Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a1dad10-3b91-3194-ba87-dcbe1f06c576.roa
File: 4a1dad10-3b91-3194-ba87-dcbe1f06c576.roa (raw, json)
Hash identifier: qL5PXxZEkKAL6xgYuiHhRZFUE7/3OCNbJzv8k8VeZ3M=
Subject key identifier: BA:37:F6:7A:4B:59:24:AB:D5:51:D9:3E:6C:85:78:AF:17:11:1E:8C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF72F0D5D848A2BAB29232C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a1dad10-3b91-3194-ba87-dcbe1f06c576.roa
Signing time: Thu 19 May 2022 12:00:00 +0000
ROA not before: Thu 19 May 2022 12:00:00 +0000
ROA not after: Fri 24 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 140.145.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f7:2f:0d:5d:84:8a:2b:ab:29:23:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 19 12:00:00 2022 GMT
Not After : Jun 24 04:00:00 2022 GMT
Subject: CN=675071b0-ec10-41c8-a6b0-ae9c28425d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:35:9e:7d:69:83:7b:61:bf:67:a1:ee:5a:31:
84:77:fd:6d:d1:f1:ab:aa:6a:dd:9c:e3:8b:dd:ed:
65:36:59:1a:86:5f:2d:4c:00:8d:58:cb:fd:99:5a:
7e:43:03:0d:c4:3b:f2:d8:a9:c6:b5:c5:07:0d:ed:
54:2b:4e:6a:3e:63:2f:24:d7:df:f0:55:eb:6c:8a:
ce:bf:a8:e1:66:9d:93:a3:b6:a9:69:c8:fd:d8:52:
fd:78:e4:3e:ed:9e:18:06:4a:0b:b8:9a:19:ea:43:
53:01:2a:0b:82:a3:86:69:65:ae:51:fd:18:f3:fd:
f1:22:a7:07:a0:23:15:eb:11:c6:68:92:8c:6c:01:
b4:0e:d5:f9:f7:f9:3e:93:df:a6:ab:6b:41:68:91:
0a:92:cb:02:0e:a1:cf:a6:12:f5:f0:5c:86:27:83:
66:86:5a:04:04:ee:a1:f2:ab:dd:89:06:77:db:95:
b2:49:06:39:bf:85:36:18:2c:d7:f9:3b:40:6d:93:
08:60:68:ba:98:83:10:51:e0:bf:e9:27:82:b5:ea:
16:bd:17:7c:f8:dc:8f:c2:d0:eb:2a:85:63:89:f9:
91:8c:0d:60:2f:05:79:ca:3b:d6:ae:ac:be:53:46:
bc:de:40:d4:16:94:3a:b5:c8:96:f0:ae:be:7e:df:
ce:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:37:F6:7A:4B:59:24:AB:D5:51:D9:3E:6C:85:78:AF:17:11:1E:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a1dad10-3b91-3194-ba87-dcbe1f06c576.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
140.145.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:82:94:2b:04:fe:54:0a:f7:3a:55:08:8e:54:dd:94:2e:70:
06:91:98:9d:ba:f2:32:36:a4:d3:27:69:8d:20:00:f6:26:b4:
da:32:fd:11:92:6c:f9:91:74:75:13:12:bd:c4:b3:3f:af:41:
0f:c7:3d:72:c8:53:b7:4a:b7:a2:f2:ba:a9:51:d6:15:35:99:
e8:b6:51:82:fa:db:b0:ad:ba:85:34:b7:de:32:9f:fc:dc:46:
27:b3:df:2a:46:89:81:37:b2:43:1d:51:c9:cd:72:3b:e3:a9:
19:e9:2e:61:b2:87:7e:4e:81:24:9d:35:5b:c2:a1:26:fe:1b:
15:e0:95:63:aa:15:f9:f6:5b:90:12:cf:c3:0c:ae:94:3c:bb:
df:86:ee:84:cc:d0:75:9a:58:9a:8b:26:ae:a9:ac:59:5d:18:
2f:84:54:ae:ed:f8:50:e3:3d:85:f1:64:6e:3d:e0:7b:a6:10:
34:dc:71:92:4a:5e:d1:7a:90:25:9a:ad:ab:dd:64:1e:08:ad:
79:a0:47:4f:7c:7d:e8:89:cc:3b:06:6f:b4:d1:78:37:b6:42:
ee:cc:7f:61:f9:3e:dd:bf:97:e7:af:77:27:03:9f:c0:9f:b6:
27:a7:33:91:30:73:9f:d5:98:f0:4a:73:e6:fc:a8:92:1b:77:
05:65:24:69
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD33Lw1dhIorqykjLIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUxOTEyMDAwMFoXDTIyMDYyNDA0MDAwMFowLzEtMCsGA1UEAxMk
Njc1MDcxYjAtZWMxMC00MWM4LWE2YjAtYWU5YzI4NDI1ZDg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDWefWmDe2G/Z6HuWjGEd/1t0fGrqmrdnOOL
3e1lNlkahl8tTACNWMv9mVp+QwMNxDvy2KnGtcUHDe1UK05qPmMvJNff8FXrbIrO
v6jhZp2To7apacj92FL9eOQ+7Z4YBkoLuJoZ6kNTASoLgqOGaWWuUf0Y8/3xIqcH
oCMV6xHGaJKMbAG0DtX59/k+k9+mq2tBaJEKkssCDqHPphL18FyGJ4NmhloEBO6h
8qvdiQZ325WySQY5v4U2GCzX+TtAbZMIYGi6mIMQUeC/6SeCteoWvRd8+NyPwtDr
KoVjifmRjA1gLwV5yjvWrqy+U0a83kDUFpQ6tciW8K6+ft/ODQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLo39npLWSSr1VHZPmyFeK8XER6MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNGExZGFkMTAtM2I5MS0z
MTk0LWJhODctZGNiZTFmMDZjNTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjJEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAvoKUKwT+VAr3OlUIjlTdlC5wBpGYnbryMjak0ydpjSAA9ia02jL9EZJs
+ZF0dRMSvcSzP69BD8c9cshTt0q3ovK6qVHWFTWZ6LZRgvrbsK26hTS33jKf/NxG
J7PfKkaJgTeyQx1Ryc1yO+OpGekuYbKHfk6BJJ01W8KhJv4bFeCVY6oV+fZbkBLP
wwyulDy734buhMzQdZpYmosmrqmsWV0YL4RUru34UOM9hfFkbj3ge6YQNNxxkkpe
0XqQJZqtq91kHgiteaBHT3x96InMOwZvtNF4N7ZC7sx/Yfk+3b+X5693JwOfwJ+2
J6czkTBzn9WY8Epz5vyokht3BWUkaQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 22:01:19 2025 by rpki-client