Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/581213e2-4e27-3d93-a471-e55b5dd7014d.roa
File: 581213e2-4e27-3d93-a471-e55b5dd7014d.roa (raw, json)
Hash identifier: UzDSZ6v72R2XnNnGSUa9fLB4qraMrBPO0fA1zoW+AaA=
Subject key identifier: A2:20:A1:83:04:3C:E2:5F:76:BD:AA:46:C7:42:C3:50:29:A4:40:F8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF9EABC1C5A9BADF92C852300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/581213e2-4e27-3d93-a471-e55b5dd7014d.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 35.160.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f9:ea:bc:1c:5a:9b:ad:f9:2c:85:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=cd1fb5fd-ab9f-480b-ace3-6809f36751c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:64:a9:8a:8f:82:1b:fd:24:5f:d9:b7:86:
ff:69:d2:53:da:c5:29:7c:ac:2f:5b:7a:1c:92:89:
b9:d3:e2:2f:06:06:af:4f:93:a7:71:f9:b1:15:1a:
a5:c8:30:04:42:d8:1a:dc:e6:7e:ab:e5:ee:ae:f7:
8d:47:4c:4e:37:ad:88:ac:81:12:63:e9:d1:bd:85:
be:1c:1a:c0:76:5c:44:c8:02:22:bf:b5:98:6f:7e:
80:9b:a2:c5:15:97:a1:33:b7:e5:9c:8e:53:90:f8:
71:c3:27:af:10:9c:4e:c6:48:b8:60:d7:87:4b:b3:
9d:25:cd:ae:a4:b6:7e:79:e7:11:2c:7c:ab:a1:39:
3a:09:6e:36:15:8f:fa:ea:2a:b5:3e:ba:d9:10:be:
79:df:80:e8:fc:87:35:ff:30:4f:e8:d8:3c:e6:1c:
7d:54:6a:6e:7b:9d:a9:db:b7:73:eb:4d:17:e9:b3:
c0:cd:51:dd:1f:73:f8:ac:9c:ee:c1:b5:c6:08:a4:
10:d4:4c:c1:21:04:6d:73:26:55:59:5f:c2:04:15:
89:84:72:76:94:d3:d9:8a:aa:5e:a4:2c:2e:51:02:
cb:e9:17:a6:59:73:03:68:1f:ee:94:15:86:10:35:
ef:9f:51:26:f4:89:9f:e4:a9:9e:84:25:a2:56:7c:
2c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:20:A1:83:04:3C:E2:5F:76:BD:AA:46:C7:42:C3:50:29:A4:40:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/581213e2-4e27-3d93-a471-e55b5dd7014d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.160.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:08:c4:1e:38:ef:1d:c1:60:23:84:80:b6:e1:00:e3:37:1f:
dc:84:05:46:8b:1d:6a:fa:1f:0f:0a:70:2d:48:bd:27:5c:03:
54:46:24:d5:e4:90:f1:79:38:f1:54:62:cf:62:2d:79:35:67:
9c:ed:5b:cf:76:4d:45:9b:9a:e0:e1:cb:71:34:ca:5c:14:bc:
88:b1:cd:84:8c:cc:c0:eb:d0:f0:48:48:34:12:da:a4:fc:87:
c1:d7:00:59:7f:18:2f:e5:c1:ec:75:69:22:4b:00:c4:c8:b7:
38:7f:02:b5:ee:c6:8f:9e:bf:44:6f:60:b7:3d:3f:84:12:f2:
b8:0a:7a:03:d4:a7:6c:2c:61:e2:29:8c:b9:01:88:e4:0f:4a:
6d:7e:d7:8a:d2:be:22:44:d9:aa:ed:9b:80:9e:9e:0c:d0:55:
5b:09:7e:03:26:2e:12:e0:d7:45:d0:90:73:cb:e2:b2:a0:a6:
6a:9b:55:2c:48:86:55:f7:ff:16:72:e0:5a:30:36:30:bd:b5:
52:d8:32:c0:57:23:19:4d:d1:25:0c:f1:11:52:f9:77:f6:e0:
cc:7e:c4:06:e9:80:51:b7:03:54:81:1f:39:1a:a9:4b:81:79:
d3:07:83:00:fa:7c:d2:e4:c1:ac:fa:19:e5:71:56:57:ff:7c:
a7:95:9d:c9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD356rwcWput+SyFIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUyMDEyMDAwMFoXDTIyMDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
Y2QxZmI1ZmQtYWI5Zi00ODBiLWFjZTMtNjgwOWYzNjc1MWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusVkqYqPghv9JF/Zt4b/adJT2sUpfKwvW3oc
kom50+IvBgavT5OncfmxFRqlyDAEQtga3OZ+q+XurveNR0xON62IrIESY+nRvYW+
HBrAdlxEyAIiv7WYb36Am6LFFZehM7flnI5TkPhxwyevEJxOxki4YNeHS7OdJc2u
pLZ+eecRLHyroTk6CW42FY/66iq1PrrZEL5534Do/Ic1/zBP6Ng85hx9VGpue52p
27dz600X6bPAzVHdH3P4rJzuwbXGCKQQ1EzBIQRtcyZVWV/CBBWJhHJ2lNPZiqpe
pCwuUQLL6RemWXMDaB/ulBWGEDXvn1Em9Imf5KmehCWiVnwshQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKIgoYMEPOJfdr2qRsdCw1AppED4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNTgxMjEzZTItNGUyNy0z
ZDkzLWE0NzEtZTU1YjVkZDcwMTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEI6AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAowjEHjjvHcFgI4SAtuEA4zcf3IQFRosdavofDwpwLUi9J1wDVEYk1eSQ
8Xk48VRiz2IteTVnnO1bz3ZNRZua4OHLcTTKXBS8iLHNhIzMwOvQ8EhINBLapPyH
wdcAWX8YL+XB7HVpIksAxMi3OH8Cte7Gj56/RG9gtz0/hBLyuAp6A9SnbCxh4imM
uQGI5A9KbX7XitK+IkTZqu2bgJ6eDNBVWwl+AyYuEuDXRdCQc8visqCmaptVLEiG
Vff/FnLgWjA2ML21UtgywFcjGU3RJQzxEVL5d/bgzH7EBumAUbcDVIEfORqpS4F5
0weDAPp80uTBrPoZ5XFWV/98p5WdyQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:40:09 2025 by rpki-client