Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6938e13e-a841-3f83-a630-6e9c101d672c.roa
File: 6938e13e-a841-3f83-a630-6e9c101d672c.roa (raw, json)
Hash identifier: g5rYwir0PBM1UGN8IG9fwCuJzoPAivBholt3pZmD+Qo=
Subject key identifier: 2C:1E:8A:A0:9F:19:4F:2F:BD:76:13:82:B8:5E:20:B3:98:CF:B5:92
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0891CCBF73E5A7A37EE52000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6938e13e-a841-3f83-a630-6e9c101d672c.roa
Signing time: Thu 25 Aug 2022 12:00:00 +0000
ROA not before: Thu 25 Aug 2022 12:00:00 +0000
ROA not after: Fri 30 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 134.64.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:08:91:cc:bf:73:e5:a7:a3:7e:e5:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 25 12:00:00 2022 GMT
Not After : Sep 30 04:00:00 2022 GMT
Subject: CN=565ecd37-d488-4bc2-b374-12e46fb15aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c6:42:6f:19:2d:85:33:12:2c:5e:00:f7:e5:
59:1e:7f:35:e4:e5:76:ee:69:0c:c2:8e:db:d6:c7:
ad:f6:84:2e:f5:e0:35:61:89:2a:50:41:5c:f7:b1:
b1:58:da:0a:ae:f7:e8:27:4b:ba:4b:4d:8f:83:14:
27:55:7e:41:d8:37:a5:a8:3d:db:19:c7:f4:bf:3f:
ce:3c:b6:aa:13:92:0e:7d:c7:f9:22:67:9c:e7:83:
e0:5c:fa:ea:72:0f:b8:3b:6a:6b:cf:e6:ae:9e:6f:
60:04:32:f6:a8:24:a1:3c:80:4b:2f:e2:2c:e2:37:
a9:1a:97:b2:b4:88:9c:ac:55:83:23:70:a4:42:6b:
16:77:d2:69:b6:8a:45:52:f6:47:44:8b:b1:0c:2e:
89:8e:c0:89:e5:bf:d6:23:36:9a:91:27:37:7a:d9:
b1:cd:cf:9c:2a:ee:1e:51:a2:c9:d9:3a:58:30:e0:
f3:69:5e:7f:84:34:1d:47:1f:ce:eb:f6:ee:3a:ef:
60:cf:70:a7:aa:2a:e8:4f:96:fe:18:38:e2:5a:23:
d6:36:1c:56:68:8f:d2:b2:67:4f:8c:53:18:ee:bf:
a8:ed:75:00:80:94:75:8e:f3:41:0f:69:c2:0f:bc:
5b:40:a1:08:eb:75:a7:dd:8f:49:11:fa:d9:82:02:
ab:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1E:8A:A0:9F:19:4F:2F:BD:76:13:82:B8:5E:20:B3:98:CF:B5:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6938e13e-a841-3f83-a630-6e9c101d672c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
134.64.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:53:2c:a1:9e:bd:02:4f:5c:d0:95:4f:a6:39:ce:5e:3d:44:
82:a2:3c:75:b5:e9:3c:bd:d9:a6:e8:22:54:d3:ff:d8:b6:8d:
89:fa:5f:0d:20:d9:f4:91:74:a7:e9:5f:ac:a9:dd:80:bc:9c:
15:0b:f4:c7:71:67:c9:98:86:d8:c6:cf:9e:b6:29:ac:36:4b:
c1:04:59:df:84:fa:9a:e4:c7:c8:80:ac:d9:23:7e:00:a8:f6:
f1:1b:ad:f7:2d:56:1e:bd:59:c4:ed:fb:69:5c:7e:02:50:66:
8d:d6:99:08:d7:d0:75:1d:e3:67:bd:23:a9:54:27:10:9d:13:
57:aa:be:a1:e8:e3:59:4b:89:38:b4:57:5f:01:46:0b:b1:4d:
82:0d:7f:92:f4:54:a5:10:db:1a:c7:db:59:b5:9b:91:45:6a:
22:8d:1b:90:4e:31:9c:ec:86:77:ec:3c:eb:75:cc:14:20:88:
28:b1:2a:61:1a:1b:04:cc:41:e7:35:24:12:51:52:dc:ca:7a:
f1:74:fb:cc:a6:a8:63:b6:7c:2a:4b:a5:69:3e:0e:6f:09:3f:
38:0a:64:44:46:89:46:65:20:94:44:c7:0e:dd:74:d6:aa:0f:
4e:3a:59:bf:9b:7f:e1:bb:82:5b:35:ad:2e:4d:0a:14:3b:5a:
fc:47:56:62
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8Ikcy/c+Wno37lIAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgyNTEyMDAwMFoXDTIyMDkzMDA0MDAwMFowLzEtMCsGA1UEAxMk
NTY1ZWNkMzctZDQ4OC00YmMyLWIzNzQtMTJlNDZmYjE1YWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8ZCbxkthTMSLF4A9+VZHn815OV27mkMwo7b
1set9oQu9eA1YYkqUEFc97GxWNoKrvfoJ0u6S02PgxQnVX5B2DelqD3bGcf0vz/O
PLaqE5IOfcf5Imec54PgXPrqcg+4O2prz+aunm9gBDL2qCShPIBLL+Is4jepGpey
tIicrFWDI3CkQmsWd9JptopFUvZHRIuxDC6JjsCJ5b/WIzaakSc3etmxzc+cKu4e
UaLJ2TpYMODzaV5/hDQdRx/O6/buOu9gz3CnqiroT5b+GDjiWiPWNhxWaI/SsmdP
jFMY7r+o7XUAgJR1jvNBD2nCD7xbQKEI63Wn3Y9JEfrZggKrywIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCweiqCfGU8vvXYTgrheILOYz7WSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNjkzOGUxM2UtYTg0MS0z
ZjgzLWE2MzAtNmU5YzEwMWQ2NzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhkAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmlMsoZ69Ak9c0JVPpjnOXj1EgqI8dbXpPL3ZpugiVNP/2LaNifpfDSDZ
9JF0p+lfrKndgLycFQv0x3FnyZiG2MbPnrYprDZLwQRZ34T6muTHyICs2SN+AKj2
8Rut9y1WHr1ZxO37aVx+AlBmjdaZCNfQdR3jZ70jqVQnEJ0TV6q+oejjWUuJOLRX
XwFGC7FNgg1/kvRUpRDbGsfbWbWbkUVqIo0bkE4xnOyGd+w863XMFCCIKLEqYRob
BMxB5zUkElFS3Mp68XT7zKaoY7Z8KkulaT4Obwk/OApkREaJRmUglETHDt101qoP
TjpZv5t/4buCWzWtLk0KFDta/EdWYg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:00:51 2025 by rpki-client