Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/30bffc04-04d0-39b5-979e-f843c88a75d5.roa
File: 30bffc04-04d0-39b5-979e-f843c88a75d5.roa (raw, json)
Hash identifier: lFbg/aC5bpXVroqkpevihZIeYKE7528GkttWYjn6dmw=
Subject key identifier: 37:17:C5:6D:1B:2B:3A:B1:5A:30:CF:8F:B6:EB:2F:D3:A7:31:4E:95
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DBDFB757B1DE13BE695CC36C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/30bffc04-04d0-39b5-979e-f843c88a75d5.roa
Signing time: Fri 29 Apr 2022 12:00:00 +0000
ROA not before: Fri 29 Apr 2022 12:00:00 +0000
ROA not after: Sat 04 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 170.120.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:bd:fb:75:7b:1d:e1:3b:e6:95:cc:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 29 12:00:00 2022 GMT
Not After : Jun 4 04:00:00 2022 GMT
Subject: CN=9db36111-ee2c-4a28-bfe4-9d3ac9b058ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6d:9f:ca:7f:f2:4c:3a:f2:f2:c6:88:44:cf:
4b:21:f0:58:62:df:69:6c:9b:ff:d1:62:b2:a8:48:
e0:bc:d9:43:d6:69:30:f2:53:ed:63:bd:17:56:ac:
5f:72:ee:a0:29:3f:7d:48:74:d1:96:41:c5:85:1c:
b5:f3:81:07:be:0f:ad:03:88:80:53:85:a2:70:10:
b1:e1:05:9f:95:83:ca:b1:2b:c5:a5:0d:56:dc:f5:
ec:36:46:0a:bc:ae:0f:ea:70:34:82:b5:98:48:b2:
c6:ca:86:f6:04:e2:d6:a7:1c:12:a9:72:f5:32:c2:
37:e1:82:93:5e:5d:4d:1e:67:aa:ae:cb:93:78:c7:
0d:5b:0b:f7:2f:13:c1:33:06:92:f8:3d:f4:ba:81:
e7:c0:ab:eb:21:35:3c:a1:8e:7d:27:49:fa:d7:9c:
c7:6a:7d:dd:e8:1a:60:a6:41:f8:f0:ed:0f:00:9b:
6a:d3:1c:4d:53:e3:da:57:0e:e9:ab:b6:bb:5d:39:
ea:32:6c:50:03:99:e6:de:0a:b4:b0:17:fa:c7:d0:
66:20:82:25:36:ab:33:0e:f0:e5:97:df:3a:50:ad:
9f:03:83:8c:38:e7:61:94:e7:ca:39:e3:56:92:50:
50:01:3c:26:52:14:de:60:94:6d:0f:e0:bd:4c:bb:
25:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:17:C5:6D:1B:2B:3A:B1:5A:30:CF:8F:B6:EB:2F:D3:A7:31:4E:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/30bffc04-04d0-39b5-979e-f843c88a75d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
170.120.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:67:13:f1:0f:8b:36:9f:c4:cf:85:c0:b9:ff:c1:19:44:96:
6a:19:0b:b6:c7:8b:18:bc:5a:a6:4c:9d:d7:e2:c7:8f:cf:7a:
b5:04:a2:1a:27:1e:6e:fd:98:36:42:d7:08:79:31:09:03:f3:
e2:c4:42:59:63:47:3a:2c:30:08:53:3c:ea:b1:da:c7:44:1a:
97:97:bd:e8:98:6d:59:f1:d0:94:e4:6e:44:ad:3a:24:26:cf:
51:ca:6f:0e:41:e3:00:16:2f:89:9e:41:8f:38:36:6b:25:8a:
73:7f:97:b5:98:ff:b0:ad:9f:1d:bc:23:74:c5:b0:02:21:20:
ae:fd:97:ab:df:63:ae:2a:e7:ec:ed:37:65:b2:14:a0:86:86:
9c:3e:d3:ee:86:04:35:db:f0:35:79:ef:82:11:b3:17:e7:c7:
23:8c:f0:61:5b:80:e1:9e:39:d1:df:54:17:a9:c8:76:4a:5e:
b0:56:42:26:ef:14:91:18:d2:d0:a4:2d:e9:f3:5a:ab:f8:f4:
d2:a4:93:6a:b9:85:9c:95:c9:f6:37:da:d6:78:24:9b:53:7c:
ec:9a:61:74:3f:e8:7b:5b:09:96:fb:ca:9d:4e:91:14:6b:1e:
36:fe:61:f3:42:1d:d6:ed:a9:92:50:f3:a6:f9:8c:5d:54:86:
14:35:61:f0
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD29+3V7HeE75pXMNsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQyOTEyMDAwMFoXDTIyMDYwNDA0MDAwMFowLzEtMCsGA1UEAxMk
OWRiMzYxMTEtZWUyYy00YTI4LWJmZTQtOWQzYWM5YjA1OGFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm2fyn/yTDry8saIRM9LIfBYYt9pbJv/0WKy
qEjgvNlD1mkw8lPtY70XVqxfcu6gKT99SHTRlkHFhRy184EHvg+tA4iAU4WicBCx
4QWflYPKsSvFpQ1W3PXsNkYKvK4P6nA0grWYSLLGyob2BOLWpxwSqXL1MsI34YKT
Xl1NHmeqrsuTeMcNWwv3LxPBMwaS+D30uoHnwKvrITU8oY59J0n615zHan3d6Bpg
pkH48O0PAJtq0xxNU+PaVw7pq7a7XTnqMmxQA5nm3gq0sBf6x9BmIIIlNqszDvDl
l986UK2fA4OMOOdhlOfKOeNWklBQATwmUhTeYJRtD+C9TLslZQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDcXxW0bKzqxWjDPj7brL9OnMU6VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMzBiZmZjMDQtMDRkMC0z
OWI1LTk3OWUtZjg0M2M4OGE3NWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqngwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPGcT8Q+LNp/Ez4XAuf/BGUSWahkLtseLGLxapkyd1+LHj896tQSiGice
bv2YNkLXCHkxCQPz4sRCWWNHOiwwCFM86rHax0Qal5e96JhtWfHQlORuRK06JCbP
UcpvDkHjABYviZ5Bjzg2ayWKc3+XtZj/sK2fHbwjdMWwAiEgrv2Xq99jrirn7O03
ZbIUoIaGnD7T7oYENdvwNXnvghGzF+fHI4zwYVuA4Z450d9UF6nIdkpesFZCJu8U
kRjS0KQt6fNaq/j00qSTarmFnJXJ9jfa1ngkm1N87JphdD/oe1sJlvvKnU6RFGse
Nv5h80Id1u2pklDzpvmMXVSGFDVh8A==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:32:38 2025 by rpki-client