Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8e0a8914-5bd6-3a28-b543-0e97491033f4.roa
File: 8e0a8914-5bd6-3a28-b543-0e97491033f4.roa (raw, json)
Hash identifier: cr6JyicREZr2qbn/Y8en16c1jHMvMClNMO2xBShHseo=
Subject key identifier: FF:9F:4B:F2:16:A5:BF:8A:DF:E9:0E:73:6C:CD:A9:FD:42:1C:94:A4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F12DD381395F73F7272DF0400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8e0a8914-5bd6-3a28-b543-0e97491033f4.roa
Signing time: Mon 29 Aug 2022 12:00:00 +0000
ROA not before: Mon 29 Aug 2022 12:00:00 +0000
ROA not after: Tue 04 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.16.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:12:dd:38:13:95:f7:3f:72:72:df:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 29 12:00:00 2022 GMT
Not After : Oct 4 04:00:00 2022 GMT
Subject: CN=f7442851-76e9-43b4-8dee-58f5a7f9014f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:54:88:e7:fa:72:e6:73:08:fc:bb:75:30:d2:
9c:55:d2:46:a0:f3:af:fb:ca:89:ad:ce:ab:74:59:
c6:a9:10:3a:e2:66:46:4d:e7:08:c9:89:ae:1d:d1:
fc:8d:b0:0f:6e:54:2b:36:21:f9:b1:98:c9:c6:a8:
c6:64:b1:53:97:4c:d3:fa:eb:18:ef:0d:3c:05:4f:
ec:29:4d:32:d5:15:72:1f:ab:7c:09:f6:4a:ba:67:
39:c8:91:db:76:91:66:7f:77:cb:88:d7:82:a5:08:
99:40:f8:26:be:58:4f:42:21:7f:ec:55:2e:d8:24:
32:87:9e:ac:bd:7f:ab:06:67:81:a9:1a:20:19:dd:
b8:72:c4:7e:b5:df:44:97:44:6b:5e:2b:dd:9c:a9:
b7:96:67:83:89:60:91:78:42:69:eb:5c:6b:0b:d5:
23:bb:c4:48:b5:1d:27:c0:b0:c5:3c:c4:e9:4c:2c:
ca:05:28:32:71:b4:19:3d:1e:6f:a1:92:3f:a2:fd:
e7:bf:2c:6b:d8:51:d5:df:09:96:2f:af:04:de:36:
ce:e0:cd:79:20:b5:2d:bb:2c:39:0c:e7:48:0d:2c:
8a:4e:84:92:10:0a:a4:06:3a:e4:bd:a1:e0:5e:29:
66:5d:a9:28:d1:35:09:c8:50:e6:39:6f:39:4c:d5:
9b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9F:4B:F2:16:A5:BF:8A:DF:E9:0E:73:6C:CD:A9:FD:42:1C:94:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8e0a8914-5bd6-3a28-b543-0e97491033f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.16.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:d0:97:79:aa:d0:c6:0b:34:90:8d:27:c6:a9:3f:c1:53:1e:
78:a8:ad:35:75:40:45:24:a8:af:f1:95:c1:3d:01:8a:74:42:
b6:a8:4c:bc:d5:c4:09:b1:f1:cc:b9:2c:25:f4:3f:e7:5c:83:
20:ad:d3:37:e5:18:98:17:73:9c:57:4d:c7:6b:fb:5f:99:ef:
d8:86:da:f8:6e:45:34:41:95:c6:d2:23:62:22:4a:6c:cc:a3:
8c:5f:d7:cd:30:f8:fb:86:3e:27:6d:55:a1:7c:a0:54:60:69:
2e:20:7f:87:34:b9:f5:15:8f:8d:de:60:7c:91:f1:92:bc:db:
cc:ef:b8:1f:e6:35:da:0a:8b:15:de:03:39:e3:62:94:2e:3c:
c7:45:bc:73:54:7b:9a:64:33:a5:ec:69:6b:be:ad:72:3f:c1:
11:b8:cf:75:fd:36:45:99:1d:10:f9:f8:af:b8:30:e4:14:61:
9d:90:43:d5:c4:96:99:b9:fc:38:1e:01:cf:9a:15:dd:e5:1b:
71:ca:3a:40:66:5f:b9:5c:70:b9:2a:b3:ff:76:52:ac:e4:ef:
b7:c8:25:38:aa:bd:1d:54:9c:a4:87:af:a9:df:b0:23:c8:42:
d4:9f:5f:aa:de:1d:bc:f3:28:b1:3d:df:fa:4f:a7:11:6c:3e:
cc:06:9e:08
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8S3TgTlfc/cnLfBAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgyOTEyMDAwMFoXDTIyMTAwNDA0MDAwMFowLzEtMCsGA1UEAxMk
Zjc0NDI4NTEtNzZlOS00M2I0LThkZWUtNThmNWE3ZjkwMTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lSI5/py5nMI/Lt1MNKcVdJGoPOv+8qJrc6r
dFnGqRA64mZGTecIyYmuHdH8jbAPblQrNiH5sZjJxqjGZLFTl0zT+usY7w08BU/s
KU0y1RVyH6t8CfZKumc5yJHbdpFmf3fLiNeCpQiZQPgmvlhPQiF/7FUu2CQyh56s
vX+rBmeBqRogGd24csR+td9El0RrXivdnKm3lmeDiWCReEJp61xrC9Uju8RItR0n
wLDFPMTpTCzKBSgycbQZPR5voZI/ov3nvyxr2FHV3wmWL68E3jbO4M15ILUtuyw5
DOdIDSyKToSSEAqkBjrkvaHgXilmXako0TUJyFDmOW85TNWbRwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFP+fS/IWpb+K3+kOc2zNqf1CHJSkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOGUwYTg5MTQtNWJkNi0z
YTI4LWI1NDMtMGU5NzQ5MTAzM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiBAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAUNCXearQxgs0kI0nxqk/wVMeeKitNXVARSSor/GVwT0BinRCtqhMvNXE
CbHxzLksJfQ/51yDIK3TN+UYmBdznFdNx2v7X5nv2Iba+G5FNEGVxtIjYiJKbMyj
jF/XzTD4+4Y+J21VoXygVGBpLiB/hzS59RWPjd5gfJHxkrzbzO+4H+Y12gqLFd4D
OeNilC48x0W8c1R7mmQzpexpa76tcj/BEbjPdf02RZkdEPn4r7gw5BRhnZBD1cSW
mbn8OB4Bz5oV3eUbcco6QGZfuVxwuSqz/3ZSrOTvt8glOKq9HVScpIevqd+wI8hC
1J9fqt4dvPMosT3f+k+nEWw+zAaeCA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:57:20 2025 by rpki-client