Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65c3d987-cc9f-3cc0-a791-8488ca1bc02e.roa
File: 65c3d987-cc9f-3cc0-a791-8488ca1bc02e.roa (raw, json)
Hash identifier: 4Ui/OV0R3+fl0rPTOpIhUsRTHxU9j1Qs7/9CCQq/u70=
Subject key identifier: 97:0A:2D:7D:E5:80:59:18:DF:46:BF:CD:71:0A:BF:6A:5F:39:F6:02
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D64798C31B9DBFF9999A721C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65c3d987-cc9f-3cc0-a791-8488ca1bc02e.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 03 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.135.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:64:79:8c:31:b9:db:ff:99:99:a7:21:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : May 3 04:00:00 2022 GMT
Subject: CN=8ef2a5fe-1aaf-4029-806c-a0a297e3e9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1b:55:60:1d:a9:4c:08:1f:0e:e9:85:d4:04:
e7:f8:a6:e1:7f:46:e8:a3:a9:29:e9:ae:69:b8:56:
50:92:6b:c6:fe:53:c9:0a:b6:73:f7:e4:b8:24:82:
44:f3:3f:e6:6a:21:a2:78:21:56:b3:14:7e:b2:50:
c1:ed:e7:60:24:27:07:02:a8:ce:04:70:8e:03:91:
19:5e:db:08:0c:d5:cf:fb:d6:22:a6:e7:e0:27:7b:
b2:d8:b7:26:17:24:21:bb:bc:49:1d:eb:da:9b:c9:
74:18:b1:50:88:5d:7e:d0:36:7e:57:40:a1:50:51:
d4:7b:f1:dd:b3:a3:7b:9c:06:49:26:67:e0:47:09:
c4:a0:df:a7:45:fa:59:56:cb:b4:39:99:b4:23:86:
22:8f:8a:a3:0e:53:b3:c7:31:ef:21:15:aa:f5:c6:
88:9c:58:fb:ba:56:ef:a6:87:da:6e:ad:3b:05:04:
93:e6:6f:0d:4c:a6:fe:09:90:f6:4a:e5:b7:a9:75:
49:08:98:d9:c7:cb:c5:51:4a:c5:35:28:c3:b8:71:
41:49:2f:1e:42:ed:d6:82:17:26:a0:b2:64:fe:41:
d1:8d:b7:87:b6:16:28:78:84:5d:60:23:ee:f1:77:
ba:95:68:bf:14:52:b1:32:59:83:e3:dd:39:f8:92:
5f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0A:2D:7D:E5:80:59:18:DF:46:BF:CD:71:0A:BF:6A:5F:39:F6:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65c3d987-cc9f-3cc0-a791-8488ca1bc02e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.135.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:4a:a8:75:b9:86:50:66:34:48:8f:27:1e:66:7b:14:de:63:
cc:61:64:21:2f:73:81:ee:62:af:14:e4:e8:2c:c5:82:e9:0c:
39:ea:2d:bc:1f:cc:91:42:79:30:6c:21:7e:64:7d:38:c6:3f:
85:a9:1a:91:0f:70:b7:f6:7c:8c:64:c9:1b:8f:44:cf:ae:ab:
67:b3:b0:47:59:e1:c1:cb:22:4a:c9:f4:a2:f0:a2:75:bf:2a:
3a:ca:54:21:06:07:36:21:f8:f4:36:60:c1:f8:e0:21:68:eb:
b7:99:58:aa:ee:a8:15:d0:7d:ae:ab:f6:86:75:90:d6:26:4f:
e9:67:c7:e5:23:ad:7b:e9:fc:e7:d0:a6:31:68:9e:33:5a:2c:
a1:30:2b:d3:9d:9d:75:b9:91:0c:c9:0e:c1:94:df:69:df:df:
d2:db:62:93:31:f9:2c:18:75:4e:1b:34:7d:3c:70:5b:e3:19:
f8:8c:68:9b:7d:71:5f:3a:b4:8f:9d:5f:92:1d:bb:0b:ff:b1:
d2:8d:d2:cc:9f:37:7a:94:c4:35:50:18:83:46:e4:5b:84:9d:
22:32:3a:fc:28:b8:24:ad:ff:87:d4:b7:83:4c:bc:68:02:c5:
bd:7f:2f:5c:dd:8a:68:d6:a7:26:c6:21:34:92:c5:e8:62:50:
af:1f:6c:59
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1keYwxudv/mZmnIcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMyOTA0MDAwMFoXDTIyMDUwMzA0MDAwMFowLzEtMCsGA1UEAxMk
OGVmMmE1ZmUtMWFhZi00MDI5LTgwNmMtYTBhMjk3ZTNlOWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BtVYB2pTAgfDumF1ATn+Kbhf0boo6kp6a5p
uFZQkmvG/lPJCrZz9+S4JIJE8z/maiGieCFWsxR+slDB7edgJCcHAqjOBHCOA5EZ
XtsIDNXP+9YipufgJ3uy2LcmFyQhu7xJHevam8l0GLFQiF1+0DZ+V0ChUFHUe/Hd
s6N7nAZJJmfgRwnEoN+nRfpZVsu0OZm0I4Yij4qjDlOzxzHvIRWq9caInFj7ulbv
pofabq07BQST5m8NTKb+CZD2SuW3qXVJCJjZx8vFUUrFNSjDuHFBSS8eQu3Wghcm
oLJk/kHRjbeHthYoeIRdYCPu8Xe6lWi/FFKxMlmD4905+JJf1QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJcKLX3lgFkY30a/zXEKv2pfOfYCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNjVjM2Q5ODctY2M5Zi0z
Y2MwLWE3OTEtODQ4OGNhMWJjMDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiIcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAAEqodbmGUGY0SI8nHmZ7FN5jzGFkIS9zge5irxTk6CzFgukMOeotvB/M
kUJ5MGwhfmR9OMY/hakakQ9wt/Z8jGTJG49Ez66rZ7OwR1nhwcsiSsn0ovCidb8q
OspUIQYHNiH49DZgwfjgIWjrt5lYqu6oFdB9rqv2hnWQ1iZP6WfH5SOte+n859Cm
MWieM1osoTAr052ddbmRDMkOwZTfad/f0ttikzH5LBh1Ths0fTxwW+MZ+Ixom31x
Xzq0j51fkh27C/+x0o3SzJ83epTENVAYg0bkW4SdIjI6/Ci4JK3/h9S3g0y8aALF
vX8vXN2KaNanJsYhNJLF6GJQrx9sWQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:28:46 2025 by rpki-client