Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c1b0cea-b671-368e-bee5-6519dcbe6adb.roa
File: 2c1b0cea-b671-368e-bee5-6519dcbe6adb.roa (raw, json)
Hash identifier: fkbt9pPIZFDpqrRh8rSk6DYEmIoeSs6H1K4RbyxTbHg=
Subject key identifier: CE:B0:FB:72:5A:BE:95:56:DE:B6:02:12:1E:D8:3D:25:8B:CC:D3:A6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840BC8B9736C08AC7EC38502700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c1b0cea-b671-368e-bee5-6519dcbe6adb.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 47.255.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bc:8b:97:36:c0:8a:c7:ec:38:50:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=a98b96c7-8145-477a-94a4-94e8b7bb0287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:56:be:de:95:ea:ba:9c:fa:9a:7b:95:f9:01:
68:6b:b1:77:7a:f2:86:47:9b:65:6a:2e:1f:fa:79:
23:53:1b:2a:f0:7e:1e:e1:96:ef:f0:b8:19:30:28:
de:26:c4:25:b8:ac:47:26:47:89:c4:d4:59:df:4d:
f4:1c:41:57:74:bc:ca:35:3e:24:ab:1b:b6:65:67:
23:4a:89:5c:0b:88:3f:26:07:f5:ea:0d:03:62:03:
44:8a:1f:e8:e2:cc:69:1e:f7:ee:bc:6e:80:d8:90:
d8:98:fa:85:eb:11:ee:7e:3f:98:47:b3:f6:12:70:
94:d7:55:5c:61:d8:d0:3e:7d:86:b9:3a:3f:15:3e:
f0:28:1e:85:3e:6d:d7:16:4d:5a:28:15:73:8a:b8:
b2:73:ed:51:f6:bb:56:a7:9f:5c:97:50:b0:65:f5:
3f:e8:de:ce:c9:85:e5:95:35:65:cf:06:97:44:f8:
a5:66:b4:26:ef:21:38:a9:8b:62:f6:43:4c:ca:ca:
66:9e:43:79:db:7f:44:19:42:88:71:ba:d6:bf:34:
af:7c:65:05:7b:ba:4a:8f:7f:a0:40:33:c8:6d:e8:
ce:f0:0c:a0:de:58:43:a2:ba:b1:12:76:0c:a4:08:
b3:1d:5e:15:b5:6d:bc:76:ca:34:17:4b:6a:cc:9e:
18:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B0:FB:72:5A:BE:95:56:DE:B6:02:12:1E:D8:3D:25:8B:CC:D3:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c1b0cea-b671-368e-bee5-6519dcbe6adb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
47.255.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:52:16:99:62:1b:6b:9d:2c:6d:89:a1:ee:37:d9:2d:f6:0c:
90:3f:97:bd:79:c4:6e:35:47:da:a6:98:cc:cc:d1:28:1c:1c:
b2:70:a6:c4:1d:23:f1:d4:cd:8b:b6:34:3f:16:10:75:31:f3:
d0:9a:27:4b:15:61:12:bf:be:81:ce:4f:32:34:b3:fd:e2:bf:
f3:1f:47:67:8d:80:29:a4:5e:52:15:e5:9f:ef:00:c9:f6:75:
6d:0a:11:be:5d:79:ca:88:53:66:78:e7:05:68:7c:46:9f:90:
18:03:43:23:1d:b4:f2:78:d6:82:0b:59:79:05:6c:3f:f2:43:
27:9c:1f:fb:41:1b:2b:5c:db:27:d8:f2:38:74:16:ef:1f:af:
64:2e:aa:d0:9c:6d:ee:0e:c1:f9:d7:82:88:14:3a:68:9c:57:
3f:c7:62:db:cc:dc:4b:c1:61:64:33:18:d7:9c:f0:ee:bb:7f:
6e:f8:32:19:47:00:a0:26:83:27:f6:4c:eb:15:83:ef:56:83:
d5:3e:62:a8:57:0b:7d:14:fc:4d:dd:98:4a:a0:66:fb:0f:83:
4d:02:0f:32:44:58:fd:b0:bb:c6:c0:8f:de:25:81:22:f0:0d:
6c:ad:fb:a5:01:18:89:b8:2f:9e:b0:c4:13:a1:62:2a:35:45:
da:4f:15:44
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEC8i5c2wIrH7DhQJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEyODEyMDAwMFoXDTIzMDMwNTA1MDAwMFowLzEtMCsGA1UEAxMk
YTk4Yjk2YzctODE0NS00NzdhLTk0YTQtOTRlOGI3YmIwMjg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8la+3pXqupz6mnuV+QFoa7F3evKGR5tlai4f
+nkjUxsq8H4e4Zbv8LgZMCjeJsQluKxHJkeJxNRZ3030HEFXdLzKNT4kqxu2ZWcj
SolcC4g/Jgf16g0DYgNEih/o4sxpHvfuvG6A2JDYmPqF6xHufj+YR7P2EnCU11Vc
YdjQPn2GuTo/FT7wKB6FPm3XFk1aKBVziriyc+1R9rtWp59cl1CwZfU/6N7OyYXl
lTVlzwaXRPilZrQm7yE4qYti9kNMyspmnkN5239EGUKIcbrWvzSvfGUFe7pKj3+g
QDPIbejO8Ayg3lhDorqxEnYMpAizHV4VtW28dso0F0tqzJ4YxwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFM6w+3JavpVW3rYCEh7YPSWLzNOmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMmMxYjBjZWEtYjY3MS0z
NjhlLWJlZTUtNjUxOWRjYmU2YWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAL/8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEALVIWmWIba50sbYmh7jfZLfYMkD+XvXnEbjVH2qaYzMzRKBwcsnCmxB0j
8dTNi7Y0PxYQdTHz0JonSxVhEr++gc5PMjSz/eK/8x9HZ42AKaReUhXln+8AyfZ1
bQoRvl15yohTZnjnBWh8Rp+QGANDIx208njWggtZeQVsP/JDJ5wf+0EbK1zbJ9jy
OHQW7x+vZC6q0Jxt7g7B+deCiBQ6aJxXP8di28zcS8FhZDMY15zw7rt/bvgyGUcA
oCaDJ/ZM6xWD71aD1T5iqFcLfRT8Td2YSqBm+w+DTQIPMkRY/bC7xsCP3iWBIvAN
bK37pQEYibgvnrDEE6FiKjVF2k8VRA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:00:21 2025 by rpki-client