Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29ccb3cb-81be-37e6-bd28-97c9791e2485.roa
File: 29ccb3cb-81be-37e6-bd28-97c9791e2485.roa (raw, json)
Hash identifier: WbF6RwB8ezhFisfFn0XOuuRtzc0lE/UIvHazbByOPFo=
Subject key identifier: 81:E6:F6:15:AA:8C:1D:AD:7C:C6:38:83:67:F2:74:EF:85:C4:95:AB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D647A11C4EB779ECA2403B640
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29ccb3cb-81be-37e6-bd28-97c9791e2485.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 03 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:64:7a:11:c4:eb:77:9e:ca:24:03:b6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : May 3 04:00:00 2022 GMT
Subject: CN=ced5172a-11ab-4612-b1fd-4c326cf8e153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:56:b9:b9:09:fa:80:20:4b:3e:60:77:c3:72:
c7:e6:d1:52:d1:ee:9c:e8:43:ef:a7:ea:db:5e:93:
59:fb:72:91:42:f0:6f:fb:fd:7b:54:8f:7d:98:ae:
c5:20:35:b1:20:64:2f:0c:0c:00:2d:e6:b8:fd:c3:
cd:e7:f3:a4:d4:7b:01:66:34:3b:d9:ba:db:1e:95:
b0:ab:0f:2d:b1:43:35:17:e7:01:88:48:56:4c:41:
7d:8a:6d:f9:7a:bd:a3:84:a4:af:f4:d8:31:28:ab:
bd:b5:fa:22:b6:c9:69:0a:85:3c:47:58:f3:60:92:
6b:d0:c0:40:58:2b:8f:e5:eb:d6:4f:ab:34:19:17:
48:93:f0:9b:44:ae:96:0e:bb:81:32:f7:ea:40:77:
df:8b:0e:26:a1:20:d6:90:45:8b:0a:c0:89:f2:fe:
a1:70:a3:ed:00:fa:cb:07:5d:c6:e7:a6:6b:52:86:
6d:aa:8c:3d:e7:08:8b:45:7c:9b:b8:b9:02:4b:02:
9d:35:e7:95:69:e3:f1:7f:f7:3e:6b:bd:81:23:bf:
44:75:37:b4:37:4c:d2:d6:18:de:7b:6a:ce:da:85:
a9:df:78:b1:79:b8:16:ab:71:5a:d5:87:bf:ec:79:
79:8a:b4:c1:e2:56:66:c7:a8:08:bf:41:55:8e:d1:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E6:F6:15:AA:8C:1D:AD:7C:C6:38:83:67:F2:74:EF:85:C4:95:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29ccb3cb-81be-37e6-bd28-97c9791e2485.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:8b:07:68:30:ff:ff:98:e7:97:45:d2:58:ae:30:53:2f:cc:
b6:d6:28:0b:20:58:bf:19:44:73:b2:c7:5d:f9:90:8a:29:7c:
87:5b:9a:03:bf:2c:6e:1d:d9:ed:77:51:d9:d5:6e:f0:f4:14:
6b:33:00:a2:24:f9:b6:ce:25:31:15:26:da:73:47:b7:47:43:
ae:bb:0b:4a:f6:a1:e0:6b:49:1c:18:54:fc:c8:23:8d:29:7d:
60:f7:f9:8c:5a:0d:c3:58:60:05:b3:0b:10:33:f5:7d:ed:8c:
43:82:b1:8e:01:dd:67:4b:9b:4e:1d:2d:e1:3e:8d:9c:e0:6e:
9e:ba:99:49:65:a0:59:d0:41:73:e1:d5:56:b6:97:3c:af:d2:
7f:d1:b3:d9:9f:de:f6:d8:49:a9:93:39:82:60:68:01:d9:b3:
cd:77:68:0a:2a:09:3d:52:28:a9:ff:4b:54:41:81:41:f4:72:
60:b9:da:a9:b0:31:f0:92:30:41:7b:d5:92:75:ac:a6:c8:c9:
f9:30:4c:80:c0:47:7e:e2:77:6c:38:c0:ad:f7:08:78:13:62:
72:56:7c:1b:d2:56:57:c2:96:c0:5a:6c:bb:4f:7c:67:ea:ec:
05:35:44:e5:8c:48:a3:c2:bf:1f:95:9a:0c:7c:f2:98:37:7e:
f2:64:08:b1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1kehHE63eeyiQDtkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMyOTA0MDAwMFoXDTIyMDUwMzA0MDAwMFowLzEtMCsGA1UEAxMk
Y2VkNTE3MmEtMTFhYi00NjEyLWIxZmQtNGMzMjZjZjhlMTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVa5uQn6gCBLPmB3w3LH5tFS0e6c6EPvp+rb
XpNZ+3KRQvBv+/17VI99mK7FIDWxIGQvDAwALea4/cPN5/Ok1HsBZjQ72brbHpWw
qw8tsUM1F+cBiEhWTEF9im35er2jhKSv9NgxKKu9tfoitslpCoU8R1jzYJJr0MBA
WCuP5evWT6s0GRdIk/CbRK6WDruBMvfqQHffiw4moSDWkEWLCsCJ8v6hcKPtAPrL
B13G56ZrUoZtqow95wiLRXybuLkCSwKdNeeVaePxf/c+a72BI79EdTe0N0zS1hje
e2rO2oWp33ixebgWq3Fa1Ye/7Hl5irTB4lZmx6gIv0FVjtE/xQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIHm9hWqjB2tfMY4g2fydO+FxJWrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMjljY2IzY2ItODFiZS0z
N2U2LWJkMjgtOTdjOTc5MWUyNDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiIIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgosHaDD//5jnl0XSWK4wUy/MttYoCyBYvxlEc7LHXfmQiil8h1uaA78s
bh3Z7XdR2dVu8PQUazMAoiT5ts4lMRUm2nNHt0dDrrsLSvah4GtJHBhU/MgjjSl9
YPf5jFoNw1hgBbMLEDP1fe2MQ4KxjgHdZ0ubTh0t4T6NnOBunrqZSWWgWdBBc+HV
VraXPK/Sf9Gz2Z/e9thJqZM5gmBoAdmzzXdoCioJPVIoqf9LVEGBQfRyYLnaqbAx
8JIwQXvVknWspsjJ+TBMgMBHfuJ3bDjArfcIeBNiclZ8G9JWV8KWwFpsu098Z+rs
BTVE5YxIo8K/H5WaDHzymDd+8mQIsQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:00:21 2025 by rpki-client