Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8f939179-aa48-3088-80cf-694994bcca3c.roa
File: 8f939179-aa48-3088-80cf-694994bcca3c.roa (raw, json)
Hash identifier: GKOJdNnldT+zddFiw5Q+RTGQucxy8QSMasYWwUe9RVo=
Subject key identifier: 2B:DB:11:87:17:12:63:9E:0E:BD:99:AF:37:DE:50:85:35:FB:EF:57
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D3D63CFEDF7E09D82E1D77CC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8f939179-aa48-3088-80cf-694994bcca3c.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 19 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 136.4.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3d:63:cf:ed:f7:e0:9d:82:e1:d7:7c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Apr 19 04:00:00 2022 GMT
Subject: CN=aa0856c6-3c10-47e8-9a2a-22dd244c20d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4e:b2:4f:84:95:54:83:ff:40:1a:3c:f1:f9:
0e:f2:61:fb:a8:72:41:e6:c9:9c:07:ed:8b:04:c3:
3a:e1:c3:fa:fc:b2:68:a8:3d:21:f4:45:fb:b6:f5:
d9:71:43:76:8c:75:73:2e:68:e0:39:d5:6e:56:18:
89:87:7f:fb:69:f0:b5:92:ef:09:3f:3e:00:21:42:
8c:98:cf:05:70:6c:f6:e6:25:ce:c3:1f:f8:cb:f9:
ad:da:24:36:8c:40:e6:4f:5e:e1:cb:01:2b:b5:35:
c7:9c:5d:fa:16:66:4d:64:13:2e:e7:17:fc:3c:60:
53:b0:fb:9d:ad:67:73:fd:e6:2d:95:47:7c:08:14:
7c:f4:54:8f:69:ac:46:34:63:94:e1:20:bf:3e:51:
e3:64:71:dc:a9:4e:8d:c8:6d:08:f4:37:e0:21:ed:
d0:aa:76:02:e0:6c:4c:c7:58:61:23:57:3a:5a:2f:
71:41:f1:67:30:dd:d8:2d:cf:b7:20:25:85:35:d2:
09:13:05:d4:e5:cb:df:a9:f0:52:23:0f:22:10:c6:
4f:d7:17:3f:23:61:e7:e3:49:89:50:b3:03:33:05:
41:84:d2:a6:01:b9:a4:5f:c5:4c:a4:73:28:fa:ea:
60:55:4f:b8:03:e4:04:67:ac:4c:e3:dc:fd:5d:79:
0c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DB:11:87:17:12:63:9E:0E:BD:99:AF:37:DE:50:85:35:FB:EF:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8f939179-aa48-3088-80cf-694994bcca3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.4.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:da:b7:7a:05:43:15:94:97:70:7d:9d:98:7f:d9:af:9d:0d:
71:89:01:18:fc:de:f7:d6:74:bb:99:ce:57:a9:16:c9:56:84:
33:eb:20:34:4a:50:55:f4:2e:31:31:48:b6:37:0a:49:fc:7b:
3e:0c:fa:dd:25:ee:07:4b:7e:5f:fd:09:00:3e:e2:9b:01:71:
98:4a:f2:8c:67:1d:39:23:61:6b:4e:d4:6d:ac:4c:6e:0e:e9:
c9:8f:4d:35:74:18:d9:23:4e:b9:95:c1:e7:32:71:50:e3:e4:
b0:f6:d3:06:9c:d0:70:12:72:40:49:7d:d0:90:e7:93:34:dc:
6d:77:fd:91:50:d0:3d:21:91:51:91:87:a5:3e:a5:6b:f0:06:
df:96:fb:ec:e0:f5:9a:c6:e5:77:db:be:24:bc:02:5c:a5:28:
3c:33:4e:04:62:fb:42:f9:e7:d7:7c:82:60:c7:9c:cc:54:e7:
b3:0b:62:08:8a:5b:0c:12:05:a1:8e:b5:fe:15:bf:39:ef:42:
f7:e5:10:84:ab:1d:02:50:a0:29:9f:d8:9f:68:0e:d0:6d:8d:
d9:4f:ef:0c:64:9d:d6:f2:94:a8:e5:ac:f3:c7:5c:8d:87:01:
b3:d8:e2:c2:a6:45:b0:25:5b:fc:0d:d8:19:8d:a1:9e:c4:4a:
58:1f:a1:ed
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD09Y8/t9+CdguHXfMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMxNTA0MDAwMFoXDTIyMDQxOTA0MDAwMFowLzEtMCsGA1UEAxMk
YWEwODU2YzYtM2MxMC00N2U4LTlhMmEtMjJkZDI0NGMyMGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk6yT4SVVIP/QBo88fkO8mH7qHJB5smcB+2L
BMM64cP6/LJoqD0h9EX7tvXZcUN2jHVzLmjgOdVuVhiJh3/7afC1ku8JPz4AIUKM
mM8FcGz25iXOwx/4y/mt2iQ2jEDmT17hywErtTXHnF36FmZNZBMu5xf8PGBTsPud
rWdz/eYtlUd8CBR89FSPaaxGNGOU4SC/PlHjZHHcqU6NyG0I9DfgIe3QqnYC4GxM
x1hhI1c6Wi9xQfFnMN3YLc+3ICWFNdIJEwXU5cvfqfBSIw8iEMZP1xc/I2Hn40mJ
ULMDMwVBhNKmAbmkX8VMpHMo+upgVU+4A+QEZ6xM49z9XXkMoQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCvbEYcXEmOeDr2ZrzfeUIU1++9XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOGY5MzkxNzktYWE0OC0z
MDg4LTgwY2YtNjk0OTk0YmNjYTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCiAQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPNq3egVDFZSXcH2dmH/Zr50NcYkBGPze99Z0u5nOV6kWyVaEM+sgNEpQ
VfQuMTFItjcKSfx7Pgz63SXuB0t+X/0JAD7imwFxmEryjGcdOSNha07UbaxMbg7p
yY9NNXQY2SNOuZXB5zJxUOPksPbTBpzQcBJyQEl90JDnkzTcbXf9kVDQPSGRUZGH
pT6la/AG35b77OD1msbld9u+JLwCXKUoPDNOBGL7Qvnn13yCYMeczFTnswtiCIpb
DBIFoY61/hW/Oe9C9+UQhKsdAlCgKZ/Yn2gO0G2N2U/vDGSd1vKUqOWs88dcjYcB
s9jiwqZFsCVb/A3YGY2hnsRKWB+h7Q==
-----END CERTIFICATE-----
Generated at Mon Jun 16 08:53:05 2025 by rpki-client