Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a57e6a87-612f-3ede-8fd4-5542969fcc7b.roa
File: a57e6a87-612f-3ede-8fd4-5542969fcc7b.roa (raw, json)
Hash identifier: H4MQd8sKm+lVAZyfasGZ3hk3MK+3MF50J0LtYbicfog=
Subject key identifier: F1:BF:21:4E:0A:60:29:10:2E:53:68:49:7C:A7:11:9A:68:C9:31:5A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E933AC183E43F11DB95F73780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a57e6a87-612f-3ede-8fd4-5542969fcc7b.roa
Signing time: Thu 14 Jul 2022 12:00:00 +0000
ROA not before: Thu 14 Jul 2022 12:00:00 +0000
ROA not after: Fri 19 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 134.64.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:93:3a:c1:83:e4:3f:11:db:95:f7:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 14 12:00:00 2022 GMT
Not After : Aug 19 04:00:00 2022 GMT
Subject: CN=d88bca6c-67e3-426a-9347-fdbbc9331e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:b2:0e:10:05:b0:07:43:3f:67:7c:b7:03:
ef:b2:79:51:9b:01:99:11:fa:e7:f3:5c:83:e4:5e:
a6:4a:1b:53:c0:78:07:b1:1e:90:bf:80:aa:ad:67:
eb:60:86:c3:18:a6:46:4b:4d:b4:be:18:63:15:a3:
1c:b0:1e:99:f9:76:4b:6a:30:56:7a:3f:e5:73:56:
d1:0b:5b:e3:73:e2:1c:be:b6:32:b7:12:3f:6f:d9:
0b:b2:57:45:58:7f:08:28:8a:16:de:ec:50:a3:ae:
ab:04:51:39:07:40:6d:e0:af:07:5b:01:bc:6a:d0:
40:67:0c:42:0e:c9:6b:1b:10:9e:28:bc:f9:d8:c9:
63:aa:71:18:d4:33:7d:37:a9:bf:b4:5d:ac:6a:42:
70:d4:5c:5d:56:1a:05:c4:9b:f4:ed:d9:7b:6e:b1:
f3:d8:4e:31:39:a5:1e:6b:b1:cf:88:cd:89:30:4f:
12:76:04:a8:88:96:b8:f4:ab:ad:06:29:8b:dc:3a:
e1:9c:b9:fe:46:92:54:dd:e8:d9:b3:e7:ff:f7:27:
aa:ed:37:34:ff:8a:f5:2d:2f:4f:9d:fe:9c:23:1f:
82:f7:b9:83:d8:83:2a:16:12:fa:75:f8:6c:51:32:
b5:d9:ee:89:b6:59:fc:28:ea:ed:b2:7b:ce:c5:21:
1d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BF:21:4E:0A:60:29:10:2E:53:68:49:7C:A7:11:9A:68:C9:31:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a57e6a87-612f-3ede-8fd4-5542969fcc7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
134.64.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:bd:ab:0a:b2:10:8b:35:82:b2:94:06:08:34:37:ca:95:f9:
c7:38:fb:9b:88:fd:ba:32:fb:2a:e1:68:99:fe:07:b1:4a:12:
de:80:71:5b:82:89:34:d9:ea:9e:8a:74:09:ff:2c:46:0a:93:
6b:1d:36:69:e9:3d:e3:4e:b3:99:1f:27:5c:7e:22:fe:31:46:
d0:6b:00:fb:f0:99:4b:f8:88:0f:1d:a8:d5:4c:eb:04:a9:bc:
0a:f6:b5:b3:57:50:ec:1f:ec:f1:7a:55:1f:9a:61:81:80:fd:
50:1e:e2:0b:a4:de:0e:f2:7f:58:af:50:4b:5e:db:ca:8c:13:
cd:79:3f:d1:66:41:44:e1:26:45:4e:e0:e3:b1:f8:e4:88:57:
7b:bd:f6:00:ab:ea:5c:c2:4e:0d:8a:ab:a2:b9:7e:a5:c7:44:
3b:4a:d7:f1:43:79:8b:02:61:c5:26:fd:2d:e8:c1:8b:42:31:
b6:c9:d9:cb:2c:3e:b1:59:30:b1:fa:f5:16:f1:20:18:04:17:
0b:39:86:64:27:32:d9:72:3a:05:6d:23:ac:4d:78:63:3d:6d:
5e:4f:1a:a5:c7:78:07:28:4b:59:3a:73:44:c2:a2:7d:47:60:
7a:69:55:88:1a:b4:69:9a:0c:c3:5e:54:76:a5:2e:c9:6d:6a:
e8:50:8f:62
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6TOsGD5D8R25X3N4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcxNDEyMDAwMFoXDTIyMDgxOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZDg4YmNhNmMtNjdlMy00MjZhLTkzNDctZmRiYmM5MzMxZTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI2yDhAFsAdDP2d8twPvsnlRmwGZEfrn81yD
5F6mShtTwHgHsR6Qv4CqrWfrYIbDGKZGS020vhhjFaMcsB6Z+XZLajBWej/lc1bR
C1vjc+IcvrYytxI/b9kLsldFWH8IKIoW3uxQo66rBFE5B0Bt4K8HWwG8atBAZwxC
DslrGxCeKLz52MljqnEY1DN9N6m/tF2sakJw1FxdVhoFxJv07dl7brHz2E4xOaUe
a7HPiM2JME8SdgSoiJa49KutBimL3DrhnLn+RpJU3ejZs+f/9yeq7Tc0/4r1LS9P
nf6cIx+C97mD2IMqFhL6dfhsUTK12e6Jtln8KOrtsnvOxSEd7wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPG/IU4KYCkQLlNoSXynEZpoyTFaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYTU3ZTZhODctNjEyZi0z
ZWRlLThmZDQtNTU0Mjk2OWZjYzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhkAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAhL2rCrIQizWCspQGCDQ3ypX5xzj7m4j9ujL7KuFomf4HsUoS3oBxW4KJ
NNnqnop0Cf8sRgqTax02aek9406zmR8nXH4i/jFG0GsA+/CZS/iIDx2o1UzrBKm8
Cva1s1dQ7B/s8XpVH5phgYD9UB7iC6TeDvJ/WK9QS17byowTzXk/0WZBROEmRU7g
47H45IhXe732AKvqXMJODYqrorl+pcdEO0rX8UN5iwJhxSb9LejBi0IxtsnZyyw+
sVkwsfr1FvEgGAQXCzmGZCcy2XI6BW0jrE14Yz1tXk8apcd4ByhLWTpzRMKifUdg
emlViBq0aZoMw15UdqUuyW1q6FCPYg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:20:05 2025 by rpki-client