Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ab019c9d-1d52-331c-a123-fce3d598aebd.roa
File: ab019c9d-1d52-331c-a123-fce3d598aebd.roa (raw, json)
Hash identifier: TK2YVhrgc1ChMx9ytR3Yi4/DPeElHLzXOha5HIuCXB8=
Subject key identifier: 62:95:0F:EA:A8:5F:85:07:FD:20:AF:D9:D2:A1:8B:DD:9E:AC:2A:86
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F579C510AF9321DDF581DFC00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ab019c9d-1d52-331c-a123-fce3d598aebd.roa
Signing time: Thu 22 Sep 2022 12:00:00 +0000
ROA not before: Thu 22 Sep 2022 12:00:00 +0000
ROA not after: Fri 28 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 140.145.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:57:9c:51:0a:f9:32:1d:df:58:1d:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 22 12:00:00 2022 GMT
Not After : Oct 28 04:00:00 2022 GMT
Subject: CN=dd6bfe5b-1df7-4d52-8e6a-811ceb7457c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:84:a7:85:84:78:05:68:73:b8:03:8d:25:
f1:ab:b1:cd:7c:ba:62:3d:fe:f0:d0:01:03:62:04:
5e:7d:45:80:e6:9c:27:43:74:e7:72:f3:68:dc:d3:
18:ca:83:47:17:e5:23:cf:2a:47:5c:8a:c2:00:4e:
1b:2c:19:5f:b6:1a:46:71:23:db:22:b7:ea:a4:9d:
d4:bf:c4:2f:41:d2:8a:da:f6:de:66:8e:12:8d:38:
e1:dc:3a:24:77:9e:a2:20:f8:06:e8:0f:ef:5f:a6:
21:b9:03:17:cf:8e:72:f9:d4:4d:64:4b:68:86:53:
9f:bf:6d:a5:03:ed:ff:a2:79:ee:1d:f7:3b:39:bf:
69:d4:1b:8d:21:8c:bd:f3:2e:14:11:d0:2a:2e:ac:
de:c7:d7:5d:1d:ab:40:9b:bd:7f:3b:20:80:cf:c1:
36:25:ca:be:93:a6:3f:56:08:bf:30:89:bf:d4:61:
c9:f3:bd:76:bf:bb:4f:dd:f2:4f:7e:d0:f5:09:2e:
a2:7e:27:39:55:da:5e:ad:dc:f6:68:c7:6f:d8:e8:
bf:e6:4c:41:ec:a2:94:3b:fc:0b:3a:8e:b9:9d:60:
96:13:23:9d:cf:4e:31:de:1f:bc:c3:05:e9:d6:25:
53:c9:51:8b:31:66:a3:4c:06:31:b1:9b:ae:2e:b9:
f5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:95:0F:EA:A8:5F:85:07:FD:20:AF:D9:D2:A1:8B:DD:9E:AC:2A:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ab019c9d-1d52-331c-a123-fce3d598aebd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
140.145.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:bf:1b:3e:ae:e8:0f:04:d2:f3:89:e1:66:3f:cf:e2:1e:8c:
ca:91:71:ad:d0:83:b3:9a:2a:16:28:74:1e:b7:8c:6a:9d:fd:
ae:5b:c7:2b:f2:e4:65:37:72:74:94:9c:f2:b0:d1:8f:a1:cf:
3f:99:8f:96:0d:24:5e:84:d4:1e:94:35:6e:d3:1b:77:12:ca:
88:04:ed:35:ec:86:2a:bf:74:b5:0a:c6:e2:83:34:d5:28:65:
84:1c:d4:a7:26:e9:2c:1c:d8:17:6a:43:ff:4d:9f:c4:6d:68:
b7:a1:38:18:28:21:1b:82:6b:21:da:4f:7f:1f:cf:0d:da:39:
d5:9d:99:4e:59:61:73:46:24:85:8c:52:d6:e4:88:b2:a0:e0:
39:d2:fb:55:9e:f5:75:7a:40:58:7c:f5:42:f8:3f:a3:f8:dd:
70:06:3f:34:a0:a5:44:db:b5:8a:ee:c6:25:6c:4f:04:7d:bb:
59:4d:5a:8c:6e:af:c9:6d:94:58:93:3a:78:ac:e4:1e:ac:a9:
47:e0:bd:3a:bf:3b:d3:8c:06:b9:53:94:c7:70:fd:f0:5b:73:
39:1c:52:5f:1c:ad:79:66:70:cd:fe:f8:cf:0e:93:e4:0a:ce:
a8:05:07:34:9b:89:bc:c7:22:be:2d:9a:39:39:06:65:81:3c:
8f:05:2a:f3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9XnFEK+TId31gd/AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkyMjEyMDAwMFoXDTIyMTAyODA0MDAwMFowLzEtMCsGA1UEAxMk
ZGQ2YmZlNWItMWRmNy00ZDUyLThlNmEtODExY2ViNzQ1N2M5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14KEp4WEeAVoc7gDjSXxq7HNfLpiPf7w0AED
YgRefUWA5pwnQ3TncvNo3NMYyoNHF+UjzypHXIrCAE4bLBlfthpGcSPbIrfqpJ3U
v8QvQdKK2vbeZo4SjTjh3Dokd56iIPgG6A/vX6YhuQMXz45y+dRNZEtohlOfv22l
A+3/onnuHfc7Ob9p1BuNIYy98y4UEdAqLqzex9ddHatAm71/OyCAz8E2Jcq+k6Y/
Vgi/MIm/1GHJ8712v7tP3fJPftD1CS6ific5Vdperdz2aMdv2Oi/5kxB7KKUO/wL
Oo65nWCWEyOdz04x3h+8wwXp1iVTyVGLMWajTAYxsZuuLrn1oQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGKVD+qoX4UH/SCv2dKhi92erCqGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYWIwMTljOWQtMWQ1Mi0z
MzFjLWExMjMtZmNlM2Q1OThhZWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjJEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAjr8bPq7oDwTS84nhZj/P4h6MypFxrdCDs5oqFih0HreMap39rlvHK/Lk
ZTdydJSc8rDRj6HPP5mPlg0kXoTUHpQ1btMbdxLKiATtNeyGKr90tQrG4oM01Shl
hBzUpybpLBzYF2pD/02fxG1ot6E4GCghG4JrIdpPfx/PDdo51Z2ZTllhc0YkhYxS
1uSIsqDgOdL7VZ71dXpAWHz1Qvg/o/jdcAY/NKClRNu1iu7GJWxPBH27WU1ajG6v
yW2UWJM6eKzkHqypR+C9Or8704wGuVOUx3D98FtzORxSXxyteWZwzf74zw6T5ArO
qAUHNJuJvMcivi2aOTkGZYE8jwUq8w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:05:06 2025 by rpki-client