Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a1f4bc2c-dfe7-3abb-be2a-eb037339d077.roa
File: a1f4bc2c-dfe7-3abb-be2a-eb037339d077.roa (raw, json)
Hash identifier: za/Zuu5UpDWUQH1bq+sMkwb9O6JGQRLLkvQLUteK4qY=
Subject key identifier: B7:AE:5A:FA:F0:2C:BB:42:DB:DB:E1:20:76:31:B8:EF:02:C1:13:7E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CDE3CD61A39EA1660E9861300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a1f4bc2c-dfe7-3abb-be2a-eb037339d077.roa
Signing time: Wed 09 Feb 2022 05:00:00 +0000
ROA not before: Wed 09 Feb 2022 05:00:00 +0000
ROA not after: Wed 16 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 13.36.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:de:3c:d6:1a:39:ea:16:60:e9:86:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 9 05:00:00 2022 GMT
Not After : Mar 16 04:00:00 2022 GMT
Subject: CN=fd8de04b-c76d-4cdd-95c1-fcc70666a138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:77:30:5c:1b:6c:f7:a8:c2:c3:82:3a:e6:56:
36:24:c3:d3:39:d1:ab:12:de:8e:68:76:f6:4f:9d:
da:3d:3b:99:3a:83:e4:10:74:5a:c9:19:94:ff:28:
ca:eb:90:4e:09:70:70:c0:d8:47:bd:ad:a5:8f:d4:
c6:dd:1c:2c:23:47:6d:fb:4d:d4:c4:bd:e4:ef:28:
3f:e2:f2:e9:fd:f2:7b:c5:39:e8:1d:ed:b9:c6:76:
f2:fd:b7:60:e0:9c:23:7f:8b:3f:37:50:2e:23:d4:
a2:c6:7e:f9:ca:80:69:af:d0:8e:dc:d5:66:0e:ef:
6e:09:b3:0f:b0:b7:4c:1c:0a:f1:b1:b8:3e:41:60:
fd:f4:95:05:56:9c:ed:c2:de:2d:f7:a8:5d:13:15:
6a:2d:2a:32:a9:93:f4:33:1a:d4:48:92:4b:33:05:
4a:8f:c0:39:11:57:c1:fd:10:4a:d3:a3:64:e3:ae:
d7:20:71:bc:fd:c8:e6:58:ad:0f:9e:49:bf:97:d0:
38:63:4b:fa:9a:21:05:76:c0:d7:e9:5b:6a:1b:8c:
fc:27:74:d5:65:b2:a4:aa:77:33:90:37:53:ba:f5:
1d:64:20:44:03:3a:a3:cc:65:9e:a0:14:9e:e6:fb:
f6:f8:1b:e7:ca:60:df:45:df:15:c3:d8:58:d7:79:
38:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AE:5A:FA:F0:2C:BB:42:DB:DB:E1:20:76:31:B8:EF:02:C1:13:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a1f4bc2c-dfe7-3abb-be2a-eb037339d077.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.36.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:8f:be:27:a5:33:00:35:b3:74:ed:73:96:03:8f:a8:5f:95:
a1:c2:62:7c:b5:ac:39:56:af:ea:1e:f3:70:ad:90:c2:89:d8:
d0:58:88:da:24:48:ac:6f:dd:91:ad:84:7e:72:2c:89:86:3e:
8f:9b:5f:c7:f7:ab:ad:70:d6:38:a7:1b:b8:f2:bd:4a:d5:be:
21:25:3f:88:a9:04:95:25:97:d8:c7:b8:95:21:09:45:c9:e3:
82:7f:1c:00:ef:5f:74:ef:61:fe:f2:55:d4:3b:e1:41:76:39:
a0:fa:d1:75:31:e1:33:82:bb:86:1f:f6:0f:4b:34:a2:8f:cb:
1f:ca:37:c1:95:37:3d:56:93:af:3b:1e:16:df:95:e6:2b:f4:
75:35:0c:cf:e5:76:00:21:15:27:89:c9:3d:9e:24:84:d4:8f:
bd:b1:b5:2a:99:33:be:c3:20:53:d2:c1:f5:35:f4:97:5a:82:
fb:62:df:cf:f1:dc:ae:1d:40:2f:ec:f2:ca:b4:cc:1d:25:e2:
fd:04:7e:49:b9:c4:28:95:21:0a:f0:20:3b:bd:6c:7b:d2:ea:
08:03:8f:f5:ff:74:b6:04:ee:a0:47:64:33:ee:d9:aa:ab:1e:
07:fe:3f:38:b6:af:b1:43:45:5e:f6:5d:11:29:47:83:6f:d6:
df:85:06:aa
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzePNYaOeoWYOmGEwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIwOTA1MDAwMFoXDTIyMDMxNjA0MDAwMFowLzEtMCsGA1UEAxMk
ZmQ4ZGUwNGItYzc2ZC00Y2RkLTk1YzEtZmNjNzA2NjZhMTM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3cwXBts96jCw4I65lY2JMPTOdGrEt6OaHb2
T53aPTuZOoPkEHRayRmU/yjK65BOCXBwwNhHva2lj9TG3RwsI0dt+03UxL3k7yg/
4vLp/fJ7xTnoHe25xnby/bdg4Jwjf4s/N1AuI9Sixn75yoBpr9CO3NVmDu9uCbMP
sLdMHArxsbg+QWD99JUFVpztwt4t96hdExVqLSoyqZP0MxrUSJJLMwVKj8A5EVfB
/RBK06Nk467XIHG8/cjmWK0Pnkm/l9A4Y0v6miEFdsDX6VtqG4z8J3TVZbKkqncz
kDdTuvUdZCBEAzqjzGWeoBSe5vv2+BvnymDfRd8Vw9hY13k4JQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLeuWvrwLLtC29vhIHYxuO8CwRN+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYTFmNGJjMmMtZGZlNy0z
YWJiLWJlMmEtZWIwMzczMzlkMDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCDSQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAHY++J6UzADWzdO1zlgOPqF+VocJifLWsOVav6h7zcK2QwonY0FiI2iRI
rG/dka2EfnIsiYY+j5tfx/errXDWOKcbuPK9StW+ISU/iKkElSWX2Me4lSEJRcnj
gn8cAO9fdO9h/vJV1DvhQXY5oPrRdTHhM4K7hh/2D0s0oo/LH8o3wZU3PVaTrzse
Ft+V5iv0dTUMz+V2ACEVJ4nJPZ4khNSPvbG1KpkzvsMgU9LB9TX0l1qC+2Lfz/Hc
rh1AL+zyyrTMHSXi/QR+SbnEKJUhCvAgO71se9LqCAOP9f90tgTuoEdkM+7Zqqse
B/4/OLavsUNFXvZdESlHg2/W34UGqg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:26:22 2025 by rpki-client