Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/88bc1757-45d2-36f0-83ed-7095e229a1ed.roa
File: 88bc1757-45d2-36f0-83ed-7095e229a1ed.roa (raw, json)
Hash identifier: Mv4y90C2tqRfRF0IOr4Ufrdw5iL8tsts/7f9dASWnXs=
Subject key identifier: 9C:07:B4:48:83:D7:BB:DB:A9:E7:FF:B7:89:4D:8F:4C:2D:24:90:5A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CA0FE33066D3DE6D720332410
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/88bc1757-45d2-36f0-83ed-7095e229a1ed.roa
Signing time: Tue 18 Jan 2022 05:00:00 +0000
ROA not before: Tue 18 Jan 2022 05:00:00 +0000
ROA not after: Tue 22 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 130.101.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:a0:fe:33:06:6d:3d:e6:d7:20:33:24:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 18 05:00:00 2022 GMT
Not After : Feb 22 05:00:00 2022 GMT
Subject: CN=ffcaf658-3fe3-49b0-a442-46b0069e8f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:2f:02:89:da:6b:ad:41:06:27:7f:47:d2:
ae:d3:d6:42:34:63:9c:2d:46:32:f8:38:5a:27:6b:
60:41:43:4f:96:85:61:e1:ca:8b:d6:1e:ee:dd:ef:
e6:30:a0:9b:3d:a9:bf:c6:09:a0:f0:a4:cf:07:d7:
12:d3:a9:fc:85:af:33:48:bd:9d:cf:41:18:a6:3c:
cd:49:f5:68:be:be:ae:4e:cf:b9:68:eb:80:d6:5b:
0a:46:73:1b:b6:12:5a:57:00:40:f7:67:db:70:82:
69:9c:28:fd:59:e4:c9:5f:1b:98:22:b8:62:0a:08:
0f:46:dd:51:5b:2a:ce:1d:b9:91:a0:7a:e3:f8:69:
0a:5a:5a:da:ad:f4:ba:de:c5:91:b4:da:97:a4:fa:
dd:77:2d:c7:54:3c:45:b5:9e:ef:36:6d:9e:e3:2b:
4d:c0:76:bd:85:75:a7:c9:6b:69:7f:64:86:d5:5d:
e9:b0:b3:77:8c:8f:c8:01:46:c9:60:33:2e:f7:c2:
76:13:de:f7:22:3e:77:5d:a3:39:ff:88:07:eb:c9:
3e:9f:99:95:06:8a:4b:3c:1a:a1:c2:59:5a:91:1e:
6a:3d:9e:58:a5:83:aa:68:df:a0:19:72:d5:7e:df:
5b:b2:6d:5c:e6:37:74:f2:92:7b:bf:72:94:89:5f:
20:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:07:B4:48:83:D7:BB:DB:A9:E7:FF:B7:89:4D:8F:4C:2D:24:90:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/88bc1757-45d2-36f0-83ed-7095e229a1ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
130.101.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:70:55:42:8d:09:95:7b:24:8e:92:19:a2:af:20:04:2f:ae:
10:96:89:c1:5f:a1:77:80:db:9e:dd:0c:72:78:e0:a4:4f:e2:
83:c4:44:f1:f1:3e:00:ff:c7:45:60:b2:b6:02:b8:6a:4d:c8:
d3:b4:ea:94:ed:90:26:28:06:ab:6e:80:57:1d:aa:06:65:f5:
f1:b4:05:50:eb:48:87:54:e6:1c:c7:8a:bd:ea:b1:84:02:d1:
1c:bf:c3:de:7d:9b:a1:2f:c6:22:95:2c:71:b2:66:41:fe:ba:
fb:38:27:95:cc:a4:60:e4:b4:d4:b4:9e:a0:81:e5:f1:5b:13:
98:c3:b2:22:ca:f2:2d:bf:4d:93:1c:f7:f9:85:ba:01:0a:da:
3c:9b:e4:cd:78:d0:60:5b:e9:34:16:5c:14:d4:63:eb:da:ba:
77:1e:79:1a:64:01:3e:a6:91:27:05:f0:77:17:51:d5:80:dc:
47:f8:bf:1c:bc:76:48:35:6c:b6:31:59:38:15:f1:08:b1:b8:
f3:21:96:98:57:40:99:42:42:a9:88:8c:1c:e3:b8:05:06:6e:
2e:79:57:9d:3b:8c:db:9e:1d:c5:50:7f:f2:7c:c9:f9:bf:8f:
bc:b1:a3:a8:b4:01:16:89:0b:42:d9:99:3d:c7:87:e9:f9:e7:
71:8f:b7:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDyg/jMGbT3m1yAzJBAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDExODA1MDAwMFoXDTIyMDIyMjA1MDAwMFowLzEtMCsGA1UEAxMk
ZmZjYWY2NTgtM2ZlMy00OWIwLWE0NDItNDZiMDA2OWU4ZjM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcUvAonaa61BBid/R9Ku09ZCNGOcLUYy+Dha
J2tgQUNPloVh4cqL1h7u3e/mMKCbPam/xgmg8KTPB9cS06n8ha8zSL2dz0EYpjzN
SfVovr6uTs+5aOuA1lsKRnMbthJaVwBA92fbcIJpnCj9WeTJXxuYIrhiCggPRt1R
WyrOHbmRoHrj+GkKWlrarfS63sWRtNqXpPrddy3HVDxFtZ7vNm2e4ytNwHa9hXWn
yWtpf2SG1V3psLN3jI/IAUbJYDMu98J2E973Ij53XaM5/4gH68k+n5mVBopLPBqh
wllakR5qPZ5YpYOqaN+gGXLVft9bsm1c5jd08pJ7v3KUiV8g4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJwHtEiD17vbqef/t4lNj0wtJJBaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvODhiYzE3NTctNDVkMi0z
NmYwLTgzZWQtNzA5NWUyMjlhMWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHgmWAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL5wVUKNCZV7JI6SGaKvIAQvrhCWicFfoXeA257dDHJ44KRP4oPERPHx
PgD/x0VgsrYCuGpNyNO06pTtkCYoBqtugFcdqgZl9fG0BVDrSIdU5hzHir3qsYQC
0Ry/w959m6EvxiKVLHGyZkH+uvs4J5XMpGDktNS0nqCB5fFbE5jDsiLK8i2/TZMc
9/mFugEK2jyb5M140GBb6TQWXBTUY+vaunceeRpkAT6mkScF8HcXUdWA3Ef4vxy8
dkg1bLYxWTgV8QixuPMhlphXQJlCQqmIjBzjuAUGbi55V507jNueHcVQf/J8yfm/
j7yxo6i0ARaJC0LZmT3Hh+n553GPt7w=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:40:05 2025 by rpki-client