Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3087bf63-54d9-3d24-8ddb-9de98b7b28ed.roa
File: 3087bf63-54d9-3d24-8ddb-9de98b7b28ed.roa (raw, json)
Hash identifier: CxRKBW6H91rhVsEdcSx8y0jVWYdnpl66hUXnHQPgq0Y=
Subject key identifier: 2C:9F:0E:AC:5B:5D:1E:DB:B3:4D:B5:A7:94:83:04:AB:A7:45:9E:7C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401EEDB4B98918F1919CBC2280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3087bf63-54d9-3d24-8ddb-9de98b7b28ed.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 144.220.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1e:ed:b4:b9:89:18:f1:91:9c:bc:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=784d17ea-5dcd-4770-8f30-77326f4e08f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:c1:16:09:25:78:e7:bd:3b:83:12:5a:f2:
8c:3f:b5:1e:5b:f9:bd:c8:9d:24:e4:09:13:bf:d4:
88:f5:f6:41:ab:97:f6:14:ee:fe:a3:30:47:51:75:
d1:93:87:51:6e:ca:c4:a8:83:64:ca:8b:24:b5:b6:
8c:76:2e:46:10:58:49:f7:cb:91:aa:b0:24:f9:e8:
98:2b:fd:58:ce:30:0f:72:77:73:f2:7c:f3:27:6f:
44:3e:f8:fe:7f:69:58:32:cc:7b:67:e2:c3:1d:54:
55:a8:f3:b9:a8:d2:77:fe:59:20:c4:14:81:5f:39:
6f:b8:af:a3:16:27:e4:e7:69:f4:da:2a:e8:25:76:
ee:1a:35:0d:be:92:7d:79:af:8f:70:8e:9b:27:0e:
2c:3b:d9:bf:14:81:a6:e6:41:e3:65:30:8e:a6:8a:
c8:dc:b6:90:5b:e3:f8:8e:9d:c5:1e:8b:fe:26:ff:
81:d8:e5:90:08:0a:e7:e1:9e:9b:86:94:4e:55:18:
0c:d2:12:f0:ad:82:c0:7e:1a:fc:a1:68:42:21:92:
71:f5:12:62:2b:58:02:45:1b:f4:dc:95:26:f5:5b:
98:e1:ce:46:c0:f0:1e:94:df:56:aa:d5:c5:74:58:
71:76:51:84:8c:3f:3b:1c:fe:87:c0:05:c9:7d:38:
5f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9F:0E:AC:5B:5D:1E:DB:B3:4D:B5:A7:94:83:04:AB:A7:45:9E:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3087bf63-54d9-3d24-8ddb-9de98b7b28ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
144.220.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:ad:b9:4c:1e:c1:0a:6b:9e:40:a5:e7:9e:56:af:30:05:66:
0a:5b:f9:23:bb:17:2a:a0:55:14:93:eb:38:fa:4e:cc:4b:35:
42:f5:ea:da:11:35:67:fd:18:d5:11:af:db:c9:cd:e7:cf:75:
b4:ad:ed:a1:7f:9b:8b:d5:17:a4:df:96:85:65:c6:05:96:3b:
92:58:11:e5:f5:d4:98:63:f7:65:0e:a7:b4:a7:8d:fe:08:32:
0f:4d:c5:34:60:03:65:8c:b5:33:74:6a:d8:a3:b7:01:f4:d7:
75:b7:55:2c:c9:0d:63:4b:30:59:c9:5f:93:17:3d:24:99:04:
f0:25:81:8f:de:70:a3:27:5f:a3:f6:73:11:37:7b:48:6f:b4:
8b:db:6f:e4:71:78:9e:ad:8e:70:20:95:2c:e9:ac:a2:f3:0c:
a9:26:28:fa:82:3e:f5:d1:12:4a:28:03:13:65:c8:13:10:12:
94:93:49:76:b1:6b:b5:b7:5d:e4:3a:b7:26:a2:e6:25:ac:17:
dd:3d:70:fc:6d:c5:12:e3:1c:a6:38:47:5b:fb:87:aa:47:ce:
c7:12:d0:2d:3b:7c:a7:46:9f:3d:87:47:c2:c4:06:4d:f2:73:
bf:f4:95:10:96:5e:07:ad:0d:81:21:63:22:9f:94:54:a0:dd:
9d:6c:ac:dc
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAe7bS5iRjxkZy8IoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIwMzEyMDAwMFoXDTIzMDEwODA1MDAwMFowLzEtMCsGA1UEAxMk
Nzg0ZDE3ZWEtNWRjZC00NzcwLThmMzAtNzczMjZmNGUwOGY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspnBFgkleOe9O4MSWvKMP7UeW/m9yJ0k5AkT
v9SI9fZBq5f2FO7+ozBHUXXRk4dRbsrEqINkyosktbaMdi5GEFhJ98uRqrAk+eiY
K/1YzjAPcndz8nzzJ29EPvj+f2lYMsx7Z+LDHVRVqPO5qNJ3/lkgxBSBXzlvuK+j
Fifk52n02iroJXbuGjUNvpJ9ea+PcI6bJw4sO9m/FIGm5kHjZTCOporI3LaQW+P4
jp3FHov+Jv+B2OWQCArn4Z6bhpROVRgM0hLwrYLAfhr8oWhCIZJx9RJiK1gCRRv0
3JUm9VuY4c5GwPAelN9WqtXFdFhxdlGEjD87HP6HwAXJfThf1wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCyfDqxbXR7bs021p5SDBKunRZ58MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMzA4N2JmNjMtNTRkOS0z
ZDI0LThkZGItOWRlOThiN2IyOGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkNwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEApq25TB7BCmueQKXnnlavMAVmClv5I7sXKqBVFJPrOPpOzEs1QvXq2hE1
Z/0Y1RGv28nN5891tK3toX+bi9UXpN+WhWXGBZY7klgR5fXUmGP3ZQ6ntKeN/ggy
D03FNGADZYy1M3Rq2KO3AfTXdbdVLMkNY0swWclfkxc9JJkE8CWBj95woydfo/Zz
ETd7SG+0i9tv5HF4nq2OcCCVLOmsovMMqSYo+oI+9dESSigDE2XIExASlJNJdrFr
tbdd5Dq3JqLmJawX3T1w/G3FEuMcpjhHW/uHqkfOxxLQLTt8p0afPYdHwsQGTfJz
v/SVEJZeB60NgSFjIp+UVKDdnWys3A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:09:54 2025 by rpki-client