Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a637466-214a-3b72-8fc5-b7badb42a4fb.roa
File: 4a637466-214a-3b72-8fc5-b7badb42a4fb.roa (raw, json)
Hash identifier: I4pXx3CV+asOi7ItylCpbS3TlyDRYPhR4xa6BdT1Jtw=
Subject key identifier: 96:21:60:3C:AF:F0:23:5F:FE:E2:A7:BE:B5:B8:D7:70:2F:C1:A1:FB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D6CEFADAF571AF4C66CAF7D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a637466-214a-3b72-8fc5-b7badb42a4fb.roa
Signing time: Fri 01 Apr 2022 04:00:00 +0000
ROA not before: Fri 01 Apr 2022 04:00:00 +0000
ROA not after: Fri 06 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 141.185.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:6c:ef:ad:af:57:1a:f4:c6:6c:af:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 1 04:00:00 2022 GMT
Not After : May 6 04:00:00 2022 GMT
Subject: CN=d46bf202-7c95-4254-b90b-e537a6d94156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c2:bf:5c:d7:b8:bb:b4:2a:ba:60:5c:fa:e2:
7c:8a:b6:98:1f:b5:b6:ad:19:d4:75:82:18:2a:02:
70:a7:c8:62:97:88:a4:7a:dd:18:fa:c3:a7:19:d2:
c8:08:3a:bf:3d:11:23:00:04:91:f6:b0:81:cc:16:
e5:03:68:16:f4:6f:06:29:50:e5:eb:da:6c:67:cf:
2c:ee:77:a4:c3:e9:0b:1a:c2:12:3d:8d:73:8e:e3:
ed:56:6b:e5:94:a8:06:be:75:e6:ef:26:32:46:66:
77:81:e2:5e:58:1a:28:a9:93:51:8e:48:60:89:bf:
f1:19:66:78:4e:2a:60:89:eb:2f:23:74:94:53:20:
bb:c3:e2:2a:ea:1d:ae:be:bc:87:85:f1:79:5a:68:
08:2d:a9:36:f2:0f:a9:f5:c6:b4:dc:a1:e4:4b:c0:
f1:76:d6:40:84:df:f2:2d:bc:7a:d7:6a:13:06:8e:
c4:51:4f:95:96:67:09:b8:40:24:5e:c2:53:75:c2:
ac:b4:59:0d:43:48:7d:4c:c6:26:6b:26:57:6e:b7:
ae:65:e7:90:69:fe:cc:9c:cd:f2:1a:81:c6:48:09:
be:e4:4b:dc:00:c5:94:f6:db:36:26:c6:25:ec:9c:
b4:50:2d:50:2f:09:19:33:28:cb:d9:8d:f9:b6:ee:
0e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:21:60:3C:AF:F0:23:5F:FE:E2:A7:BE:B5:B8:D7:70:2F:C1:A1:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a637466-214a-3b72-8fc5-b7badb42a4fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.185.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:95:6f:f4:f7:78:4a:56:78:99:c6:ed:16:a5:61:be:aa:04:
eb:d7:bc:cb:5a:d2:43:b4:36:68:8b:21:d2:23:d5:21:ac:a5:
3a:aa:9d:e9:3b:d0:ff:5e:8e:7d:0b:f5:4d:c4:75:4c:c4:d6:
19:56:c1:ef:27:ee:58:ea:b1:0d:d3:32:af:06:7e:1b:57:df:
b4:17:b8:95:31:bb:3a:fb:d9:82:af:08:5e:63:35:d5:e1:31:
69:4d:65:8d:a8:a1:bf:d2:98:01:70:86:72:5c:f8:de:d4:8e:
13:a0:e1:16:c3:c6:c8:8d:1f:cf:22:8b:dd:dc:b1:31:4f:ef:
80:85:66:16:1d:03:15:30:1f:9e:34:8d:2a:3f:06:8d:65:4d:
5c:8e:93:62:fa:3a:0b:ce:b8:ff:a9:fa:79:a9:e3:25:fe:64:
5a:63:4e:ae:9d:d7:35:e7:b1:7a:46:04:1a:c7:76:e8:f2:88:
2e:fb:e8:16:c2:58:db:cd:f5:da:47:8a:c5:e8:41:ab:24:09:
48:4b:31:d3:e0:fc:be:c2:b7:3b:50:6f:9b:0d:90:4e:d5:b6:
2a:66:4d:37:3b:24:a7:3f:6f:d3:29:e6:33:c3:52:61:d8:31:
0e:18:8c:55:7d:e0:3e:ff:f5:01:d4:85:68:20:d2:61:73:c5:
16:c8:d3:7e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1s762vVxr0xmyvfQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQwMTA0MDAwMFoXDTIyMDUwNjA0MDAwMFowLzEtMCsGA1UEAxMk
ZDQ2YmYyMDItN2M5NS00MjU0LWI5MGItZTUzN2E2ZDk0MTU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MK/XNe4u7QqumBc+uJ8iraYH7W2rRnUdYIY
KgJwp8hil4iket0Y+sOnGdLICDq/PREjAASR9rCBzBblA2gW9G8GKVDl69psZ88s
7nekw+kLGsISPY1zjuPtVmvllKgGvnXm7yYyRmZ3geJeWBooqZNRjkhgib/xGWZ4
TipgiesvI3SUUyC7w+Iq6h2uvryHhfF5WmgILak28g+p9ca03KHkS8DxdtZAhN/y
Lbx612oTBo7EUU+VlmcJuEAkXsJTdcKstFkNQ0h9TMYmayZXbreuZeeQaf7MnM3y
GoHGSAm+5EvcAMWU9ts2JsYl7Jy0UC1QLwkZMyjL2Y35tu4OwQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJYhYDyv8CNf/uKnvrW413AvwaH7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNGE2Mzc0NjYtMjE0YS0z
YjcyLThmYzUtYjdiYWRiNDJhNGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjbkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXpVv9Pd4SlZ4mcbtFqVhvqoE69e8y1rSQ7Q2aIsh0iPVIaylOqqd6TvQ
/16OfQv1TcR1TMTWGVbB7yfuWOqxDdMyrwZ+G1fftBe4lTG7OvvZgq8IXmM11eEx
aU1ljaihv9KYAXCGclz43tSOE6DhFsPGyI0fzyKL3dyxMU/vgIVmFh0DFTAfnjSN
Kj8GjWVNXI6TYvo6C864/6n6eanjJf5kWmNOrp3XNeexekYEGsd26PKILvvoFsJY
28312keKxehBqyQJSEsx0+D8vsK3O1Bvmw2QTtW2KmZNNzskpz9v0ynmM8NSYdgx
DhiMVX3gPv/1AdSFaCDSYXPFFsjTfg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:16:59 2025 by rpki-client