Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/68b5395b-a223-3b62-9a09-3a7fa68c24d3.roa
File: 68b5395b-a223-3b62-9a09-3a7fa68c24d3.roa (raw, json)
Hash identifier: G6Qv+t8vDqnF5PMmLyLDodme/S0okK+Sgd7j2XVzmuk=
Subject key identifier: 1F:DB:6D:ED:B6:2A:A6:2D:FE:2E:7C:2C:25:67:7D:C3:08:E4:75:6B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D81080D92F94D8114D3AF2980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/68b5395b-a223-3b62-9a09-3a7fa68c24d3.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.129.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:08:0d:92:f9:4d:81:14:d3:af:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=08bc302a-66aa-4555-bed6-64288cc221b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:28:93:68:1c:2b:51:22:a7:5f:df:c2:47:5d:
b9:97:31:3f:6c:b1:ff:fe:50:4b:ef:a8:91:eb:59:
81:8b:83:d6:d3:4c:b1:a9:fb:c7:84:fc:14:5f:d6:
ba:6a:01:21:2d:b1:92:ab:cb:b8:c0:65:aa:84:85:
9f:86:6c:51:72:ab:7c:53:74:49:f9:93:97:1f:fa:
de:0c:9b:4a:8c:8e:8f:5f:88:a8:77:89:fc:83:05:
b0:b0:68:37:dc:b0:29:db:2c:47:db:ec:c6:8d:49:
1c:3c:a6:b6:5e:95:a7:28:64:50:ef:75:64:da:9b:
73:0d:9e:ab:9c:98:86:59:3c:bd:2e:34:7f:b5:85:
3a:1d:4f:42:c0:c0:44:82:71:04:f9:e7:26:62:e2:
f4:be:c0:69:97:78:4e:71:e6:a3:11:12:3d:3d:19:
da:4e:0d:31:d6:1f:b9:7a:e9:4f:e3:65:8d:6c:c1:
7a:db:c5:49:5c:31:f5:d4:b9:05:e2:7d:0c:02:96:
15:50:9a:5f:2f:20:3a:1b:2f:40:e8:79:ef:1d:60:
e6:fa:7b:e6:6d:83:01:67:2d:5f:fd:fa:43:56:1f:
61:bb:0c:83:5e:72:49:74:25:ed:7a:76:5e:b2:09:
ae:0e:6a:65:d6:a6:7f:a6:f0:bd:d0:1d:52:94:d7:
42:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DB:6D:ED:B6:2A:A6:2D:FE:2E:7C:2C:25:67:7D:C3:08:E4:75:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/68b5395b-a223-3b62-9a09-3a7fa68c24d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:22:ce:1e:73:8c:75:06:b1:18:3f:4e:d4:b1:05:1f:c6:bc:
aa:f8:71:1a:8b:51:bf:ce:08:bc:68:1d:c8:7d:4a:47:a1:86:
72:a3:3d:b1:5c:6e:eb:fe:2b:84:d6:0b:c5:fa:86:c9:71:b9:
60:21:df:5b:54:7c:6a:fa:e2:56:a6:cd:55:88:8d:cc:d0:27:
e2:13:5f:0e:dd:58:b7:44:bd:fb:7c:6a:68:af:d8:20:2b:69:
1a:a7:e4:f6:16:c1:6b:da:78:50:94:ec:64:50:0e:d8:a3:e0:
0c:fd:7b:d0:bb:6e:32:88:11:08:59:8a:c1:4f:4b:39:a0:1e:
03:cf:fe:38:d8:90:93:32:c4:a2:a7:51:ab:0f:80:63:1a:d9:
07:fe:2c:0f:2e:5b:41:ff:c2:80:70:b2:f9:cd:13:09:47:b1:
89:c3:7c:0b:c2:37:af:3d:f9:86:d4:c4:08:cb:4f:b3:4f:cc:
24:8b:b9:22:92:bd:8e:8a:59:51:a5:84:a2:4a:cb:a0:32:ce:
56:d4:56:3b:4c:af:9e:1f:52:df:8d:99:9b:4e:7d:3b:d5:ce:
49:28:cd:d4:8c:5f:50:c6:f1:e5:f9:21:f5:85:bf:0e:5a:85:
77:1a:34:e6:cd:04:d4:68:78:f0:88:94:45:16:cb:0c:b5:4a:
69:45:5e:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD2BCA2S+U2BFNOvKYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQwODA0MDAwMFoXDTIyMDUxMzA0MDAwMFowLzEtMCsGA1UEAxMk
MDhiYzMwMmEtNjZhYS00NTU1LWJlZDYtNjQyODhjYzIyMWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyiTaBwrUSKnX9/CR125lzE/bLH//lBL76iR
61mBi4PW00yxqfvHhPwUX9a6agEhLbGSq8u4wGWqhIWfhmxRcqt8U3RJ+ZOXH/re
DJtKjI6PX4iod4n8gwWwsGg33LAp2yxH2+zGjUkcPKa2XpWnKGRQ73Vk2ptzDZ6r
nJiGWTy9LjR/tYU6HU9CwMBEgnEE+ecmYuL0vsBpl3hOceajERI9PRnaTg0x1h+5
eulP42WNbMF628VJXDH11LkF4n0MApYVUJpfLyA6Gy9A6HnvHWDm+nvmbYMBZy1f
/fpDVh9huwyDXnJJdCXtenZesgmuDmpl1qZ/pvC90B1SlNdCDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB/bbe22KqYt/i58LCVnfcMI5HVrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNjhiNTM5NWItYTIyMy0z
YjYyLTlhMDktM2E3ZmE2OGMyNGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHNIGAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHYizh5zjHUGsRg/TtSxBR/GvKr4cRqLUb/OCLxoHch9SkehhnKjPbFc
buv+K4TWC8X6hslxuWAh31tUfGr64lamzVWIjczQJ+ITXw7dWLdEvft8amiv2CAr
aRqn5PYWwWvaeFCU7GRQDtij4Az9e9C7bjKIEQhZisFPSzmgHgPP/jjYkJMyxKKn
UasPgGMa2Qf+LA8uW0H/woBwsvnNEwlHsYnDfAvCN689+YbUxAjLT7NPzCSLuSKS
vY6KWVGlhKJKy6AyzlbUVjtMr54fUt+NmZtOfTvVzkkozdSMX1DG8eX5IfWFvw5a
hXcaNObNBNRoePCIlEUWywy1SmlFXrU=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:37:42 2025 by rpki-client