr3nnChgLtQAKCVs34i0y29sM6zV6/H1pC4yu9rVW3SUIgEFiDSRYXzx+n+F
bkjtjb76y46BbfQxD+7J42XnGH8EVZyB3QdOZckXpv7qJXXenPPNbKexYykK9rd7
SDvhLRMWJ9koGq1TmdaSrwVjNhW0RGxK74ippE1BodzxuuYyabNJPghZvD2o3Vey
b0J/GQWQGFY31J7/p3zNrs5qEGBPPg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:00:34 2025 by rpki-client