Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4712acaa-7fce-3d2b-b76a-29b71abc0b72.roa
File: 4712acaa-7fce-3d2b-b76a-29b71abc0b72.roa (raw, json)
Hash identifier: DgknKyHGvVUTXg2QjvwtQV+sF7k+0yN8PBSH3nLIVuc=
Subject key identifier: F9:96:BF:19:E8:FC:91:61:92:A4:0F:D1:94:DC:94:7A:CC:63:87:87
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E30806D86D06FCE8EBA90D280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4712acaa-7fce-3d2b-b76a-29b71abc0b72.roa
Signing time: Thu 09 Jun 2022 12:00:00 +0000
ROA not before: Thu 09 Jun 2022 12:00:00 +0000
ROA not after: Fri 15 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 141.181.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:30:80:6d:86:d0:6f:ce:8e:ba:90:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 9 12:00:00 2022 GMT
Not After : Jul 15 04:00:00 2022 GMT
Subject: CN=3e84e41c-9353-4199-b7ed-e2b1efb6540a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:a3:63:54:a9:33:86:99:c9:57:de:0d:c3:
93:77:f5:a2:90:6f:54:44:04:aa:92:bb:2e:14:0f:
41:cb:5a:07:0e:41:a0:f9:9e:01:50:29:04:86:31:
ba:90:fc:8b:1f:65:3c:a2:3a:b8:fe:08:c7:ab:2b:
cf:10:35:6a:71:e3:5a:b9:a0:f7:89:50:10:58:58:
1e:fc:09:e7:99:25:e0:3d:03:30:83:40:73:73:9d:
26:0f:0b:9c:e8:e9:15:ea:97:07:d5:f0:b3:1c:3a:
76:18:9c:02:07:c7:93:b3:7a:b9:97:fa:b8:2c:44:
9d:10:cb:75:93:e0:aa:22:97:b5:53:63:19:a1:13:
b6:da:44:ac:e5:d5:86:12:76:48:57:d1:9a:b6:22:
22:b5:60:5d:9c:70:3e:c2:c7:d4:ca:3d:24:2e:31:
2d:30:14:f3:35:df:97:07:2c:77:65:f6:95:30:9a:
76:0f:22:d9:95:f8:72:c7:0e:28:70:94:f9:b8:a1:
f7:32:de:2e:32:b6:9e:90:b2:ae:05:01:56:fc:a7:
a5:3a:d5:b2:19:da:de:e6:44:2d:b8:cb:b0:41:c1:
62:83:df:4a:6f:d7:37:5e:49:95:ec:d1:b5:ec:92:
c2:e0:63:02:01:a8:f1:54:80:08:3f:4c:e3:14:12:
8d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:96:BF:19:E8:FC:91:61:92:A4:0F:D1:94:DC:94:7A:CC:63:87:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4712acaa-7fce-3d2b-b76a-29b71abc0b72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.181.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:10:3b:91:90:80:04:0b:10:f2:98:3f:86:56:fa:db:43:71:
f2:83:43:62:47:21:b1:0c:48:26:9d:cb:18:15:f3:01:c2:d1:
de:cc:13:88:c3:38:fc:a2:54:85:94:02:62:88:6b:f5:71:e6:
03:3c:5f:50:23:ef:c4:cd:99:44:c4:20:c6:2a:27:c3:64:5c:
d0:bb:3a:d0:e3:94:bb:78:06:1d:7b:4a:0a:a2:41:6d:f0:a3:
d8:51:2e:77:9a:32:7b:96:e5:b8:42:a8:b3:18:d6:f6:2c:df:
13:79:b7:3d:9c:3d:0a:f8:e7:02:e3:86:1f:e2:4e:e6:fd:d9:
69:69:0d:9b:ac:bc:22:d8:ff:3c:23:ac:a5:a1:76:63:3d:31:
9e:9a:96:86:7b:f6:b3:0b:73:c7:90:25:e3:0e:99:c0:fe:58:
c5:00:55:f6:e0:8b:0f:65:10:37:d6:03:8a:0e:5a:a6:8b:5f:
37:1e:12:f8:8e:77:ef:d0:8b:c0:80:bb:be:07:66:00:c1:c6:
85:38:c7:5a:44:2c:e2:70:6b:18:86:c4:70:bc:df:3c:b6:d2:
24:17:94:55:89:4b:15:ff:37:04:d1:35:44:f4:da:b5:61:97:
f4:9c:c0:46:ac:37:e9:4b:b1:3f:27:a9:3d:08:84:f0:bb:b5:
b9:17:e9:94
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4wgG2G0G/OjrqQ0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYwOTEyMDAwMFoXDTIyMDcxNTA0MDAwMFowLzEtMCsGA1UEAxMk
M2U4NGU0MWMtOTM1My00MTk5LWI3ZWQtZTJiMWVmYjY1NDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0CjY1SpM4aZyVfeDcOTd/WikG9URASqkrsu
FA9By1oHDkGg+Z4BUCkEhjG6kPyLH2U8ojq4/gjHqyvPEDVqceNauaD3iVAQWFge
/AnnmSXgPQMwg0Bzc50mDwuc6OkV6pcH1fCzHDp2GJwCB8eTs3q5l/q4LESdEMt1
k+CqIpe1U2MZoRO22kSs5dWGEnZIV9GatiIitWBdnHA+wsfUyj0kLjEtMBTzNd+X
Byx3ZfaVMJp2DyLZlfhyxw4ocJT5uKH3Mt4uMraekLKuBQFW/KelOtWyGdre5kQt
uMuwQcFig99Kb9c3XkmV7NG17JLC4GMCAajxVIAIP0zjFBKNBQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPmWvxno/JFhkqQP0ZTclHrMY4eHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNDcxMmFjYWEtN2ZjZS0z
ZDJiLWI3NmEtMjliNzFhYmMwYjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjbUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAEhA7kZCABAsQ8pg/hlb620Nx8oNDYkchsQxIJp3LGBXzAcLR3swTiMM4
/KJUhZQCYohr9XHmAzxfUCPvxM2ZRMQgxionw2Rc0Ls60OOUu3gGHXtKCqJBbfCj
2FEud5oye5bluEKosxjW9izfE3m3PZw9CvjnAuOGH+JO5v3ZaWkNm6y8Itj/PCOs
paF2Yz0xnpqWhnv2swtzx5Al4w6ZwP5YxQBV9uCLD2UQN9YDig5apotfNx4S+I53
79CLwIC7vgdmAMHGhTjHWkQs4nBrGIbEcLzfPLbSJBeUVYlLFf83BNE1RPTatWGX
9JzARqw36UuxPyepPQiE8Lu1uRfplA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:25:08 2025 by rpki-client