Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9bfe0053-6ad0-3984-9834-b53004a6162c.roa
File: 9bfe0053-6ad0-3984-9834-b53004a6162c.roa (raw, json)
Hash identifier: Znec78r35WFyRFnir7z2Y0T8bf5NJEX5bm8cy/b/2iE=
Subject key identifier: FF:2C:AB:50:46:8A:A7:B7:EE:2C:1C:76:FA:F8:07:E9:75:CD:A5:9A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F01DA50CAAC9DB14855D5ED00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9bfe0053-6ad0-3984-9834-b53004a6162c.roa
Signing time: Tue 23 Aug 2022 12:00:00 +0000
ROA not before: Tue 23 Aug 2022 12:00:00 +0000
ROA not after: Wed 28 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 3.128.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:01:da:50:ca:ac:9d:b1:48:55:d5:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 23 12:00:00 2022 GMT
Not After : Sep 28 04:00:00 2022 GMT
Subject: CN=b469a0b5-90fb-4afd-8bd6-e3225802a2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9c:df:d9:c6:33:dc:e0:ea:c4:ee:21:85:81:
a9:d0:1f:29:be:a8:cb:cc:02:70:76:ab:d7:66:c3:
68:e8:72:8b:14:e7:46:70:56:aa:5f:73:51:0c:41:
2e:ff:13:47:52:57:45:9b:45:8b:6f:92:eb:fc:fe:
83:90:a9:1a:89:0c:9b:d4:37:75:71:1c:a4:1a:d5:
67:2f:72:58:73:55:7c:ae:6a:5b:ea:cf:3a:f8:c4:
be:bc:99:04:f8:bb:c1:bc:3e:72:b0:46:27:46:e1:
99:63:30:2b:89:89:7e:25:1d:1f:88:55:7f:1f:7f:
42:28:65:b8:4b:3f:6b:36:86:e5:db:40:3a:85:b8:
55:f4:29:14:3c:93:c8:e0:c1:1e:09:bc:e9:c8:a3:
ca:bc:a3:00:42:ae:2a:cc:3e:7b:aa:51:e5:b0:19:
dc:0d:29:47:2f:a7:d1:0a:0e:8a:31:88:b1:94:cb:
c0:ae:0b:6f:0d:38:d6:49:bd:82:ff:fd:99:7b:c8:
d3:ff:97:e1:fb:08:b9:da:82:3f:ed:cb:ed:bc:00:
39:47:50:1a:c2:fc:a2:52:bf:d6:a5:f5:85:22:ca:
55:c4:94:17:1b:48:ec:73:2c:be:4c:ae:b0:ea:31:
74:61:55:1d:5d:74:95:e7:eb:0c:ee:38:f8:43:c3:
2d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2C:AB:50:46:8A:A7:B7:EE:2C:1C:76:FA:F8:07:E9:75:CD:A5:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9bfe0053-6ad0-3984-9834-b53004a6162c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.128.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:bb:1c:1b:5f:1e:27:b7:1b:c2:3f:be:56:6d:5d:c2:f7:d4:
be:5a:28:da:66:7a:7d:cf:ea:bf:6d:7e:d2:43:78:93:c9:66:
92:d5:75:40:75:7a:36:d0:1b:cf:72:f4:e6:a5:b2:5b:7c:05:
c0:5e:93:88:00:25:af:53:21:24:32:2f:22:1b:51:4d:34:1a:
a1:53:5d:b1:73:a7:9a:57:58:85:32:b8:dc:84:cb:76:06:be:
ac:39:e2:b1:08:dc:28:f6:17:37:ad:64:f7:a1:fe:6f:55:59:
16:45:cc:af:07:fc:ef:fb:bb:87:f0:ee:70:75:93:aa:6a:9a:
41:a5:d0:0c:b6:0c:2c:2c:7e:83:42:09:50:a8:e6:ae:5f:48:
f0:a6:13:70:3a:80:d4:9b:41:ab:d0:6f:cf:b4:d1:c0:a9:5a:
8c:d4:64:26:20:01:f1:1f:41:54:a6:6a:a8:e4:1a:a3:da:b9:
bb:97:66:71:13:cf:c2:c9:ca:9c:51:a1:4a:83:a2:71:72:3f:
02:a8:bb:8a:f4:c4:d2:52:aa:a7:4d:04:dd:87:a6:bf:51:87:
17:98:0a:d0:48:4c:0c:5f:df:a2:f6:7f:85:95:eb:13:a7:00:
8f:2a:e5:5d:c9:f0:4a:3b:42:a5:cf:c5:9e:bc:60:d8:34:4e:
ab:c5:40:62
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8B2lDKrJ2xSFXV7QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgyMzEyMDAwMFoXDTIyMDkyODA0MDAwMFowLzEtMCsGA1UEAxMk
YjQ2OWEwYjUtOTBmYi00YWZkLThiZDYtZTMyMjU4MDJhMmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5zf2cYz3ODqxO4hhYGp0B8pvqjLzAJwdqvX
ZsNo6HKLFOdGcFaqX3NRDEEu/xNHUldFm0WLb5Lr/P6DkKkaiQyb1Dd1cRykGtVn
L3JYc1V8rmpb6s86+MS+vJkE+LvBvD5ysEYnRuGZYzAriYl+JR0fiFV/H39CKGW4
Sz9rNobl20A6hbhV9CkUPJPI4MEeCbzpyKPKvKMAQq4qzD57qlHlsBncDSlHL6fR
Cg6KMYixlMvArgtvDTjWSb2C//2Ze8jT/5fh+wi52oI/7cvtvAA5R1AawvyiUr/W
pfWFIspVxJQXG0jscyy+TK6w6jF0YVUdXXSV5+sM7jj4Q8MtiQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFP8sq1BGiqe37iwcdvr4B+l1zaWaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOWJmZTAwNTMtNmFkMC0z
OTg0LTk4MzQtYjUzMDA0YTYxNjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMGA4AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAELscG18eJ7cbwj++Vm1dwvfUvloo2mZ6fc/qv21+0kN4k8lmktV1QHV6
NtAbz3L05qWyW3wFwF6TiAAlr1MhJDIvIhtRTTQaoVNdsXOnmldYhTK43ITLdga+
rDnisQjcKPYXN61k96H+b1VZFkXMrwf87/u7h/DucHWTqmqaQaXQDLYMLCx+g0IJ
UKjmrl9I8KYTcDqA1JtBq9Bvz7TRwKlajNRkJiAB8R9BVKZqqOQao9q5u5dmcRPP
wsnKnFGhSoOicXI/Aqi7ivTE0lKqp00E3Yemv1GHF5gK0EhMDF/fovZ/hZXrE6cA
jyrlXcnwSjtCpc/Fnrxg2DROq8VAYg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:46:09 2025 by rpki-client