Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/953e5f91-36a6-36a0-b231-fa59ba8f6e34.roa
File: 953e5f91-36a6-36a0-b231-fa59ba8f6e34.roa (raw, json)
Hash identifier: a1w3XEUcQ667tKx9AJVVJ77GfDoeJEZxUTHYhCxthRE=
Subject key identifier: DA:3D:95:0C:F3:6A:BA:39:2C:CE:F1:69:DA:52:6D:ED:7F:12:D6:62
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D332E1B754136F29834A36500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/953e5f91-36a6-36a0-b231-fa59ba8f6e34.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 134.62.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:33:2e:1b:75:41:36:f2:98:34:a3:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=29479fd0-26b5-4416-8575-b5b7c8b461c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:95:ab:7b:a2:d9:a7:65:24:3c:7a:10:87:
30:43:a4:94:90:59:90:40:b1:fc:ed:c3:dd:23:c7:
b7:69:fb:aa:48:1e:dc:11:ef:db:7f:35:a5:ae:94:
d2:2b:be:c2:f6:79:b6:d3:7a:36:fb:dc:29:cc:b5:
28:33:36:5a:f2:92:bd:d0:d2:db:c5:d8:17:2f:f7:
18:5f:cf:43:99:02:32:17:d9:07:fb:48:04:57:44:
d9:9d:d6:b1:2d:34:ae:35:9e:ca:98:f6:0a:32:54:
7d:b5:83:9f:57:9f:37:f1:d7:d4:c9:30:e6:1c:91:
55:6a:8c:68:72:74:fd:d8:0a:40:4e:af:41:79:42:
fa:24:19:be:b5:76:12:94:e3:48:4f:39:ff:28:de:
8b:dc:b2:93:42:6f:fc:42:c4:7e:26:f7:27:e7:e5:
b7:a2:a6:df:07:53:c6:54:21:3e:af:cf:1c:f8:67:
47:fc:b1:94:5d:43:10:55:66:f5:64:3a:e2:e8:03:
cf:df:86:a4:38:a5:02:fd:df:71:46:8e:9b:e5:6e:
04:fd:a0:31:d5:38:f9:61:8e:80:0a:9b:98:1e:ad:
c0:05:29:fa:ea:cf:49:d9:d6:81:de:c6:36:2b:76:
a9:2d:59:ff:a0:8f:4b:ff:60:49:0c:ff:9a:2a:dd:
0c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3D:95:0C:F3:6A:BA:39:2C:CE:F1:69:DA:52:6D:ED:7F:12:D6:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/953e5f91-36a6-36a0-b231-fa59ba8f6e34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
134.62.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:f5:28:e0:b8:7a:a9:c8:33:a3:58:be:60:0c:fc:bc:7b:b9:
f7:eb:b5:ae:19:b1:04:ab:64:fd:9b:56:84:70:8e:eb:f0:2b:
71:f3:8e:5b:14:80:75:95:da:9c:a9:5f:6f:52:3c:cf:7e:90:
62:d9:16:7b:24:4c:9c:e5:d0:d9:20:03:59:75:b0:f1:66:6a:
45:3a:7a:ca:58:1a:33:fb:d5:98:87:46:a5:9b:b6:2f:21:87:
9d:dc:2e:b4:84:5b:bc:58:04:f2:92:00:1e:a5:d0:f9:7b:94:
31:8e:73:02:39:8f:b5:d9:03:3d:78:f1:5c:ec:2a:d5:91:be:
fa:0f:47:9f:d6:16:3d:75:51:60:9d:8f:94:d8:d5:55:50:b7:
85:02:a0:9d:33:94:13:c4:7f:7f:b6:0e:42:b5:15:fd:7b:3b:
5a:c1:88:10:f6:6a:ff:fa:e1:cc:91:5d:2a:19:04:1b:18:8b:
90:60:5e:13:55:63:64:f8:f0:ef:65:95:0d:8e:89:aa:84:bb:
3d:27:fd:87:1c:a9:45:f5:1d:e1:dd:61:a5:89:54:59:55:a8:
42:15:ed:42:c4:db:e3:11:1c:6b:03:a1:f6:60:42:d7:90:db:
9e:44:a9:13:15:6a:4f:3e:d3:ef:86:35:ac:cd:3a:6b:b5:1c:
67:b8:b0:39
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0zLht1QTbymDSjZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
Mjk0NzlmZDAtMjZiNS00NDE2LTg1NzUtYjViN2M4YjQ2MWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJaVq3ui2adlJDx6EIcwQ6SUkFmQQLH87cPd
I8e3afuqSB7cEe/bfzWlrpTSK77C9nm203o2+9wpzLUoMzZa8pK90NLbxdgXL/cY
X89DmQIyF9kH+0gEV0TZndaxLTSuNZ7KmPYKMlR9tYOfV5838dfUyTDmHJFVaoxo
cnT92ApATq9BeUL6JBm+tXYSlONITzn/KN6L3LKTQm/8QsR+Jvcn5+W3oqbfB1PG
VCE+r88c+GdH/LGUXUMQVWb1ZDri6APP34akOKUC/d9xRo6b5W4E/aAx1Tj5YY6A
CpuYHq3ABSn66s9J2daB3sY2K3apLVn/oI9L/2BJDP+aKt0MIQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNo9lQzzaro5LM7xadpSbe1/EtZiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOTUzZTVmOTEtMzZhNi0z
NmEwLWIyMzEtZmE1OWJhOGY2ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhj4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGvUo4Lh6qcgzo1i+YAz8vHu59+u1rhmxBKtk/ZtWhHCO6/ArcfOOWxSA
dZXanKlfb1I8z36QYtkWeyRMnOXQ2SADWXWw8WZqRTp6ylgaM/vVmIdGpZu2LyGH
ndwutIRbvFgE8pIAHqXQ+XuUMY5zAjmPtdkDPXjxXOwq1ZG++g9Hn9YWPXVRYJ2P
lNjVVVC3hQKgnTOUE8R/f7YOQrUV/Xs7WsGIEPZq//rhzJFdKhkEGxiLkGBeE1Vj
ZPjw72WVDY6JqoS7PSf9hxypRfUd4d1hpYlUWVWoQhXtQsTb4xEcawOh9mBC15Db
nkSpExVqTz7T74Y1rM06a7UcZ7iwOQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:43:50 2025 by rpki-client