Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/32e36900-92f7-3384-91dc-61032716f03e.roa
File: 32e36900-92f7-3384-91dc-61032716f03e.roa (raw, json)
Hash identifier: rKmks6aoyhs85FlihSTjChdDBn2CchkU0mGImM7X/Wc=
Subject key identifier: B7:53:27:05:25:2B:A0:1A:D0:4A:E4:F5:EF:CA:A6:D3:90:D5:B7:31
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C79E11266F509FA0B4244C600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/32e36900-92f7-3384-91dc-61032716f03e.roa
Signing time: Tue 04 Jan 2022 05:00:00 +0000
ROA not before: Tue 04 Jan 2022 05:00:00 +0000
ROA not after: Tue 08 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 130.101.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:79:e1:12:66:f5:09:fa:0b:42:44:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 4 05:00:00 2022 GMT
Not After : Feb 8 05:00:00 2022 GMT
Subject: CN=adddabd0-4cc7-4b67-a69b-3ee131301355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fc:4d:46:89:7a:89:78:66:d3:90:f8:35:76:
e8:4f:f4:4d:be:02:65:89:2f:66:ba:66:b5:40:02:
4d:24:e1:4d:07:4f:2b:59:94:d1:b3:29:0c:dc:25:
1d:ec:31:88:58:45:37:0f:de:ea:d1:6e:de:ad:b1:
b5:2b:4d:79:9f:82:55:96:78:fa:18:f7:6d:a7:81:
06:60:7c:ad:00:35:6b:4a:ae:d8:a3:9f:36:9e:d5:
62:d5:dc:fd:e5:b5:08:24:70:94:14:3c:81:7b:7a:
5f:23:06:15:34:1d:d8:49:e9:74:27:56:33:1d:4e:
20:79:89:5f:fd:45:72:b1:1f:14:4c:af:cc:1b:a2:
98:58:45:4f:5f:6a:f8:03:27:31:ea:91:6a:79:cb:
f7:7e:7c:e5:db:68:54:3a:4d:03:2f:8f:dd:75:69:
92:ff:33:8f:fa:26:c6:f7:c9:d5:28:53:b0:07:f6:
4e:80:f8:bc:a8:30:da:82:bc:3c:eb:cd:cc:77:d8:
16:da:79:47:0d:3d:66:c1:57:b1:8c:24:17:5a:60:
4d:40:34:ad:f1:21:47:c4:a2:1d:88:2e:e7:73:27:
03:8d:6a:d1:8d:e5:49:39:0d:d8:85:35:a8:c2:d3:
b8:46:a1:d9:71:50:f4:62:f8:72:04:34:b1:d5:1d:
30:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:53:27:05:25:2B:A0:1A:D0:4A:E4:F5:EF:CA:A6:D3:90:D5:B7:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/32e36900-92f7-3384-91dc-61032716f03e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
130.101.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:d2:89:56:a1:9a:63:40:64:03:15:22:25:db:00:f6:d2:40:
2c:a0:31:3a:96:39:55:1a:41:51:9e:a7:f4:c4:17:a8:85:16:
91:ce:67:b6:ad:1e:ae:06:c0:fc:56:28:83:78:57:e3:a8:84:
f7:ee:ba:22:00:2c:8c:d7:43:a1:ef:cb:5d:22:4f:e3:9b:22:
0c:01:bf:1a:d0:d3:4a:f7:9d:83:e2:22:f1:61:00:30:84:e3:
cc:67:12:c3:22:05:8b:cb:04:b9:33:eb:9a:cb:68:b9:e2:c3:
55:52:6b:55:b5:ee:58:a4:e4:52:20:23:8e:47:e7:ea:57:92:
c9:2b:1d:39:0c:a6:34:1b:9e:42:cf:e2:84:45:29:ce:34:d1:
5d:ae:97:6b:5b:ac:b2:00:33:f8:02:41:4a:30:43:7a:a6:08:
c8:19:48:7f:55:13:ae:2b:32:63:71:a8:fb:cc:0a:78:36:3c:
cd:1a:ca:c1:55:b1:2e:ba:56:6d:07:d6:1b:c9:10:7a:22:26:
71:0c:b7:bd:d3:dc:cd:2e:2a:3b:0d:d0:6d:a8:0b:1f:75:c0:
ad:10:6a:64:33:7c:9d:bb:f1:c2:39:06:39:48:34:0c:90:4f:
3f:b7:64:56:0d:2c:1a:63:94:8c:70:c1:84:a3:49:bd:ab:cb:
0c:96:22:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDx54RJm9Qn6C0JExgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDEwNDA1MDAwMFoXDTIyMDIwODA1MDAwMFowLzEtMCsGA1UEAxMk
YWRkZGFiZDAtNGNjNy00YjY3LWE2OWItM2VlMTMxMzAxMzU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvxNRol6iXhm05D4NXboT/RNvgJliS9muma1
QAJNJOFNB08rWZTRsykM3CUd7DGIWEU3D97q0W7erbG1K015n4JVlnj6GPdtp4EG
YHytADVrSq7Yo582ntVi1dz95bUIJHCUFDyBe3pfIwYVNB3YSel0J1YzHU4geYlf
/UVysR8UTK/MG6KYWEVPX2r4Aycx6pFqecv3fnzl22hUOk0DL4/ddWmS/zOP+ibG
98nVKFOwB/ZOgPi8qDDagrw8683Md9gW2nlHDT1mwVexjCQXWmBNQDSt8SFHxKId
iC7ncycDjWrRjeVJOQ3YhTWowtO4RqHZcVD0YvhyBDSx1R0wiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLdTJwUlK6Aa0Erk9e/KptOQ1bcxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMzJlMzY5MDAtOTJmNy0z
Mzg0LTkxZGMtNjEwMzI3MTZmMDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHgmWAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACrSiVahmmNAZAMVIiXbAPbSQCygMTqWOVUaQVGep/TEF6iFFpHOZ7at
Hq4GwPxWKIN4V+OohPfuuiIALIzXQ6Hvy10iT+ObIgwBvxrQ00r3nYPiIvFhADCE
48xnEsMiBYvLBLkz65rLaLniw1VSa1W17lik5FIgI45H5+pXkskrHTkMpjQbnkLP
4oRFKc400V2ul2tbrLIAM/gCQUowQ3qmCMgZSH9VE64rMmNxqPvMCng2PM0aysFV
sS66Vm0H1hvJEHoiJnEMt73T3M0uKjsN0G2oCx91wK0QamQzfJ278cI5BjlINAyQ
Tz+3ZFYNLBpjlIxwwYSjSb2rywyWIrQ=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:45:45 2025 by rpki-client