Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ef7c61a-4608-39a9-b32c-223c804e8b84.roa
File: 1ef7c61a-4608-39a9-b32c-223c804e8b84.roa (raw, json)
Hash identifier: mO2Sjl3vqCK40IS/Pwra3bglnevnAeV4SEQ0XYcCWHo=
Subject key identifier: B5:E3:D5:05:F2:1E:FE:0A:F2:31:36:21:8F:BD:E3:AD:A4:FC:9F:E0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0D65D53C93139A44BED29980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ef7c61a-4608-39a9-b32c-223c804e8b84.roa
Signing time: Sat 27 Aug 2022 12:00:00 +0000
ROA not before: Sat 27 Aug 2022 12:00:00 +0000
ROA not after: Sun 02 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 129.160.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0d:65:d5:3c:93:13:9a:44:be:d2:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 27 12:00:00 2022 GMT
Not After : Oct 2 04:00:00 2022 GMT
Subject: CN=e84f1fd5-b6ad-4f4c-bd7c-5857cb95e936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:08:40:cb:1f:99:9d:8e:d4:85:13:07:07:c4:
ca:c8:c6:00:85:ea:38:18:26:41:73:e6:5d:cd:66:
93:aa:bd:cc:ad:af:19:d7:3c:d0:b4:f3:9a:4a:d6:
f0:a3:d0:14:0e:0e:8c:e1:dd:c5:8c:de:49:d8:60:
9f:e5:9e:ec:98:50:b6:67:d3:52:a4:6d:57:c2:e4:
de:b6:74:6c:c1:56:3a:15:5e:9d:6b:b3:c6:0b:2f:
6f:53:4d:ed:49:23:87:0a:f0:f7:7b:f4:35:b4:b1:
c7:1e:63:51:4e:58:ce:f1:b2:c9:36:17:a4:54:ea:
c4:b0:e8:57:cb:7b:c6:5a:8a:2c:54:ac:0d:25:3a:
c0:0e:b6:ff:9d:9d:70:bf:fa:84:8e:57:be:30:b5:
ec:b8:4a:66:33:83:66:0b:fc:6e:3e:77:43:b5:da:
90:e5:b4:c5:93:59:85:40:98:f4:2d:d1:f5:a0:f9:
1f:67:8f:31:10:c1:b3:58:3c:87:b0:0c:96:d6:f9:
b5:d7:21:cb:55:26:a1:b6:af:75:fe:c9:2f:9e:6a:
a6:bd:ab:41:9a:72:63:d0:ad:90:a8:74:4a:89:b6:
ea:14:f7:08:d4:d1:e3:6e:c5:7f:82:73:27:6f:43:
c7:ab:dc:08:b6:66:fb:af:28:b4:a4:46:61:f5:f5:
d2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E3:D5:05:F2:1E:FE:0A:F2:31:36:21:8F:BD:E3:AD:A4:FC:9F:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ef7c61a-4608-39a9-b32c-223c804e8b84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
129.160.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:7c:0b:bb:bf:f7:d0:9a:56:24:c9:23:c1:65:47:9f:7f:a7:
eb:62:77:dc:2c:8c:ae:d3:b7:35:78:e9:13:3c:35:30:2a:9e:
79:87:da:6d:cd:1d:a7:82:c8:28:f3:a6:94:6b:8f:a1:af:8b:
4a:7f:8a:60:96:6f:cf:8d:78:06:fc:b7:09:3d:8c:31:5d:12:
f6:6a:d0:c0:8e:14:0b:1c:e4:8e:d7:a5:21:3e:fd:b9:82:8b:
cc:75:5b:e0:9d:d8:84:0a:f5:e0:09:7e:41:1b:a9:e5:8c:79:
8a:72:91:6f:b1:19:23:c0:58:cc:e6:44:50:57:f2:d3:90:21:
60:05:e6:b6:d9:c1:63:1f:06:bb:e8:06:1a:5a:f2:e5:43:d6:
43:33:65:0e:cf:2e:24:01:e2:23:a9:ee:2e:74:09:d4:01:ee:
6e:80:e8:8f:74:b2:a3:a9:4c:91:a3:ce:e5:65:ad:db:57:c3:
53:37:7a:7a:8e:c8:84:a5:37:b4:c2:4f:c0:a9:1f:65:fd:4e:
8a:d7:45:30:54:21:f5:a1:27:01:20:5e:c3:79:65:25:a6:24:
37:61:87:21:0d:58:1c:95:84:e5:07:d4:53:ae:fd:b2:80:b2:
14:aa:9c:f9:69:49:b6:72:56:79:34:95:2d:3a:ad:76:1e:45:
de:70:dd:bb
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8NZdU8kxOaRL7SmYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgyNzEyMDAwMFoXDTIyMTAwMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZTg0ZjFmZDUtYjZhZC00ZjRjLWJkN2MtNTg1N2NiOTVlOTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmghAyx+ZnY7UhRMHB8TKyMYAheo4GCZBc+Zd
zWaTqr3Mra8Z1zzQtPOaStbwo9AUDg6M4d3FjN5J2GCf5Z7smFC2Z9NSpG1XwuTe
tnRswVY6FV6da7PGCy9vU03tSSOHCvD3e/Q1tLHHHmNRTljO8bLJNhekVOrEsOhX
y3vGWoosVKwNJTrADrb/nZ1wv/qEjle+MLXsuEpmM4NmC/xuPndDtdqQ5bTFk1mF
QJj0LdH1oPkfZ48xEMGzWDyHsAyW1vm11yHLVSahtq91/skvnmqmvatBmnJj0K2Q
qHRKibbqFPcI1NHjbsV/gnMnb0PHq9wItmb7ryi0pEZh9fXSXwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLXj1QXyHv4K8jE2IY+9462k/J/gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMWVmN2M2MWEtNDYwOC0z
OWE5LWIzMmMtMjIzYzgwNGU4Yjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgaAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAHXwLu7/30JpWJMkjwWVHn3+n62J33CyMrtO3NXjpEzw1MCqeeYfabc0d
p4LIKPOmlGuPoa+LSn+KYJZvz414Bvy3CT2MMV0S9mrQwI4UCxzkjtelIT79uYKL
zHVb4J3YhAr14Al+QRup5Yx5inKRb7EZI8BYzOZEUFfy05AhYAXmttnBYx8Gu+gG
Glry5UPWQzNlDs8uJAHiI6nuLnQJ1AHuboDoj3Syo6lMkaPO5WWt21fDUzd6eo7I
hKU3tMJPwKkfZf1OitdFMFQh9aEnASBew3llJaYkN2GHIQ1YHJWE5QfUU679soCy
FKqc+WlJtnJWeTSVLTqtdh5F3nDduw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 21:36:03 2025 by rpki-client