Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3021f0be-22d8-38f9-9b4a-b8d7c029690a.roa
File: 3021f0be-22d8-38f9-9b4a-b8d7c029690a.roa (raw, json)
Hash identifier: aOCXVPJxgW07pE86lYIi0XbeqhAxEdV78uIO+hhTnro=
Subject key identifier: BC:82:81:AC:8A:2A:FC:BA:94:1D:82:12:DE:DF:9E:D9:80:31:8F:E8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F903B0A3CFDBB0B0AB5681840
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3021f0be-22d8-38f9-9b4a-b8d7c029690a.roa
Signing time: Thu 13 Oct 2022 12:00:00 +0000
ROA not before: Thu 13 Oct 2022 12:00:00 +0000
ROA not after: Fri 18 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 136.12.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:90:3b:0a:3c:fd:bb:0b:0a:b5:68:18:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 13 12:00:00 2022 GMT
Not After : Nov 18 05:00:00 2022 GMT
Subject: CN=24d55b70-0c9b-4360-b4f9-3dc010351c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:96:23:3c:27:87:25:c4:20:df:4e:77:21:8d:
88:3b:c4:a3:38:a8:84:98:37:f1:02:df:db:46:68:
cd:cd:be:c4:4d:a1:65:6b:6e:f0:c9:d4:36:76:c2:
b0:6f:11:f7:34:39:2a:89:2e:7c:93:38:8a:c4:6a:
0a:46:80:03:36:ff:c2:3f:6b:c4:14:f8:09:69:99:
ce:75:35:d7:75:5f:e6:92:07:78:72:46:15:70:6c:
f9:a6:ea:63:f3:97:83:9f:33:5b:3b:04:83:1c:56:
e5:2a:e5:62:9b:ef:28:fc:00:57:0d:31:7a:d2:20:
2d:c7:fb:db:ed:4d:b3:a8:13:d1:aa:c3:37:f4:25:
f0:59:3c:ac:82:45:8e:3f:37:a4:ca:28:85:62:25:
e9:ee:e0:a9:50:90:e7:d3:36:d0:60:94:8d:5e:c9:
9d:fe:a3:11:7b:06:32:59:16:1a:98:fa:81:15:13:
78:f3:c8:a9:20:74:8f:02:ef:7d:59:b7:89:0c:ef:
85:0f:20:b4:64:b6:85:16:b9:f1:c7:ed:e1:6e:1a:
6d:42:96:77:ae:7b:95:98:bf:f9:ad:e2:5c:48:0c:
2d:af:64:69:ef:35:45:2f:4c:99:19:ee:b5:c6:a2:
95:bc:ef:a3:cb:ae:24:18:96:be:af:93:c4:f1:78:
51:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:82:81:AC:8A:2A:FC:BA:94:1D:82:12:DE:DF:9E:D9:80:31:8F:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3021f0be-22d8-38f9-9b4a-b8d7c029690a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.12.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:95:ec:04:13:18:f1:99:f3:8b:d3:27:95:6a:cf:39:f3:ee:
56:f2:d7:41:c9:5c:35:c4:f1:89:84:f2:df:f5:05:e0:bd:f5:
96:a5:4a:58:84:af:d1:c9:29:38:31:2b:77:7e:5d:d6:8b:15:
c9:0e:77:64:1b:be:c9:1e:d3:bd:7b:4c:fd:bc:74:72:5a:df:
b9:b0:96:82:f0:39:14:5e:1e:57:e2:d3:c1:1d:2a:55:6f:4d:
ad:6e:cf:9f:ed:5b:e2:be:4f:89:7d:5c:88:4d:b6:21:8b:a8:
72:0b:5f:7a:28:bb:f9:57:df:66:ed:3e:c0:36:59:7a:b8:93:
5f:70:72:12:20:ee:3a:3f:a2:78:24:2d:ec:18:ea:e5:19:dc:
7a:c5:c3:2c:c5:e1:27:60:b2:38:ed:9f:be:b5:72:70:eb:80:
20:b7:ed:de:ae:08:03:24:cf:50:f7:71:6f:e0:ec:95:54:a2:
f9:35:0b:bc:ab:96:e3:ac:1c:41:9a:5c:e4:37:cc:6b:ca:6f:
80:25:94:d2:cd:69:c9:de:8a:67:fe:12:55:92:8d:3c:e5:ea:
8d:ed:c5:4d:71:22:7b:e6:09:a8:cf:94:c8:26:a1:40:bf:20:
b5:81:34:8b:92:fe:6c:9f:2d:ab:fc:d2:9d:dd:23:83:f0:19:
a6:32:43:a9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+QOwo8/bsLCrVoGEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAxMzEyMDAwMFoXDTIyMTExODA1MDAwMFowLzEtMCsGA1UEAxMk
MjRkNTViNzAtMGM5Yi00MzYwLWI0ZjktM2RjMDEwMzUxYzZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZYjPCeHJcQg3053IY2IO8SjOKiEmDfxAt/b
RmjNzb7ETaFla27wydQ2dsKwbxH3NDkqiS58kziKxGoKRoADNv/CP2vEFPgJaZnO
dTXXdV/mkgd4ckYVcGz5pupj85eDnzNbOwSDHFblKuVim+8o/ABXDTF60iAtx/vb
7U2zqBPRqsM39CXwWTysgkWOPzekyiiFYiXp7uCpUJDn0zbQYJSNXsmd/qMRewYy
WRYamPqBFRN488ipIHSPAu99WbeJDO+FDyC0ZLaFFrnxx+3hbhptQpZ3rnuVmL/5
reJcSAwtr2Rp7zVFL0yZGe61xqKVvO+jy64kGJa+r5PE8XhRwQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLyCgayKKvy6lB2CEt7fntmAMY/oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMzAyMWYwYmUtMjJkOC0z
OGY5LTliNGEtYjhkN2MwMjk2OTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiAwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMJXsBBMY8Znzi9MnlWrPOfPuVvLXQclcNcTxiYTy3/UF4L31lqVKWISv
0ckpODErd35d1osVyQ53ZBu+yR7TvXtM/bx0clrfubCWgvA5FF4eV+LTwR0qVW9N
rW7Pn+1b4r5PiX1ciE22IYuocgtfeii7+VffZu0+wDZZeriTX3ByEiDuOj+ieCQt
7Bjq5RncesXDLMXhJ2CyOO2fvrVycOuAILft3q4IAyTPUPdxb+DslVSi+TULvKuW
46wcQZpc5DfMa8pvgCWU0s1pyd6KZ/4SVZKNPOXqje3FTXEie+YJqM+UyCahQL8g
tYE0i5L+bJ8tq/zSnd0jg/AZpjJDqQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:46:23 2025 by rpki-client