Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4e1ddeec-506f-39b1-b9be-160d6ec55062.roa
File: 4e1ddeec-506f-39b1-b9be-160d6ec55062.roa (raw, json)
Hash identifier: GUv6kEXNALzc9NpvAWJhhHiqlYu2lb+FENPSDFOgktQ=
Subject key identifier: 59:84:C2:0F:60:A4:B4:A5:EE:05:0B:71:93:A7:CB:7C:8B:C5:A2:28
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6583F641D69EA057C0755480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4e1ddeec-506f-39b1-b9be-160d6ec55062.roa
Signing time: Tue 28 Jun 2022 12:00:00 +0000
ROA not before: Tue 28 Jun 2022 12:00:00 +0000
ROA not after: Wed 03 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 3.192.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:65:83:f6:41:d6:9e:a0:57:c0:75:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 28 12:00:00 2022 GMT
Not After : Aug 3 04:00:00 2022 GMT
Subject: CN=5817d1a5-222d-47ae-af10-24084a3dbda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:88:35:e1:a1:32:d9:83:d5:d7:58:84:1c:79:
0e:c5:ac:23:02:8a:08:c1:e8:14:1a:2f:0e:8e:80:
b9:85:59:33:c4:cf:85:72:1e:e1:dc:36:63:b8:20:
7b:41:a0:34:ab:3d:c5:2e:5a:7a:0b:22:47:b9:75:
f8:a7:ec:95:80:aa:e9:4b:f6:9b:3a:b7:e6:0f:ed:
31:d4:d2:86:c4:03:0b:f2:94:bd:8b:e2:70:a3:66:
ae:06:6d:82:2e:b8:0a:06:9e:8f:99:ae:c2:65:8a:
d6:c3:db:4b:a5:fc:06:44:e8:42:e5:e0:70:c3:19:
89:07:1c:8f:13:cf:1a:0b:32:2e:c0:f0:3b:25:4a:
fb:7c:68:64:bd:4a:8f:ce:15:37:ab:77:e1:1d:6a:
f9:a5:9f:ff:57:38:30:e6:c9:0d:ca:f8:74:4d:b4:
77:3a:f1:fd:e8:b1:68:75:41:d4:ba:9c:93:49:94:
6b:bc:a1:3f:08:92:2b:32:77:e5:76:e2:34:9b:dd:
0f:26:74:d1:de:c0:31:05:36:a4:63:67:f1:80:d1:
71:be:bd:6f:e1:e9:54:7a:a1:9c:5e:7a:b1:d3:2c:
bb:d7:06:92:5c:d6:19:bd:1b:f7:f8:18:19:5d:80:
ed:91:16:38:13:91:a1:a5:da:43:6e:a5:68:63:f0:
81:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:84:C2:0F:60:A4:B4:A5:EE:05:0B:71:93:A7:CB:7C:8B:C5:A2:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4e1ddeec-506f-39b1-b9be-160d6ec55062.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.192.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:24:63:a6:ae:94:3d:f6:6f:67:aa:2d:7e:24:23:48:50:c2:
f3:18:23:51:54:f6:53:75:5f:95:b9:69:83:1f:b2:08:69:95:
6c:cf:2b:fd:93:89:12:08:bd:b6:60:6e:f1:6e:7a:7b:fb:f4:
d7:04:23:7d:22:f0:4b:7a:e3:98:44:90:ee:8d:04:19:6c:0f:
19:44:89:33:36:e1:99:da:e1:d3:b3:a6:75:1e:11:0c:5b:6c:
d5:53:44:f6:89:59:65:71:c7:fd:d2:0a:8b:63:78:a6:d2:a1:
8e:d5:a1:86:e7:a8:3c:42:bf:46:e5:7e:4c:b7:2f:f2:49:c8:
bc:a6:f3:d7:5c:ea:b8:fd:57:51:75:d7:f5:33:e9:71:83:6f:
8a:bd:fc:15:26:2e:c6:42:63:f1:08:38:0b:08:ce:04:a7:84:
ce:af:db:7a:cc:41:2d:6e:f1:d0:cb:17:21:e6:21:47:5d:6c:
81:77:d3:df:6a:fc:d1:0d:e9:29:6d:e8:30:29:dc:49:8b:eb:
86:e9:c0:50:82:92:3b:36:15:96:e9:18:13:bf:dd:1d:40:7f:
cd:42:f3:b8:df:a5:9f:b5:cd:34:47:5e:ac:8a:02:bf:48:d9:
56:9d:56:33:85:70:44:dc:3f:4e:0d:4d:e2:66:f9:a6:f3:ad:
72:40:db:ce
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5lg/ZB1p6gV8B1VIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYyODEyMDAwMFoXDTIyMDgwMzA0MDAwMFowLzEtMCsGA1UEAxMk
NTgxN2QxYTUtMjIyZC00N2FlLWFmMTAtMjQwODRhM2RiZGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYg14aEy2YPV11iEHHkOxawjAooIwegUGi8O
joC5hVkzxM+Fch7h3DZjuCB7QaA0qz3FLlp6CyJHuXX4p+yVgKrpS/abOrfmD+0x
1NKGxAML8pS9i+Jwo2auBm2CLrgKBp6Pma7CZYrWw9tLpfwGROhC5eBwwxmJBxyP
E88aCzIuwPA7JUr7fGhkvUqPzhU3q3fhHWr5pZ//Vzgw5skNyvh0TbR3OvH96LFo
dUHUupyTSZRrvKE/CJIrMnflduI0m90PJnTR3sAxBTakY2fxgNFxvr1v4elUeqGc
Xnqx0yy71waSXNYZvRv3+BgZXYDtkRY4E5GhpdpDbqVoY/CBUwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFmEwg9gpLSl7gULcZOny3yLxaIoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNGUxZGRlZWMtNTA2Zi0z
OWIxLWI5YmUtMTYwZDZlYzU1MDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMGA8AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAeyRjpq6UPfZvZ6otfiQjSFDC8xgjUVT2U3Vflblpgx+yCGmVbM8r/ZOJ
Egi9tmBu8W56e/v01wQjfSLwS3rjmESQ7o0EGWwPGUSJMzbhmdrh07OmdR4RDFts
1VNE9olZZXHH/dIKi2N4ptKhjtWhhueoPEK/RuV+TLcv8knIvKbz11zquP1XUXXX
9TPpcYNvir38FSYuxkJj8Qg4CwjOBKeEzq/besxBLW7x0MsXIeYhR11sgXfT32r8
0Q3pKW3oMCncSYvrhunAUIKSOzYVlukYE7/dHUB/zULzuN+ln7XNNEderIoCv0jZ
Vp1WM4VwRNw/Tg1N4mb5pvOtckDbzg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 18:00:06 2025 by rpki-client