Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3c79b911-3ea1-3cb0-b896-44339db6f31a.roa
File: 3c79b911-3ea1-3cb0-b896-44339db6f31a.roa (raw, json)
Hash identifier: tD44RosLxx9dapcq6G9CodN83aOV/4BP5Szyu5hJWUc=
Subject key identifier: EE:1C:0E:9B:9B:88:3E:01:23:0B:19:C0:04:A5:A3:FD:AB:29:28:51
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F1B2E83F64FB5AB2B5E1C4600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3c79b911-3ea1-3cb0-b896-44339db6f31a.roa
Signing time: Thu 01 Sep 2022 12:00:00 +0000
ROA not before: Thu 01 Sep 2022 12:00:00 +0000
ROA not after: Fri 07 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 141.181.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:1b:2e:83:f6:4f:b5:ab:2b:5e:1c:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 1 12:00:00 2022 GMT
Not After : Oct 7 04:00:00 2022 GMT
Subject: CN=1b1e43d9-5351-411b-a56e-89cafa475f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7f:c8:97:24:93:44:0d:3d:d9:84:74:76:6b:
ea:dc:42:c8:b1:9a:98:3b:b3:61:b7:9a:d2:5b:05:
70:94:56:33:60:8c:58:1d:02:01:a4:64:48:f1:fe:
ca:d9:79:ff:a9:dd:38:e6:80:e9:c5:4c:c7:4a:c3:
5a:a1:c7:8b:f6:39:c0:a4:b1:93:a9:43:c4:d2:eb:
35:8d:af:ac:87:17:f1:04:52:be:71:c6:c2:bc:29:
b1:1b:24:40:73:2a:6b:d7:cd:45:9f:f5:e6:cc:5d:
7d:55:36:0a:4f:c2:9d:14:61:32:60:b3:86:2c:b0:
46:96:49:04:e8:8b:89:06:8b:5b:ff:f4:27:bb:94:
7a:d6:24:4f:ad:c4:ce:a5:46:d7:c4:0c:78:ce:b5:
50:24:df:38:86:46:ed:8f:da:7d:01:21:12:8b:05:
84:1a:dd:0e:16:bf:0c:27:b0:da:4f:fd:bd:44:b6:
1e:30:25:e4:c4:9e:8d:16:29:eb:f9:7d:86:d1:ec:
00:43:e5:01:5c:55:08:75:84:17:d4:8d:90:90:8b:
91:e8:4e:04:4b:34:39:ba:be:09:2b:81:4a:6c:f8:
e3:e3:ba:62:66:31:95:a6:24:86:f2:d0:9d:af:2c:
02:b9:dc:be:89:4f:4f:7f:5d:89:b7:c7:87:36:48:
43:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1C:0E:9B:9B:88:3E:01:23:0B:19:C0:04:A5:A3:FD:AB:29:28:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3c79b911-3ea1-3cb0-b896-44339db6f31a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.181.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:9d:76:3e:51:6b:b8:64:d9:90:7f:d3:fd:64:e1:dc:c2:5b:
57:32:67:88:25:6e:de:5f:06:43:87:43:00:71:7d:b3:18:b4:
b0:ca:40:8d:8e:78:ca:95:2d:9d:69:f8:72:18:d2:59:4a:c5:
53:f8:03:9c:58:10:45:d5:51:78:ca:07:03:f0:ab:42:d2:9b:
35:29:b0:fb:29:f1:05:a7:2f:98:f9:27:28:77:3a:63:af:30:
c2:d8:a1:bf:5f:05:19:4e:b8:5e:01:5f:dd:a5:68:80:2b:79:
90:e7:06:28:23:19:de:1f:4b:b0:25:9f:6d:4b:7e:a4:34:20:
9a:de:20:78:cc:ed:e3:9a:cf:2a:fb:be:3f:c1:8b:65:e7:7e:
69:6e:bb:2e:62:46:f0:51:f0:c7:db:82:8b:a8:4f:fc:cc:c7:
49:64:9c:0c:aa:78:93:2e:aa:81:d2:3c:3f:54:a4:e7:e6:16:
fc:ee:3d:61:39:76:82:1c:39:10:76:cc:22:03:2e:49:2f:d0:
c5:ed:41:cf:f8:f3:72:0f:04:17:60:9d:fb:cd:e0:8e:c0:b7:
e8:f9:55:15:86:17:86:a9:ae:02:49:f0:7d:e5:fa:73:51:a7:
8b:26:aa:e0:80:2a:2f:a0:15:28:fb:e5:0f:85:5a:7d:c1:8b:
5b:d4:d4:2e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8bLoP2T7WrK14cRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkwMTEyMDAwMFoXDTIyMTAwNzA0MDAwMFowLzEtMCsGA1UEAxMk
MWIxZTQzZDktNTM1MS00MTFiLWE1NmUtODljYWZhNDc1ZjE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX/IlySTRA092YR0dmvq3ELIsZqYO7Nht5rS
WwVwlFYzYIxYHQIBpGRI8f7K2Xn/qd045oDpxUzHSsNaoceL9jnApLGTqUPE0us1
ja+shxfxBFK+ccbCvCmxGyRAcypr181Fn/XmzF19VTYKT8KdFGEyYLOGLLBGlkkE
6IuJBotb//Qnu5R61iRPrcTOpUbXxAx4zrVQJN84hkbtj9p9ASESiwWEGt0OFr8M
J7DaT/29RLYeMCXkxJ6NFinr+X2G0ewAQ+UBXFUIdYQX1I2QkIuR6E4ESzQ5ur4J
K4FKbPjj47piZjGVpiSG8tCdrywCudy+iU9Pf12Jt8eHNkhDewIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFO4cDpubiD4BIwsZwASlo/2rKShRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvM2M3OWI5MTEtM2VhMS0z
Y2IwLWI4OTYtNDQzMzlkYjZmMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjbUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAqJ12PlFruGTZkH/T/WTh3MJbVzJniCVu3l8GQ4dDAHF9sxi0sMpAjY54
ypUtnWn4chjSWUrFU/gDnFgQRdVReMoHA/CrQtKbNSmw+ynxBacvmPknKHc6Y68w
wtihv18FGU64XgFf3aVogCt5kOcGKCMZ3h9LsCWfbUt+pDQgmt4geMzt45rPKvu+
P8GLZed+aW67LmJG8FHwx9uCi6hP/MzHSWScDKp4ky6qgdI8P1Sk5+YW/O49YTl2
ghw5EHbMIgMuSS/Qxe1Bz/jzcg8EF2Cd+83gjsC36PlVFYYXhqmuAknwfeX6c1Gn
iyaq4IAqL6AVKPvlD4VafcGLW9TULg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:44:17 2025 by rpki-client