Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87b99cf1-f35a-3ca2-9885-d015355b61ec.roa
File: 87b99cf1-f35a-3ca2-9885-d015355b61ec.roa (raw, json)
Hash identifier: XcS904ATzuB2QOJKqIEjbvzZmDJgPkGKza7/oWWB+fA=
Subject key identifier: 6A:78:BA:31:6F:3F:95:AA:F9:EF:33:82:AB:87:5A:06:82:35:87:19
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DDBC2CE59DB3409C1138E9700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87b99cf1-f35a-3ca2-9885-d015355b61ec.roa
Signing time: Mon 09 May 2022 12:00:00 +0000
ROA not before: Mon 09 May 2022 12:00:00 +0000
ROA not after: Tue 14 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.140.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:db:c2:ce:59:db:34:09:c1:13:8e:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 9 12:00:00 2022 GMT
Not After : Jun 14 04:00:00 2022 GMT
Subject: CN=3a61b143-810e-43a5-9719-7aa1cc26678c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8b:26:a8:30:c5:b8:e4:86:59:81:3c:1a:37:
10:d0:50:b0:0d:e6:1e:89:0e:b0:25:c3:0d:20:f7:
43:c4:b9:18:96:72:6b:d0:d6:f5:2e:b4:9e:2e:98:
d2:55:42:09:50:1d:bb:7e:cd:be:f7:42:db:be:ce:
52:8c:c7:03:04:aa:5b:01:5a:4e:60:e3:e5:42:81:
db:e9:6c:fd:08:e8:06:6c:35:38:d4:bb:08:f6:b1:
d7:01:a4:bb:4e:16:4b:53:48:6a:29:ad:21:e1:69:
2f:59:d1:2f:79:ec:c8:9f:53:5e:5c:13:d9:ff:7e:
e1:b3:38:3c:5f:2e:49:b8:42:a2:07:65:ea:a4:ec:
4a:97:f3:b9:dd:e0:32:40:43:1f:0d:db:7a:81:60:
16:f7:bc:03:d1:eb:34:3a:2a:9b:0b:eb:4f:56:68:
44:cb:11:6e:f8:5b:b0:50:06:b4:45:4d:95:70:54:
2a:2b:7d:15:7e:da:04:21:bf:ae:ee:84:5c:d7:ca:
40:7d:74:db:60:75:f0:73:87:83:cd:05:4f:ef:94:
ae:19:30:7d:91:c1:f1:19:1e:db:6e:20:c9:d5:2d:
60:dc:46:0b:8e:81:2d:fe:f1:47:4c:a2:21:46:d5:
b0:a1:f1:ee:ee:10:52:2e:f4:9b:70:b6:42:95:be:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:78:BA:31:6F:3F:95:AA:F9:EF:33:82:AB:87:5A:06:82:35:87:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87b99cf1-f35a-3ca2-9885-d015355b61ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.140.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:b3:4d:99:4b:f2:ac:40:e0:19:40:4c:df:9a:29:f7:a5:8c:
2d:49:30:19:40:1f:34:78:a9:c8:74:77:f4:53:01:62:29:94:
6a:f9:72:92:85:a7:cb:df:98:0e:58:27:9d:f3:ae:3c:f5:34:
fa:2a:5c:ce:b6:00:9d:fa:a4:77:56:2f:b7:76:53:5b:17:26:
c3:47:59:13:ca:1e:f7:e2:ea:ec:a1:88:b1:3e:e4:8c:10:63:
8d:f2:ac:66:15:2d:08:01:c4:d8:2b:b4:38:d2:79:94:8a:f3:
73:b2:9d:7f:89:9a:f1:64:bb:c4:90:31:01:9a:dc:61:07:14:
8f:e7:16:ad:cb:35:21:44:4a:b7:d8:60:e4:54:8e:79:a8:9a:
d4:4e:9e:d1:fc:34:0f:b4:98:81:21:47:37:14:c8:00:8a:fc:
a4:44:49:42:82:c4:45:05:69:e4:3c:47:b2:23:1f:2a:02:99:
d9:f7:92:d9:ae:5e:49:cf:02:96:d5:5b:7f:f1:0f:9f:52:c0:
f8:23:1b:95:cf:af:f6:6c:0b:bb:0f:b4:59:3e:7b:5c:8b:01:
61:92:8d:e5:97:9c:11:aa:b6:62:a8:38:dd:85:35:74:8a:5d:
fd:5e:5c:bc:d8:15:5a:18:50:fe:17:95:8e:a3:e0:d5:50:25:
36:7b:60:b1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3bws5Z2zQJwROOlwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUwOTEyMDAwMFoXDTIyMDYxNDA0MDAwMFowLzEtMCsGA1UEAxMk
M2E2MWIxNDMtODEwZS00M2E1LTk3MTktN2FhMWNjMjY2NzhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIsmqDDFuOSGWYE8GjcQ0FCwDeYeiQ6wJcMN
IPdDxLkYlnJr0Nb1LrSeLpjSVUIJUB27fs2+90Lbvs5SjMcDBKpbAVpOYOPlQoHb
6Wz9COgGbDU41LsI9rHXAaS7ThZLU0hqKa0h4WkvWdEveezIn1NeXBPZ/37hszg8
Xy5JuEKiB2XqpOxKl/O53eAyQEMfDdt6gWAW97wD0es0OiqbC+tPVmhEyxFu+Fuw
UAa0RU2VcFQqK30VftoEIb+u7oRc18pAfXTbYHXwc4eDzQVP75SuGTB9kcHxGR7b
biDJ1S1g3EYLjoEt/vFHTKIhRtWwofHu7hBSLvSbcLZClb5+hwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGp4ujFvP5Wq+e8zgquHWgaCNYcZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvODdiOTljZjEtZjM1YS0z
Y2EyLTk4ODUtZDAxNTM1NWI2MWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiIwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEABLNNmUvyrEDgGUBM35op96WMLUkwGUAfNHipyHR39FMBYimUavlykoWn
y9+YDlgnnfOuPPU0+ipczrYAnfqkd1Yvt3ZTWxcmw0dZE8oe9+Lq7KGIsT7kjBBj
jfKsZhUtCAHE2Cu0ONJ5lIrzc7Kdf4ma8WS7xJAxAZrcYQcUj+cWrcs1IURKt9hg
5FSOeaia1E6e0fw0D7SYgSFHNxTIAIr8pERJQoLERQVp5DxHsiMfKgKZ2feS2a5e
Sc8CltVbf/EPn1LA+CMblc+v9mwLuw+0WT57XIsBYZKN5ZecEaq2Yqg43YU1dIpd
/V5cvNgVWhhQ/heVjqPg1VAlNntgsQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:36:51 2025 by rpki-client