Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a46ef78e-2681-310a-b9dc-0512875a0286.roa
File: a46ef78e-2681-310a-b9dc-0512875a0286.roa (raw, json)
Hash identifier: laRf1FVgK3NCcjVpXqQvbX2w75w5xa/fkCsCmQn3L3M=
Subject key identifier: 5B:8D:33:54:57:88:D5:E8:2C:39:D3:07:1D:AF:6B:B6:18:E8:A5:CD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C79CADDE118025D0388D2A480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a46ef78e-2681-310a-b9dc-0512875a0286.roa
Signing time: Tue 04 Jan 2022 05:00:00 +0000
ROA not before: Tue 04 Jan 2022 05:00:00 +0000
ROA not after: Tue 08 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 136.20.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:79:ca:dd:e1:18:02:5d:03:88:d2:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 4 05:00:00 2022 GMT
Not After : Feb 8 05:00:00 2022 GMT
Subject: CN=03d01d3c-ab43-4dd7-81ce-742813fb583c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:98:ef:41:c9:50:85:91:ae:59:89:34:9b:64:
b6:5a:6c:d0:c8:62:de:d0:ed:ec:8a:8e:79:72:ec:
0b:bc:5c:a9:99:d2:69:94:03:32:2f:ef:d9:59:3f:
c5:9e:8f:ed:c4:03:d7:19:fc:c0:0c:1d:55:9c:90:
c8:14:5d:fd:f3:a6:9e:70:c2:ba:84:b3:19:af:9a:
b4:bd:68:32:49:f8:4f:0f:ec:c7:c3:49:1a:2e:72:
0d:7b:a3:88:eb:11:cf:e1:d3:53:08:4a:46:db:83:
90:2e:45:23:54:78:8e:6f:66:f9:dc:72:87:b3:3e:
51:31:7d:28:7d:c2:a5:38:e1:37:c0:59:9d:b4:26:
5a:6b:f2:c4:4b:7c:2e:ee:04:a5:32:9e:50:93:5a:
4f:64:02:66:c4:07:e2:e1:14:45:1c:48:bb:48:0d:
09:6d:33:ff:bb:a1:33:32:a3:f2:31:f7:d1:20:51:
81:b6:93:25:33:8a:36:45:0d:23:f2:0e:6c:cc:8d:
c1:d2:55:df:cb:27:c4:6c:62:c0:3d:79:29:f8:90:
fc:c3:08:d4:c6:90:60:46:06:5d:42:10:b9:75:26:
c0:ae:fd:b8:47:ed:e0:dd:0f:7f:b5:ae:2f:11:a9:
13:08:ce:b2:5b:1a:a0:4a:87:cb:9b:6e:22:50:48:
68:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8D:33:54:57:88:D5:E8:2C:39:D3:07:1D:AF:6B:B6:18:E8:A5:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a46ef78e-2681-310a-b9dc-0512875a0286.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.20.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:f8:d3:f0:ec:de:71:65:cc:56:75:c7:8d:77:b7:27:d6:17:
62:cd:34:55:d1:9d:2f:5b:58:bb:f0:94:ba:fe:2e:8f:fb:e4:
d9:5b:6d:e2:dd:ec:0e:54:cf:51:ab:02:42:e2:b4:57:a3:e4:
39:ad:64:e2:63:c7:c7:b8:38:d8:d3:91:32:9f:88:37:d7:0f:
55:18:b1:3a:b4:8a:57:38:34:c8:c7:bb:d2:f5:48:f6:02:8f:
1d:1d:57:9e:26:93:46:c9:8f:41:01:98:ce:59:5f:75:ef:1c:
cb:0a:a7:72:4c:21:85:91:79:ab:d2:7f:8a:66:a7:6e:6a:ad:
1e:13:fc:24:16:36:4d:37:fa:4f:9f:03:38:f8:3f:41:6d:b4:
69:9f:f7:29:7e:09:a2:d9:a8:40:9f:22:b7:58:88:cc:ae:0d:
69:a8:d0:d4:17:7a:70:40:27:92:45:bb:6d:01:d4:0f:1e:16:
e0:29:8e:cf:0f:88:c7:54:15:de:c9:88:62:a3:05:85:02:fb:
0e:ee:96:65:a1:92:40:fe:37:d9:ce:e9:5a:5b:dc:a0:27:f7:
ea:3f:c5:fe:34:3c:56:5f:e9:d7:46:ab:2e:10:b4:ff:a9:dd:
c9:aa:28:5f:98:fa:c9:1d:fa:53:36:9f:c8:e1:99:59:4d:e9:
c3:62:05:1a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDx5yt3hGAJdA4jSpIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDEwNDA1MDAwMFoXDTIyMDIwODA1MDAwMFowLzEtMCsGA1UEAxMk
MDNkMDFkM2MtYWI0My00ZGQ3LTgxY2UtNzQyODEzZmI1ODNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05jvQclQhZGuWYk0m2S2WmzQyGLe0O3sio55
cuwLvFypmdJplAMyL+/ZWT/Fno/txAPXGfzADB1VnJDIFF3986aecMK6hLMZr5q0
vWgySfhPD+zHw0kaLnINe6OI6xHP4dNTCEpG24OQLkUjVHiOb2b53HKHsz5RMX0o
fcKlOOE3wFmdtCZaa/LES3wu7gSlMp5Qk1pPZAJmxAfi4RRFHEi7SA0JbTP/u6Ez
MqPyMffRIFGBtpMlM4o2RQ0j8g5szI3B0lXfyyfEbGLAPXkp+JD8wwjUxpBgRgZd
QhC5dSbArv24R+3g3Q9/ta4vEakTCM6yWxqgSofLm24iUEhoZwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFuNM1RXiNXoLDnTBx2va7YY6KXNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYTQ2ZWY3OGUtMjY4MS0z
MTBhLWI5ZGMtMDUxMjg3NWEwMjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBiBQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAuPjT8OzecWXMVnXHjXe3J9YXYs00VdGdL1tYu/CUuv4uj/vk2Vtt4t3s
DlTPUasCQuK0V6PkOa1k4mPHx7g42NORMp+IN9cPVRixOrSKVzg0yMe70vVI9gKP
HR1XniaTRsmPQQGYzllfde8cywqnckwhhZF5q9J/imanbmqtHhP8JBY2TTf6T58D
OPg/QW20aZ/3KX4JotmoQJ8it1iIzK4NaajQ1Bd6cEAnkkW7bQHUDx4W4CmOzw+I
x1QV3smIYqMFhQL7Du6WZaGSQP432c7pWlvcoCf36j/F/jQ8Vl/p10arLhC0/6nd
yaooX5j6yR36UzafyOGZWU3pw2IFGg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:09:43 2025 by rpki-client