Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/299de3d7-7d05-3ef2-83f5-7ea35185b561.roa
File: 299de3d7-7d05-3ef2-83f5-7ea35185b561.roa (raw, json)
Hash identifier: SYwTgT3nyuuAimeQdpJJXv1WGlgn09i53W2uZNNOsL8=
Subject key identifier: AB:AB:BD:89:FE:FA:02:AB:F3:86:10:C6:A9:78:4F:08:A1:03:F3:DA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CC80CC43984FDF42937D39A20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/299de3d7-7d05-3ef2-83f5-7ea35185b561.roa
Signing time: Tue 01 Feb 2022 05:00:00 +0000
ROA not before: Tue 01 Feb 2022 05:00:00 +0000
ROA not after: Tue 08 Mar 2022 05:00:00 +0000
asID: 14618
IP address blocks: 136.4.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:c8:0c:c4:39:84:fd:f4:29:37:d3:9a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 1 05:00:00 2022 GMT
Not After : Mar 8 05:00:00 2022 GMT
Subject: CN=d99949c4-6bce-4735-81a2-959caa869dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:33:74:c8:cf:7d:94:0b:1c:c2:f9:d9:51:
cb:53:f5:04:3e:41:49:06:55:eb:40:73:aa:89:4d:
b3:f1:2d:70:aa:b7:b9:d8:2f:db:0a:f5:34:69:3d:
dc:fc:6a:ad:36:48:b4:9d:f6:d8:36:14:ce:01:ad:
98:47:d1:bf:ec:e2:76:a2:c6:09:ec:69:ba:22:38:
aa:e3:25:4b:83:45:a5:6e:d2:51:ce:c0:56:f2:a6:
60:b5:30:10:24:5e:92:89:1e:19:3f:fa:bb:cd:9d:
8e:31:78:20:d1:97:ca:65:a1:38:a2:58:99:b8:fb:
c8:89:38:9f:b7:c9:01:fe:51:99:0e:ce:65:4d:0f:
94:4e:28:83:53:f3:65:33:a3:09:f4:28:f8:2c:0b:
71:cf:12:50:ad:0f:bf:c5:ca:ea:1d:08:ed:27:d3:
19:64:4d:6d:89:14:c4:99:c1:aa:02:36:fc:bd:05:
7a:f9:cc:3a:cc:93:99:5e:b2:92:bc:7a:c2:f6:17:
fc:ea:35:b8:90:34:26:51:b3:55:ad:52:94:cb:6a:
2a:ae:36:d3:c9:79:ea:ae:9d:fc:38:8c:e8:94:d0:
39:d5:0c:cb:2f:72:5f:8b:54:2e:d9:44:39:cd:b7:
c6:c0:d5:ae:b7:04:07:a7:fe:62:a0:be:4c:3a:13:
32:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AB:BD:89:FE:FA:02:AB:F3:86:10:C6:A9:78:4F:08:A1:03:F3:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/299de3d7-7d05-3ef2-83f5-7ea35185b561.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.4.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:ab:dd:8c:cf:2c:46:38:dc:f2:ae:cd:ad:fa:a2:94:22:66:
3c:39:c7:2c:eb:3a:ee:e4:89:81:8f:0e:00:ef:72:03:a2:a7:
94:2e:09:d9:1d:c2:22:8a:bc:85:cb:35:be:b5:ec:76:28:2e:
a7:8b:35:a0:eb:f1:01:a1:47:81:43:05:c5:47:26:b4:ea:d9:
06:ef:78:cd:b7:64:83:52:67:e2:c3:67:2e:d0:42:dd:91:ff:
83:55:e3:06:51:1c:2b:0c:9d:ba:b3:e4:bb:2e:b5:f2:d0:0d:
8b:18:73:b4:bf:c9:6a:bd:4d:17:d7:f6:54:d3:a5:2d:9d:d4:
d3:01:a4:57:d6:e6:e3:48:da:9c:b4:f0:5d:01:30:a2:d0:8b:
0e:b1:59:4d:09:b1:44:d8:42:13:c3:73:ce:02:0a:ad:45:09:
ae:fd:16:c5:ed:21:77:d9:e9:a8:08:64:8c:0b:36:d0:eb:1a:
3d:4a:4b:7d:ad:06:a9:86:7a:09:49:1f:b1:54:92:02:a5:31:
d8:cc:44:0b:fd:f0:2f:2b:2c:fb:26:7e:55:99:f5:6b:29:a5:
1e:c4:a3:77:66:64:1b:d8:4f:9b:62:70:88:f5:ea:e7:89:64:
48:7a:71:a5:93:92:66:b0:14:5b:28:8e:78:7c:af:9d:68:96:
ba:bc:28:0e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzIDMQ5hP30KTfTmiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIwMTA1MDAwMFoXDTIyMDMwODA1MDAwMFowLzEtMCsGA1UEAxMk
ZDk5OTQ5YzQtNmJjZS00NzM1LTgxYTItOTU5Y2FhODY5ZGFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWgzdMjPfZQLHML52VHLU/UEPkFJBlXrQHOq
iU2z8S1wqre52C/bCvU0aT3c/GqtNki0nfbYNhTOAa2YR9G/7OJ2osYJ7Gm6Ijiq
4yVLg0WlbtJRzsBW8qZgtTAQJF6SiR4ZP/q7zZ2OMXgg0ZfKZaE4oliZuPvIiTif
t8kB/lGZDs5lTQ+UTiiDU/NlM6MJ9Cj4LAtxzxJQrQ+/xcrqHQjtJ9MZZE1tiRTE
mcGqAjb8vQV6+cw6zJOZXrKSvHrC9hf86jW4kDQmUbNVrVKUy2oqrjbTyXnqrp38
OIzolNA51QzLL3Jfi1Qu2UQ5zbfGwNWutwQHp/5ioL5MOhMy/wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKurvYn++gKr84YQxql4TwihA/PaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMjk5ZGUzZDctN2QwNS0z
ZWYyLTgzZjUtN2VhMzUxODViNTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCiAQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEABavdjM8sRjjc8q7NrfqilCJmPDnHLOs67uSJgY8OAO9yA6KnlC4J2R3C
Ioq8hcs1vrXsdigup4s1oOvxAaFHgUMFxUcmtOrZBu94zbdkg1Jn4sNnLtBC3ZH/
g1XjBlEcKwydurPkuy618tANixhztL/Jar1NF9f2VNOlLZ3U0wGkV9bm40janLTw
XQEwotCLDrFZTQmxRNhCE8NzzgIKrUUJrv0Wxe0hd9npqAhkjAs20OsaPUpLfa0G
qYZ6CUkfsVSSAqUx2MxEC/3wLyss+yZ+VZn1aymlHsSjd2ZkG9hPm2JwiPXq54lk
SHpxpZOSZrAUWyiOeHyvnWiWurwoDg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:27:17 2025 by rpki-client