Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a1cb5cb8-c551-3fbb-ba26-b0dcc44cdfc0.roa
File: a1cb5cb8-c551-3fbb-ba26-b0dcc44cdfc0.roa (raw, json)
Hash identifier: XJR+cPVckktiWTswnvDkWs61ru5u4QOZnC/jOXrvDtI=
Subject key identifier: F0:97:1C:24:01:87:C8:13:45:4E:B8:7F:86:F1:5C:C7:BA:76:E1:19
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B020BB9E0386D019F4BDEEC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a1cb5cb8-c551-3fbb-ba26-b0dcc44cdfc0.roa
Signing time: Tue 24 Jan 2023 12:00:00 +0000
ROA not before: Tue 24 Jan 2023 12:00:00 +0000
ROA not after: Wed 01 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 128.125.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b0:20:bb:9e:03:86:d0:19:f4:bd:ee:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 24 12:00:00 2023 GMT
Not After : Mar 1 05:00:00 2023 GMT
Subject: CN=e32d6879-9ae1-46bb-acec-c58382d2f199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c7:f2:18:72:66:01:00:df:49:46:4f:91:48:
31:7b:ac:a7:13:00:90:c1:5f:94:45:91:5e:74:59:
d5:54:6d:e9:21:a6:64:d2:7d:26:7c:81:cc:64:e1:
ad:d2:2b:2e:e6:8d:58:93:61:4e:05:08:67:e3:92:
98:a3:ba:6e:3c:4f:5f:8f:62:c9:f3:0a:da:13:32:
cf:6f:e5:1f:b8:e5:29:fb:60:2b:b6:43:93:37:98:
15:53:ac:4d:a1:71:56:15:76:f7:a4:58:30:b2:e0:
92:c3:84:67:cb:ac:99:88:83:82:fc:12:31:3c:e7:
47:37:d1:9a:61:02:93:47:e2:6f:4c:7e:32:1f:e2:
13:96:81:4e:4d:3e:3b:1e:1e:f4:90:21:4c:cf:fd:
f2:e5:b0:7a:37:39:6c:9c:51:e6:c5:07:65:0a:4c:
87:aa:97:d3:80:33:72:03:eb:88:9e:35:8e:45:18:
1d:92:3d:86:9b:cd:08:3d:1c:2f:5d:bc:46:f6:57:
d8:3d:ae:b7:ea:89:56:41:89:86:ec:31:40:d5:f0:
19:54:c6:9f:ed:fd:f6:52:49:8d:41:ba:d3:f8:99:
d7:d5:b7:0a:a4:f0:83:51:43:09:ca:18:01:39:8e:
53:9f:5b:f2:c2:51:d5:b8:af:55:70:d3:a0:0b:60:
f2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:97:1C:24:01:87:C8:13:45:4E:B8:7F:86:F1:5C:C7:BA:76:E1:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a1cb5cb8-c551-3fbb-ba26-b0dcc44cdfc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
128.125.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:42:fb:7d:5c:13:e3:59:ea:a7:10:f5:85:ba:2b:33:38:e1:
a9:cf:7a:7d:3e:22:cc:bb:72:32:ee:0b:db:ac:cd:23:62:98:
26:e3:6f:29:18:98:18:e6:ca:6c:6f:7b:5b:90:4b:18:eb:43:
5f:9c:9b:9f:9b:c0:24:a2:23:4c:e1:c1:8c:a5:d9:1b:60:11:
0d:cf:75:83:f8:c0:7b:79:7a:d6:f1:cc:bb:a6:9d:9b:76:8d:
4d:5b:52:21:c6:b4:e4:06:3f:9b:a8:10:c7:ab:05:7e:a4:42:
73:d4:6d:4f:62:7c:58:1b:a2:8f:87:c9:1c:7c:e0:93:d2:63:
9a:9c:64:97:40:e5:70:4d:44:03:9b:5f:ef:f4:83:f6:8f:60:
0b:e3:b5:a3:b7:d3:c7:c1:ef:e6:d8:58:91:16:bd:f2:5f:76:
e7:01:36:83:e8:62:84:b0:7a:88:6f:4a:fd:49:dc:a2:ae:1b:
3a:36:d7:f6:c7:9b:51:27:b2:08:7f:28:50:5f:71:c9:b0:cc:
3c:fb:32:c5:f7:ad:42:75:20:48:50:e8:fa:8a:70:5c:71:bb:
c1:47:0f:85:58:a5:c5:85:68:36:20:e7:e4:c5:d9:a9:c1:3a:
29:dd:b9:f1:6a:24:4b:e1:53:8a:29:9f:c7:f1:60:75:09:85:
4f:e1:89:12
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECwILueA4bQGfS97sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEyNDEyMDAwMFoXDTIzMDMwMTA1MDAwMFowLzEtMCsGA1UEAxMk
ZTMyZDY4NzktOWFlMS00NmJiLWFjZWMtYzU4MzgyZDJmMTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcfyGHJmAQDfSUZPkUgxe6ynEwCQwV+URZFe
dFnVVG3pIaZk0n0mfIHMZOGt0isu5o1Yk2FOBQhn45KYo7puPE9fj2LJ8wraEzLP
b+UfuOUp+2ArtkOTN5gVU6xNoXFWFXb3pFgwsuCSw4Rny6yZiIOC/BIxPOdHN9Ga
YQKTR+JvTH4yH+ITloFOTT47Hh70kCFMz/3y5bB6NzlsnFHmxQdlCkyHqpfTgDNy
A+uInjWORRgdkj2Gm80IPRwvXbxG9lfYPa636olWQYmG7DFA1fAZVMaf7f32UkmN
QbrT+JnX1bcKpPCDUUMJyhgBOY5Tn1vywlHVuK9VcNOgC2DyuQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPCXHCQBh8gTRU64f4bxXMe6duEZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYTFjYjVjYjgtYzU1MS0z
ZmJiLWJhMjYtYjBkY2M0NGNkZmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgH0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAlEL7fVwT41nqpxD1hborMzjhqc96fT4izLtyMu4L26zNI2KYJuNvKRiY
GObKbG97W5BLGOtDX5ybn5vAJKIjTOHBjKXZG2ARDc91g/jAe3l61vHMu6adm3aN
TVtSIca05AY/m6gQx6sFfqRCc9RtT2J8WBuij4fJHHzgk9Jjmpxkl0DlcE1EA5tf
7/SD9o9gC+O1o7fTx8Hv5thYkRa98l925wE2g+hihLB6iG9K/Uncoq4bOjbX9seb
USeyCH8oUF9xybDMPPsyxfetQnUgSFDo+opwXHG7wUcPhVilxYVoNiDn5MXZqcE6
Kd258WokS+FTiimfx/FgdQmFT+GJEg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:01:07 2025 by rpki-client