Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/46245e14-9a94-35f5-9d97-4f8d7d7ce7e1.roa
File: 46245e14-9a94-35f5-9d97-4f8d7d7ce7e1.roa (raw, json)
Hash identifier: JHWkrmoppwVwskw+dSHgmMVZVpF27dLMHKPGsUkidZg=
Subject key identifier: 3A:54:DC:23:14:DC:50:96:B6:B9:5A:44:45:81:CE:0A:07:C0:44:B6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBD8336743FA587B3C7756880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/46245e14-9a94-35f5-9d97-4f8d7d7ce7e1.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 35.80.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bd:83:36:74:3f:a5:87:b3:c7:75:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=c034cb4b-1d4d-4912-9fd4-fabd48146ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:29:6d:df:ae:02:1c:4c:b5:1b:01:53:1d:ce:
3b:53:92:76:c7:2e:61:5c:e8:05:04:d1:c9:d4:74:
64:28:cd:1d:20:bd:ac:73:70:08:64:92:48:67:0d:
6b:dc:1f:8e:ae:68:c5:ab:75:0e:38:ca:d1:c5:1f:
7d:2f:5d:ef:20:ab:a2:f8:c1:3d:27:d7:9a:b9:2c:
55:de:2a:f8:d7:86:0b:6a:42:e5:eb:46:d3:6c:bf:
ad:aa:04:24:b7:02:b4:e2:43:ed:a0:32:77:88:16:
36:b9:61:cd:6e:a6:c2:4c:fb:b0:77:5b:5c:c0:87:
61:68:fc:a0:d5:38:2b:c2:07:5f:30:ca:93:80:05:
ae:4b:2e:37:16:95:73:5e:ee:63:68:98:9f:d1:d4:
7e:39:2b:8a:77:32:00:11:13:f5:a3:d1:79:21:13:
2d:b2:3d:74:1e:ae:a5:a2:29:0e:10:a5:8f:6d:f4:
c1:a6:89:20:79:f8:64:04:3f:08:da:84:06:d2:49:
a4:9d:ba:bf:38:70:a4:32:c7:52:a0:eb:77:90:c5:
1f:08:3f:59:b6:0e:89:be:62:64:7a:28:c5:01:ff:
3b:df:e3:a2:5a:5c:f8:b3:9f:45:04:4d:0b:da:03:
17:1f:d1:45:13:f0:24:21:d4:a9:e0:4e:f5:d0:1e:
df:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:54:DC:23:14:DC:50:96:B6:B9:5A:44:45:81:CE:0A:07:C0:44:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/46245e14-9a94-35f5-9d97-4f8d7d7ce7e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.80.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:a3:05:cd:90:8d:a3:73:f8:c1:46:14:3e:b0:dd:c6:a5:c1:
f9:bb:fe:3b:7f:bc:7c:90:95:5a:a0:05:39:b3:b1:82:b2:e3:
65:d5:3e:13:e7:8c:27:b9:a8:19:16:0f:51:96:16:c0:83:86:
39:f0:6f:85:60:28:07:79:2d:88:ff:27:d1:92:00:f0:3d:30:
a3:09:02:c1:46:bd:e7:50:9f:e2:1d:d1:0a:1a:ac:41:1c:59:
ce:f3:f0:84:03:64:87:77:60:d2:b3:6b:89:73:08:de:3b:81:
a1:af:01:99:fb:a2:b1:a5:85:6f:7e:53:1c:e7:ec:d1:c6:2c:
90:56:3a:61:76:d7:83:61:72:bb:26:07:34:0a:f4:b2:75:ab:
a3:b8:fd:a1:cf:ba:b1:d0:6b:96:87:ab:a0:df:3d:9f:a4:bb:
3d:b3:bf:72:3d:30:dd:a9:fb:4a:93:0d:d5:16:29:b9:b7:5d:
b4:b0:6b:f5:e0:32:14:29:a8:0c:c7:b0:6b:3d:1d:84:eb:2c:
b8:d7:65:58:5b:55:19:98:ac:7e:2c:ac:64:61:69:36:dd:4b:
c2:3b:b4:33:cd:19:18:41:3b:07:80:57:4f:9b:92:d5:f0:a2:
1e:cb:f4:19:39:33:55:97:eb:9b:87:87:21:fe:b6:94:e1:ac:
4b:f0:4a:ac
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD69gzZ0P6WHs8d1aIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcyOTEyMDAwMFoXDTIyMDkwMzA0MDAwMFowLzEtMCsGA1UEAxMk
YzAzNGNiNGItMWQ0ZC00OTEyLTlmZDQtZmFiZDQ4MTQ2ZWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSlt364CHEy1GwFTHc47U5J2xy5hXOgFBNHJ
1HRkKM0dIL2sc3AIZJJIZw1r3B+OrmjFq3UOOMrRxR99L13vIKui+ME9J9eauSxV
3ir414YLakLl60bTbL+tqgQktwK04kPtoDJ3iBY2uWHNbqbCTPuwd1tcwIdhaPyg
1TgrwgdfMMqTgAWuSy43FpVzXu5jaJif0dR+OSuKdzIAERP1o9F5IRMtsj10Hq6l
oikOEKWPbfTBpokgefhkBD8I2oQG0kmknbq/OHCkMsdSoOt3kMUfCD9Ztg6JvmJk
eijFAf873+OiWlz4s59FBE0L2gMXH9FFE/AkIdSp4E710B7fWQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDpU3CMU3FCWtrlaREWBzgoHwES2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNDYyNDVlMTQtOWE5NC0z
NWY1LTlkOTctNGY4ZDdkN2NlN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEI1AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAeKMFzZCNo3P4wUYUPrDdxqXB+bv+O3+8fJCVWqAFObOxgrLjZdU+E+eM
J7moGRYPUZYWwIOGOfBvhWAoB3ktiP8n0ZIA8D0wowkCwUa951Cf4h3RChqsQRxZ
zvPwhANkh3dg0rNriXMI3juBoa8BmfuisaWFb35THOfs0cYskFY6YXbXg2FyuyYH
NAr0snWro7j9oc+6sdBrloeroN89n6S7PbO/cj0w3an7SpMN1RYpubddtLBr9eAy
FCmoDMewaz0dhOssuNdlWFtVGZisfiysZGFpNt1Lwju0M80ZGEE7B4BXT5uS1fCi
Hsv0GTkzVZfrm4eHIf62lOGsS/BKrA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:30:40 2025 by rpki-client