Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/931f0c56-5b5c-3c27-8d5f-6788a5df0725.roa
File: 931f0c56-5b5c-3c27-8d5f-6788a5df0725.roa (raw, json)
Hash identifier: 3nT5OmqgXl5nOm0ByFjwpM5/wKpuEZl3kvvtzQACTP4=
Subject key identifier: B5:6B:1B:68:69:43:09:4E:D2:1C:83:B8:AC:C7:37:C4:01:7F:85:3A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858409A67E1701CA91E262CF3D700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/931f0c56-5b5c-3c27-8d5f-6788a5df0725.roa
Signing time: Mon 16 Jan 2023 12:00:00 +0000
ROA not before: Mon 16 Jan 2023 12:00:00 +0000
ROA not after: Tue 21 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 136.11.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9a:67:e1:70:1c:a9:1e:26:2c:f3:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 16 12:00:00 2023 GMT
Not After : Feb 21 05:00:00 2023 GMT
Subject: CN=b80c0511-8726-4f15-b58b-3ede09cbc9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3f:b6:6c:fc:81:2a:91:01:35:7e:79:b0:ef:
b7:8a:f1:31:b2:71:a8:2d:de:e3:44:c0:17:13:c5:
27:ca:eb:d1:24:f6:17:ec:85:a9:51:85:c1:bf:2d:
0a:a3:50:b9:67:6b:3b:ad:59:1c:1c:ee:6d:d3:de:
a9:75:4b:7b:db:14:0a:14:31:77:84:62:01:f0:e8:
78:9c:62:05:c6:ac:68:c5:67:a3:7d:d9:66:2b:c6:
8f:82:6f:41:8d:15:44:75:e8:10:63:99:e5:e6:6d:
38:0b:26:83:e8:22:8d:69:c5:96:69:2f:94:10:7b:
4f:15:89:4a:1d:e3:63:58:c5:37:c2:68:fd:15:c7:
79:e1:ae:49:c7:63:9a:2d:0c:45:70:8a:13:dc:67:
6b:da:a5:12:47:7e:78:06:53:a2:5e:28:b8:81:7a:
11:89:0f:6c:ad:24:ec:74:f2:f1:c3:da:9f:4b:84:
a9:5a:33:64:31:59:c9:f8:21:17:c1:58:df:5b:19:
e6:93:d2:10:de:86:b6:cc:99:fc:29:a9:e7:c0:ce:
cb:6c:ee:0a:b5:fb:e4:76:56:24:8a:0b:d6:7c:42:
8f:1b:aa:5b:62:fc:81:ae:fa:97:55:e6:7f:42:32:
c4:8a:46:ca:64:10:b2:32:5c:0b:95:a8:da:f7:09:
f9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6B:1B:68:69:43:09:4E:D2:1C:83:B8:AC:C7:37:C4:01:7F:85:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/931f0c56-5b5c-3c27-8d5f-6788a5df0725.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.11.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:dc:9e:7d:85:a4:01:2a:ee:69:5e:a8:d5:dd:72:c8:c6:10:
13:be:52:33:63:f9:e3:37:cb:cb:5a:2f:d6:23:39:a2:08:70:
f9:c4:cc:d3:fe:29:4a:ab:14:d7:c2:82:aa:e0:b0:d0:21:15:
b4:33:72:43:13:35:3e:8c:15:ec:86:ce:bf:a6:b2:3b:1b:9b:
60:2e:96:44:fa:41:5d:cb:8d:d6:b2:87:f6:28:61:77:f0:91:
48:13:ed:da:fc:84:bf:6f:ac:76:98:b0:9d:1d:2a:d0:11:ec:
6d:f1:d8:e3:6b:61:6b:3b:e8:2a:a7:3c:10:c5:46:3a:74:fb:
70:e0:c5:10:d3:93:e6:bd:55:ac:c8:08:3c:3a:a6:37:5a:a8:
ee:fd:f6:4d:bd:e0:8f:44:72:8d:0e:19:2d:16:8e:b5:15:3b:
87:20:b9:54:a3:cc:92:0b:bd:47:ab:28:3f:fc:f3:fc:1f:66:
de:68:a2:9f:30:97:6b:4e:73:b2:c4:45:4b:59:48:83:5e:c6:
78:be:30:ce:53:9f:c7:dc:40:ac:35:d6:b8:9b:df:e4:c1:53:
dc:f7:c0:e5:19:1b:72:4d:29:d0:17:4c:39:ee:1e:59:b4:dd:
95:97:b8:1c:c0:91:85:36:13:45:1c:a7:a2:6c:ca:01:3d:7c:
a8:4d:4c:77
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECaZ+FwHKkeJizz1wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExNjEyMDAwMFoXDTIzMDIyMTA1MDAwMFowLzEtMCsGA1UEAxMk
YjgwYzA1MTEtODcyNi00ZjE1LWI1OGItM2VkZTA5Y2JjOWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj+2bPyBKpEBNX55sO+3ivExsnGoLd7jRMAX
E8UnyuvRJPYX7IWpUYXBvy0Ko1C5Z2s7rVkcHO5t096pdUt72xQKFDF3hGIB8Oh4
nGIFxqxoxWejfdlmK8aPgm9BjRVEdegQY5nl5m04CyaD6CKNacWWaS+UEHtPFYlK
HeNjWMU3wmj9Fcd54a5Jx2OaLQxFcIoT3Gdr2qUSR354BlOiXii4gXoRiQ9srSTs
dPLxw9qfS4SpWjNkMVnJ+CEXwVjfWxnmk9IQ3oa2zJn8KannwM7LbO4KtfvkdlYk
igvWfEKPG6pbYvyBrvqXVeZ/QjLEikbKZBCyMlwLlaja9wn5AwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLVrG2hpQwlO0hyDuKzHN8QBf4U6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOTMxZjBjNTYtNWI1Yy0z
YzI3LThkNWYtNjc4OGE1ZGYwNzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiAswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKtyefYWkASruaV6o1d1yyMYQE75SM2P54zfLy1ov1iM5oghw+cTM0/4p
SqsU18KCquCw0CEVtDNyQxM1PowV7IbOv6ayOxubYC6WRPpBXcuN1rKH9ihhd/CR
SBPt2vyEv2+sdpiwnR0q0BHsbfHY42thazvoKqc8EMVGOnT7cODFENOT5r1VrMgI
PDqmN1qo7v32Tb3gj0RyjQ4ZLRaOtRU7hyC5VKPMkgu9R6soP/zz/B9m3miinzCX
a05zssRFS1lIg17GeL4wzlOfx9xArDXWuJvf5MFT3PfA5Rkbck0p0BdMOe4eWbTd
lZe4HMCRhTYTRRynomzKAT18qE1Mdw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:57:13 2025 by rpki-client