Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4402698a-864c-3554-a3a3-b7667e1fa60d.roa
File: 4402698a-864c-3554-a3a3-b7667e1fa60d.roa (raw, json)
Hash identifier: eHxDV+FQzb6TLytYUxP8UP/DbXEebJX9ju1Jr0dxwFc=
Subject key identifier: 02:35:19:27:92:AB:62:FE:F4:93:7A:15:6E:FB:5D:81:C3:DB:2B:D5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6F9D7230889CE18BEF772F20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4402698a-864c-3554-a3a3-b7667e1fa60d.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 134.64.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:9d:72:30:88:9c:e1:8b:ef:77:2f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=585e5ad9-6f33-4d4d-a1fe-3b4778fb65ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:8e:b8:87:0a:1c:d9:38:b0:05:99:49:42:
1c:60:47:a6:c3:36:04:96:20:0e:37:ca:88:31:d8:
69:7a:53:3c:5f:c9:7f:ed:03:82:97:49:6f:9e:0e:
5c:3c:74:54:46:25:10:bc:21:e2:29:53:08:69:0c:
7b:58:e7:16:d0:90:52:a6:6a:5e:1b:33:64:74:2b:
13:08:b0:2c:38:2d:a7:bc:16:6a:1a:5a:20:98:90:
7e:ba:27:3c:14:7a:3c:0f:de:52:a3:62:25:eb:49:
c4:cd:82:37:b4:ea:e8:ae:83:77:df:55:f6:c5:f3:
38:6a:c6:eb:25:92:d2:fe:e0:24:25:bf:24:1b:2a:
54:a3:c3:20:8f:05:aa:f2:0f:c9:87:40:87:d1:0b:
e3:e5:a8:f6:a9:0c:63:84:6f:1e:71:a6:9e:17:0f:
c2:08:71:ed:ba:c0:9c:f0:67:ab:5f:2c:e8:6f:76:
5c:3d:06:03:a4:ae:96:64:b2:a1:07:13:24:2a:d3:
16:50:a3:7e:23:3f:25:6b:73:8f:a3:0d:ab:1e:b3:
ec:04:39:ca:d5:7d:cd:a3:94:24:e1:58:82:22:06:
c2:93:cd:19:1b:5e:27:6b:86:30:5b:2e:fe:e0:bd:
4c:65:0a:20:28:77:17:6f:a0:b8:0e:84:97:16:42:
fd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:35:19:27:92:AB:62:FE:F4:93:7A:15:6E:FB:5D:81:C3:DB:2B:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4402698a-864c-3554-a3a3-b7667e1fa60d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
134.64.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:3c:a6:d9:ec:d8:ee:da:d8:77:e5:a7:f1:ed:fd:ac:ea:03:
a7:4d:22:27:2f:6f:37:fa:a5:a1:2b:2c:d6:9e:6b:fa:4b:bc:
cc:5d:16:3a:86:89:c8:a3:8a:b4:9b:da:65:b6:40:18:57:d1:
66:87:3b:47:27:ea:3e:72:9a:3d:91:03:f6:1d:0d:14:ad:78:
4d:d2:8b:da:9f:7c:a2:8d:1c:ec:38:5c:6d:0c:a3:99:ee:8f:
dc:30:17:15:0c:2f:b4:9d:cb:b9:63:d7:35:b3:bc:7f:7b:69:
1a:8d:bb:e1:25:75:9e:f1:f3:bc:c4:bc:fc:4a:b9:a5:b3:de:
e0:7f:03:2b:b5:c4:8d:23:92:99:14:12:53:4f:17:30:59:10:
d8:e3:0b:17:05:81:a7:f5:52:d7:b5:15:5a:f7:62:d7:22:cd:
14:20:72:01:d3:4f:24:3a:3b:bd:d7:dc:3a:67:ac:3f:eb:6d:
00:d3:75:f2:95:01:42:a3:5d:2f:6a:fd:06:12:99:b9:52:eb:
64:1c:a5:c2:d7:6f:45:33:ea:8b:23:ab:9a:89:a2:95:14:77:
12:fd:bd:fa:b6:15:d7:f1:7a:fc:6f:66:d2:87:2f:c4:93:46:
fa:4c:6d:ba:bb:c2:f9:cb:8c:d4:09:c6:44:75:96:86:31:b5:
80:1e:75:d9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDxvnXIwiJzhi+93LyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIxMTIzMTA1MDAwMFoXDTIyMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
NTg1ZTVhZDktNmYzMy00ZDRkLWExZmUtM2I0Nzc4ZmI2NWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukSOuIcKHNk4sAWZSUIcYEemwzYEliAON8qI
MdhpelM8X8l/7QOCl0lvng5cPHRURiUQvCHiKVMIaQx7WOcW0JBSpmpeGzNkdCsT
CLAsOC2nvBZqGlogmJB+uic8FHo8D95So2Il60nEzYI3tOroroN331X2xfM4asbr
JZLS/uAkJb8kGypUo8MgjwWq8g/Jh0CH0Qvj5aj2qQxjhG8ecaaeFw/CCHHtusCc
8GerXyzob3ZcPQYDpK6WZLKhBxMkKtMWUKN+Iz8la3OPow2rHrPsBDnK1X3No5Qk
4ViCIgbCk80ZG14na4YwWy7+4L1MZQogKHcXb6C4DoSXFkL9dwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAI1GSeSq2L+9JN6FW77XYHD2yvVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNDQwMjY5OGEtODY0Yy0z
NTU0LWEzYTMtYjc2NjdlMWZhNjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhkAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFTym2ezY7trYd+Wn8e39rOoDp00iJy9vN/qloSss1p5r+ku8zF0WOoaJ
yKOKtJvaZbZAGFfRZoc7RyfqPnKaPZED9h0NFK14TdKL2p98oo0c7DhcbQyjme6P
3DAXFQwvtJ3LuWPXNbO8f3tpGo274SV1nvHzvMS8/Eq5pbPe4H8DK7XEjSOSmRQS
U08XMFkQ2OMLFwWBp/VS17UVWvdi1yLNFCByAdNPJDo7vdfcOmesP+ttANN18pUB
QqNdL2r9BhKZuVLrZBylwtdvRTPqiyOrmomilRR3Ev29+rYV1/F6/G9m0ocvxJNG
+kxturvC+cuM1AnGRHWWhjG1gB512Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:16:56 2025 by rpki-client