Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/738480d5-74d6-31b2-9a28-b989deb9575c.roa
File: 738480d5-74d6-31b2-9a28-b989deb9575c.roa (raw, json)
Hash identifier: WzvOHJQkFd3Gg1Yy7eW9anRC33dx0dTrfoMbJ1n8HJI=
Subject key identifier: 00:1E:2D:19:E0:36:29:1F:0A:5A:A6:DA:D5:8E:E7:E0:0A:10:9E:DA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858403AC9CBF7E02138DE63A31780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/738480d5-74d6-31b2-9a28-b989deb9575c.roa
Signing time: Tue 13 Dec 2022 12:00:00 +0000
ROA not before: Tue 13 Dec 2022 12:00:00 +0000
ROA not after: Wed 18 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 3.192.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3a:c9:cb:f7:e0:21:38:de:63:a3:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 13 12:00:00 2022 GMT
Not After : Jan 18 05:00:00 2023 GMT
Subject: CN=f1ac24fe-2ff0-4077-97ad-2c1e465b0615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c0:b9:c5:a9:80:8e:90:07:7d:1a:df:3e:47:
c6:4e:7d:42:02:a9:8d:e7:5a:0c:18:c7:da:04:95:
b2:84:a6:6a:de:8a:95:80:96:48:56:4d:8d:5d:3c:
75:53:80:61:c7:1a:4e:a1:87:1e:45:ce:c0:90:2a:
26:99:c6:56:78:59:ff:28:27:fd:a9:15:40:e5:df:
db:23:07:4d:e7:e2:b6:e5:d9:1c:a3:6b:f0:4c:8b:
72:0e:cd:6f:d5:a1:75:0d:06:21:0f:ff:69:94:68:
b4:21:62:8b:5c:45:74:54:85:4b:0c:a8:9a:10:c5:
6e:60:e6:f4:6c:06:8f:32:8d:d6:d3:dd:00:c8:ff:
5a:ce:4c:1e:c9:fe:89:39:67:05:dd:7a:f9:5a:f4:
b9:e9:a7:65:27:6f:08:0f:5d:3b:8a:df:fc:b4:33:
4b:22:db:98:56:b6:e9:3e:ea:8f:42:a1:2e:0c:96:
16:08:65:da:a9:9a:36:43:42:83:0d:96:c7:f3:be:
7d:4b:d1:73:31:b8:f8:32:d5:11:60:77:1a:b5:d8:
82:b2:c4:43:bf:45:1a:b7:6a:d5:e1:a4:f6:4d:37:
b3:51:2a:a6:61:41:ee:80:b8:f9:26:5c:ad:4d:24:
55:00:6e:8c:4c:18:c4:e4:c8:3a:4e:40:dc:aa:c2:
6d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1E:2D:19:E0:36:29:1F:0A:5A:A6:DA:D5:8E:E7:E0:0A:10:9E:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/738480d5-74d6-31b2-9a28-b989deb9575c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.192.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:6f:ae:db:2a:fa:9a:26:0c:31:39:84:cb:bb:65:a3:ba:7e:
5a:70:e3:ad:88:db:19:b8:ee:15:d6:ea:87:02:8b:d8:72:67:
11:e0:4f:bd:cb:aa:1f:43:fc:90:c4:8a:87:04:09:3a:c6:2c:
fd:02:af:44:56:99:b7:7b:53:f6:cb:46:0b:53:8a:17:55:a2:
ba:2d:29:9c:5e:d1:3a:6b:64:87:4a:56:66:04:6d:80:95:07:
54:10:50:f4:99:b5:02:d8:57:5e:b4:96:e4:c9:bb:a5:ff:31:
1a:ab:d3:c0:00:1c:09:33:55:60:d6:c9:5c:fe:9a:02:6d:91:
6f:98:84:90:61:82:14:ec:c9:6f:51:3d:77:06:82:c7:75:5d:
1c:31:bb:dc:72:5a:06:88:d1:79:03:be:81:02:a1:6b:bd:71:
e8:24:35:d7:db:b1:9d:d8:84:35:57:e7:bf:19:bf:a7:69:6c:
7a:2e:ca:12:d4:8f:b6:5e:be:04:ba:3c:4c:95:03:33:cd:b4:
7c:51:fb:e5:d3:97:d8:7a:c4:e7:6e:dd:4c:2e:91:dc:2f:a4:
9b:6c:43:b0:54:46:ea:d0:19:48:d8:92:bb:0f:0f:07:a8:ac:
4a:27:9b:84:b4:da:2e:64:05:f1:15:6c:fd:10:fc:37:65:79:
cb:1b:dc:2c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA6ycv34CE43mOjF4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxMzEyMDAwMFoXDTIzMDExODA1MDAwMFowLzEtMCsGA1UEAxMk
ZjFhYzI0ZmUtMmZmMC00MDc3LTk3YWQtMmMxZTQ2NWIwNjE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMC5xamAjpAHfRrfPkfGTn1CAqmN51oMGMfa
BJWyhKZq3oqVgJZIVk2NXTx1U4BhxxpOoYceRc7AkCommcZWeFn/KCf9qRVA5d/b
IwdN5+K25dkco2vwTItyDs1v1aF1DQYhD/9plGi0IWKLXEV0VIVLDKiaEMVuYOb0
bAaPMo3W090AyP9azkweyf6JOWcF3Xr5WvS56adlJ28ID107it/8tDNLItuYVrbp
PuqPQqEuDJYWCGXaqZo2Q0KDDZbH8759S9FzMbj4MtURYHcatdiCssRDv0Uat2rV
4aT2TTezUSqmYUHugLj5JlytTSRVAG6MTBjE5Mg6TkDcqsJt2wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAAeLRngNikfClqm2tWO5+AKEJ7aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNzM4NDgwZDUtNzRkNi0z
MWIyLTlhMjgtYjk4OWRlYjk1NzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMGA8AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAW2+u2yr6miYMMTmEy7tlo7p+WnDjrYjbGbjuFdbqhwKL2HJnEeBPvcuq
H0P8kMSKhwQJOsYs/QKvRFaZt3tT9stGC1OKF1Wiui0pnF7ROmtkh0pWZgRtgJUH
VBBQ9Jm1AthXXrSW5Mm7pf8xGqvTwAAcCTNVYNbJXP6aAm2Rb5iEkGGCFOzJb1E9
dwaCx3VdHDG73HJaBojReQO+gQKha71x6CQ119uxndiENVfnvxm/p2lsei7KEtSP
tl6+BLo8TJUDM820fFH75dOX2HrE527dTC6R3C+km2xDsFRG6tAZSNiSuw8PB6is
SiebhLTaLmQF8RVs/RD8N2V5yxvcLA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:27:34 2025 by rpki-client