Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65d6e1a7-79f3-37ad-a516-381db18a4dd5.roa
File: 65d6e1a7-79f3-37ad-a516-381db18a4dd5.roa (raw, json)
Hash identifier: /Rlt5mUdvqVu4z0iAYHW7iP6CEOsHGhnte4HtlO92PI=
Subject key identifier: 21:F6:89:0B:E3:65:C1:A8:AB:69:03:A8:07:6D:4B:A1:5F:5A:63:04
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DAA3541D04EB384DB993A56B4
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65d6e1a7-79f3-37ad-a516-381db18a4dd5.roa
Signing time: Fri 22 Apr 2022 12:00:00 +0000
ROA not before: Fri 22 Apr 2022 12:00:00 +0000
ROA not after: Sat 28 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 169.205.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:aa:35:41:d0:4e:b3:84:db:99:3a:56:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 22 12:00:00 2022 GMT
Not After : May 28 04:00:00 2022 GMT
Subject: CN=f8643f07-8b80-47a5-b356-3aa90097fb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:53:17:eb:72:5f:ab:cf:29:c7:03:d4:38:
1b:ea:6c:bf:fa:00:65:0a:0d:40:b3:b6:b9:43:63:
44:10:d6:70:4f:b2:e8:f6:01:89:f1:37:e6:60:f1:
95:f0:c7:d7:d2:3e:b4:24:7b:d0:98:4a:7f:ed:fb:
d8:85:f5:64:73:2b:e1:23:cd:5d:d0:cf:02:71:90:
da:79:db:db:0b:5b:3f:c0:8b:23:3e:e9:82:0f:4c:
2f:30:e6:48:19:78:72:40:b0:f3:5b:d0:00:80:49:
f6:a8:e0:01:44:90:30:ce:7a:08:aa:ae:64:82:99:
f5:c6:31:f3:5f:56:be:e7:f2:a9:68:03:d4:5e:07:
ce:18:c3:38:43:c5:cd:d5:55:58:98:0c:4d:ea:8b:
f7:d2:c4:40:27:70:29:55:a4:5a:3c:29:4e:24:27:
2a:ac:00:c9:c0:b9:71:71:51:44:3f:05:1f:e7:13:
a1:49:c9:77:01:78:52:b2:31:42:2c:df:33:03:52:
6f:d4:87:69:8f:1f:c7:f7:a1:81:18:9e:be:54:ba:
e4:cb:78:d0:25:05:1d:ca:f6:53:dc:76:44:89:6a:
d1:93:40:41:93:57:10:80:aa:23:3b:44:4b:85:0a:
6d:42:e8:53:42:c8:28:ed:95:ec:65:f8:0d:c8:2f:
6a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F6:89:0B:E3:65:C1:A8:AB:69:03:A8:07:6D:4B:A1:5F:5A:63:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65d6e1a7-79f3-37ad-a516-381db18a4dd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
169.205.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:46:6c:dc:9b:e7:51:9b:5e:43:37:96:76:38:6f:31:d1:5b:
89:31:16:1b:22:6f:1b:73:7d:ee:5b:8e:82:a2:5c:78:1a:93:
75:40:16:ed:d6:2f:23:5b:0b:64:69:31:de:18:7a:84:9d:9e:
a5:6c:b9:e4:5f:84:0c:c7:89:54:ad:78:2b:dd:70:3a:90:bd:
51:29:d7:be:ea:ee:3b:07:82:da:be:fd:a5:a8:f9:08:dc:46:
dd:e0:78:96:45:39:fe:33:f9:d2:ed:c0:0c:a9:fa:05:37:74:
7a:ef:8f:59:e3:d5:c0:99:06:1a:39:60:5f:0c:6e:cf:6f:4c:
ae:85:de:f2:2a:9b:f6:9c:68:75:29:85:6b:d9:54:48:bf:11:
cc:56:6e:b1:7f:d9:1c:e1:19:2c:aa:a9:ba:fb:80:c8:da:93:
db:d8:db:11:fd:1b:3e:9d:72:a0:d9:c7:29:7d:2f:a0:66:02:
83:ac:ca:f0:61:d8:f3:6d:f7:99:1f:78:f0:94:03:03:0e:8d:
76:61:c8:a5:ff:9d:ca:9f:4d:3d:be:cc:10:9d:06:4a:65:c7:
70:1a:a6:55:c0:9c:2a:44:02:c5:ec:ba:c6:39:c7:5b:ef:48:
5d:d1:b5:d1:2d:cf:f4:b7:3c:94:29:f8:55:d5:68:44:c7:9b:
5a:6d:b6:6d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2qNUHQTrOE25k6VrQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQyMjEyMDAwMFoXDTIyMDUyODA0MDAwMFowLzEtMCsGA1UEAxMk
Zjg2NDNmMDctOGI4MC00N2E1LWIzNTYtM2FhOTAwOTdmYjc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd1TF+tyX6vPKccD1Dgb6my/+gBlCg1As7a5
Q2NEENZwT7Lo9gGJ8TfmYPGV8MfX0j60JHvQmEp/7fvYhfVkcyvhI81d0M8CcZDa
edvbC1s/wIsjPumCD0wvMOZIGXhyQLDzW9AAgEn2qOABRJAwznoIqq5kgpn1xjHz
X1a+5/KpaAPUXgfOGMM4Q8XN1VVYmAxN6ov30sRAJ3ApVaRaPClOJCcqrADJwLlx
cVFEPwUf5xOhScl3AXhSsjFCLN8zA1Jv1Idpjx/H96GBGJ6+VLrky3jQJQUdyvZT
3HZEiWrRk0BBk1cQgKojO0RLhQptQuhTQsgo7ZXsZfgNyC9q7QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCH2iQvjZcGoq2kDqAdtS6FfWmMEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNjVkNmUxYTctNzlmMy0z
N2FkLWE1MTYtMzgxZGIxOGE0ZGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqc0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAAUZs3JvnUZteQzeWdjhvMdFbiTEWGyJvG3N97luOgqJceBqTdUAW7dYv
I1sLZGkx3hh6hJ2epWy55F+EDMeJVK14K91wOpC9USnXvuruOweC2r79paj5CNxG
3eB4lkU5/jP50u3ADKn6BTd0eu+PWePVwJkGGjlgXwxuz29MroXe8iqb9pxodSmF
a9lUSL8RzFZusX/ZHOEZLKqpuvuAyNqT29jbEf0bPp1yoNnHKX0voGYCg6zK8GHY
8233mR948JQDAw6NdmHIpf+dyp9NPb7MEJ0GSmXHcBqmVcCcKkQCxey6xjnHW+9I
XdG10S3P9Lc8lCn4VdVoRMebWm22bQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:18:40 2025 by rpki-client