Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4300b1ff-307d-3190-b624-b723897ee1c1.roa
File: 4300b1ff-307d-3190-b624-b723897ee1c1.roa (raw, json)
Hash identifier: KjgI/zc6GQLN81PlWVUJ0u8tXz+y3gZkxiI8lNPhJLo=
Subject key identifier: FE:21:94:11:D8:5C:0B:96:25:7B:98:86:6B:3D:76:9E:9B:FD:69:87
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D5AB3EAF29AC64A9A6DE634C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4300b1ff-307d-3190-b624-b723897ee1c1.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 141.139.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:b3:ea:f2:9a:c6:4a:9a:6d:e6:34:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=85952dd3-a7be-4e60-957b-884da934af1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:53:7c:2e:24:98:d7:34:43:bd:c0:d5:ce:8b:
34:99:96:fe:1c:53:d7:8d:37:50:06:0b:f8:40:86:
98:28:56:5e:ea:ca:16:05:f7:0f:bd:ed:a1:06:9e:
8f:8e:5d:db:c6:51:80:20:f8:69:9d:ba:f6:43:7e:
de:ad:d9:16:09:51:f0:4f:4a:d3:0f:cd:1c:cb:02:
76:d6:d7:8a:73:b9:1d:e4:c4:0b:c3:dd:ec:0d:f2:
59:c2:dd:cd:85:b5:4c:e4:8f:68:e1:2b:bb:b9:71:
1c:69:1d:d2:e4:16:69:a6:e7:2b:18:cc:f8:d1:d8:
6a:3d:b4:85:d0:b9:be:91:3a:c3:6d:fa:52:3c:10:
82:1c:5a:6e:cb:3c:ef:fb:73:17:be:55:91:21:bb:
ea:87:ec:39:09:d7:b4:51:65:b9:16:5d:2b:b8:64:
ef:f1:92:0e:c6:7d:ab:94:87:2c:59:83:81:f2:33:
7b:b7:d7:d8:ec:12:3f:74:ef:0f:80:40:9c:8b:ee:
85:be:66:c4:2d:7a:c7:7d:cc:6a:e4:de:62:89:18:
23:d7:c3:02:4e:13:4f:19:23:03:41:27:0a:bc:ab:
09:26:08:f3:ed:6f:5d:f0:5a:cc:99:e6:b4:8b:23:
bd:6f:a9:0d:9b:7f:0e:bd:5b:12:a1:c6:e9:a1:dc:
40:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:21:94:11:D8:5C:0B:96:25:7B:98:86:6B:3D:76:9E:9B:FD:69:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4300b1ff-307d-3190-b624-b723897ee1c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.139.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:1f:ba:f3:af:53:be:53:b8:17:5f:d0:bc:10:f0:f8:bb:94:
0c:68:2c:52:43:97:24:11:c7:e7:1d:1f:89:93:63:58:8b:7a:
48:b4:a6:b6:dc:bb:21:d1:61:f4:02:42:b7:f4:84:95:74:93:
3f:40:00:20:fb:4b:36:30:fe:fc:0e:f6:33:af:23:c6:ae:8c:
b6:f6:f4:36:cf:4e:80:94:0a:f7:53:fb:79:d4:26:3d:48:ca:
15:91:3a:ca:c0:13:cd:9e:5d:1e:42:bd:f9:c3:e2:44:37:d9:
c8:ad:80:72:1e:c0:89:5d:8a:4d:06:b0:a2:ce:78:e0:fc:6b:
db:cd:a6:29:c0:8e:a7:56:88:0d:58:64:58:db:85:2e:10:23:
71:92:04:2c:9a:bc:16:37:15:0b:51:91:d5:40:8e:ed:b0:5d:
88:cf:6e:cf:d3:52:08:a7:37:17:5d:80:c3:9e:d2:d2:2e:29:
a5:b6:88:22:fa:23:96:8d:d6:89:aa:0a:c5:b8:78:03:f3:68:
79:97:4c:be:38:fe:6d:f2:7a:b4:9c:7a:8a:50:c0:38:f4:77:
7d:fb:be:85:82:57:0f:f0:2c:b0:a1:7f:8e:dc:d2:50:64:40:
7a:a7:cb:0d:8f:c8:ac:f3:e6:2a:4c:d7:9a:4d:59:28:5b:ab:
7f:22:4c:3a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1as+rymsZKmm3mNMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMyNTA0MDAwMFoXDTIyMDQyOTA0MDAwMFowLzEtMCsGA1UEAxMk
ODU5NTJkZDMtYTdiZS00ZTYwLTk1N2ItODg0ZGE5MzRhZjFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFN8LiSY1zRDvcDVzos0mZb+HFPXjTdQBgv4
QIaYKFZe6soWBfcPve2hBp6Pjl3bxlGAIPhpnbr2Q37erdkWCVHwT0rTD80cywJ2
1teKc7kd5MQLw93sDfJZwt3NhbVM5I9o4Su7uXEcaR3S5BZppucrGMz40dhqPbSF
0Lm+kTrDbfpSPBCCHFpuyzzv+3MXvlWRIbvqh+w5Cde0UWW5Fl0ruGTv8ZIOxn2r
lIcsWYOB8jN7t9fY7BI/dO8PgECci+6FvmbELXrHfcxq5N5iiRgj18MCThNPGSMD
QScKvKsJJgjz7W9d8FrMmea0iyO9b6kNm38OvVsSocbpodxAQQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFP4hlBHYXAuWJXuYhms9dp6b/WmHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNDMwMGIxZmYtMzA3ZC0z
MTkwLWI2MjQtYjcyMzg5N2VlMWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjYswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAcB+6869TvlO4F1/QvBDw+LuUDGgsUkOXJBHH5x0fiZNjWIt6SLSmtty7
IdFh9AJCt/SElXSTP0AAIPtLNjD+/A72M68jxq6Mtvb0Ns9OgJQK91P7edQmPUjK
FZE6ysATzZ5dHkK9+cPiRDfZyK2Ach7AiV2KTQawos544Pxr282mKcCOp1aIDVhk
WNuFLhAjcZIELJq8FjcVC1GR1UCO7bBdiM9uz9NSCKc3F12Aw57S0i4ppbaIIvoj
lo3WiaoKxbh4A/NoeZdMvjj+bfJ6tJx6ilDAOPR3ffu+hYJXD/AssKF/jtzSUGRA
eqfLDY/IrPPmKkzXmk1ZKFurfyJMOg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:16:22 2025 by rpki-client