Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/30d753a2-500c-3faf-86c6-7e7f6c71c697.roa
File: 30d753a2-500c-3faf-86c6-7e7f6c71c697.roa (raw, json)
Hash identifier: bV0dHM2AeHOwwai7PRmNYTBRMA5Rk5Vdw0OqYX8zaWY=
Subject key identifier: 4D:47:71:E7:5B:25:0C:71:1D:38:E7:E6:A4:D1:0F:9A:09:72:F2:C8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E93F4D1DB2196B1BE08059700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/30d753a2-500c-3faf-86c6-7e7f6c71c697.roa
Signing time: Thu 14 Jul 2022 12:00:00 +0000
ROA not before: Thu 14 Jul 2022 12:00:00 +0000
ROA not after: Fri 19 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 144.207.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:93:f4:d1:db:21:96:b1:be:08:05:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 14 12:00:00 2022 GMT
Not After : Aug 19 04:00:00 2022 GMT
Subject: CN=50aa7b63-b7ac-4d6b-b704-164d606180b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3c:db:38:9b:ff:a6:bf:ee:5d:f6:40:95:a8:
50:1b:7f:4a:bd:0c:15:bd:2e:88:83:6c:e8:20:d3:
b4:04:d9:da:9a:1f:df:8f:e4:86:a2:28:c7:e2:30:
87:d8:cf:cc:65:98:62:d2:4c:f7:bc:78:7f:77:69:
25:b5:d5:c4:0b:5f:9a:7e:34:ff:0f:16:1c:63:a4:
75:e8:e3:e7:f4:08:b9:b7:73:78:ab:53:76:3b:17:
86:83:60:03:0c:b7:91:5b:ab:88:d6:ba:bd:2a:8b:
8f:2c:d2:80:dd:0a:d8:cd:21:99:13:d0:1a:f0:07:
b3:6b:a2:5a:8b:1d:ca:c5:88:4a:50:d4:cb:97:75:
41:49:74:7c:e9:f4:a3:4c:40:da:d7:fc:a7:c3:4f:
46:68:b9:4a:82:f6:63:80:af:48:7e:6e:30:a9:0f:
94:f8:14:6f:65:e9:1b:cb:4f:57:e8:53:46:38:e7:
f9:ab:1e:17:45:46:1b:5e:b3:dc:85:c1:cf:56:bb:
2b:d3:35:9f:51:3b:90:13:b7:cd:8b:55:3e:6e:57:
90:37:f2:e5:74:70:bb:05:e2:e5:54:52:61:75:bf:
10:6b:ff:cd:ee:64:2b:c7:aa:6c:ad:d6:0f:7b:94:
35:56:bd:3b:80:e5:95:50:55:c0:94:26:56:4b:a2:
b8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:47:71:E7:5B:25:0C:71:1D:38:E7:E6:A4:D1:0F:9A:09:72:F2:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/30d753a2-500c-3faf-86c6-7e7f6c71c697.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
144.207.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:a1:77:c4:51:b1:96:5a:82:c2:e9:b4:01:20:b3:86:da:5c:
39:4e:68:5d:e5:46:bb:9f:ec:fe:57:a0:4e:6c:c2:41:fe:05:
6e:eb:88:7b:be:61:b0:19:e7:57:06:95:ae:17:a5:d0:bd:3c:
d9:8e:16:cb:e9:db:1b:0a:7a:c2:6a:a6:e0:37:5f:36:1a:71:
12:0f:88:d1:84:d9:83:a4:c8:f2:61:d1:82:bb:3c:93:48:e3:
12:f4:9b:b3:cf:5a:b0:0e:e2:8c:55:b9:96:44:38:8c:07:db:
0c:b8:42:24:ed:3c:b3:17:b2:0d:55:ea:71:f1:83:86:16:02:
13:6b:55:83:d4:74:1d:ae:11:b0:7a:dd:d6:ba:61:55:ad:0f:
3b:1a:30:1b:a6:d4:44:2a:3f:e6:91:87:88:2a:3e:3d:48:4a:
85:5c:5f:4e:ad:56:a8:14:00:b1:fa:94:75:69:68:af:93:32:
03:91:ef:02:b0:7e:00:b3:11:69:ef:90:79:15:cf:7c:0b:b5:
88:c7:7b:2e:1b:52:34:02:72:81:64:9d:a6:67:d7:b1:06:bf:
2d:76:ed:ba:1f:73:af:55:46:74:41:e2:c8:92:df:02:64:3d:
f7:91:aa:58:1b:4e:bc:81:0f:9c:01:87:f2:6e:fb:4e:47:b1:
6a:d9:2b:8a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6T9NHbIZaxvggFlwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcxNDEyMDAwMFoXDTIyMDgxOTA0MDAwMFowLzEtMCsGA1UEAxMk
NTBhYTdiNjMtYjdhYy00ZDZiLWI3MDQtMTY0ZDYwNjE4MGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDzbOJv/pr/uXfZAlahQG39KvQwVvS6Ig2zo
INO0BNnamh/fj+SGoijH4jCH2M/MZZhi0kz3vHh/d2kltdXEC1+afjT/DxYcY6R1
6OPn9Ai5t3N4q1N2OxeGg2ADDLeRW6uI1rq9KouPLNKA3QrYzSGZE9Aa8Aeza6Ja
ix3KxYhKUNTLl3VBSXR86fSjTEDa1/ynw09GaLlKgvZjgK9Ifm4wqQ+U+BRvZekb
y09X6FNGOOf5qx4XRUYbXrPchcHPVrsr0zWfUTuQE7fNi1U+bleQN/LldHC7BeLl
VFJhdb8Qa//N7mQrx6psrdYPe5Q1Vr07gOWVUFXAlCZWS6K4TwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFE1HcedbJQxxHTjn5qTRD5oJcvLIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMzBkNzUzYTItNTAwYy0z
ZmFmLTg2YzYtN2U3ZjZjNzFjNjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkM8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAdKF3xFGxllqCwum0ASCzhtpcOU5oXeVGu5/s/legTmzCQf4FbuuIe75h
sBnnVwaVrhel0L082Y4Wy+nbGwp6wmqm4DdfNhpxEg+I0YTZg6TI8mHRgrs8k0jj
EvSbs89asA7ijFW5lkQ4jAfbDLhCJO08sxeyDVXqcfGDhhYCE2tVg9R0Ha4RsHrd
1rphVa0POxowG6bURCo/5pGHiCo+PUhKhVxfTq1WqBQAsfqUdWlor5MyA5HvArB+
ALMRae+QeRXPfAu1iMd7LhtSNAJygWSdpmfXsQa/LXbtuh9zr1VGdEHiyJLfAmQ9
95GqWBtOvIEPnAGH8m77Tkexatkrig==
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:16:03 2025 by rpki-client