Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/acdb0651-e482-362b-aea6-9e9639d518c8.roa
File: acdb0651-e482-362b-aea6-9e9639d518c8.roa (raw, json)
Hash identifier: tF0uNYd7+bu0i3BzexUbxNxFGa1WiUjfLk416nrOpcc=
Subject key identifier: 9B:DB:0C:99:7C:38:41:2E:DF:12:BA:DF:B7:7A:70:09:2B:3E:FC:EF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401EEDC02D340C61861C55D980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/acdb0651-e482-362b-aea6-9e9639d518c8.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 144.220.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1e:ed:c0:2d:34:0c:61:86:1c:55:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=1a9c0b22-c592-419b-abe2-ea7f277c60a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2a:ce:22:e7:a6:ef:e5:9d:49:1b:2c:3c:66:
61:20:b4:97:ea:10:e8:6f:58:34:cb:6c:66:c6:ab:
78:29:4d:78:d6:b3:31:b3:8d:35:cd:7d:67:13:59:
a8:70:6e:44:61:8a:2b:1e:13:dc:f6:d1:6b:5d:1f:
32:7a:f5:36:b2:b5:6e:04:20:10:fd:6b:81:6b:59:
d8:b8:06:3d:45:29:01:9b:87:6a:cf:fe:1e:d8:6f:
85:6a:c4:dd:1f:37:81:56:b7:cb:06:9a:28:cc:cf:
20:c5:72:38:b4:d8:11:08:c8:00:e0:62:bb:9c:4f:
e9:a0:d2:83:ba:12:92:2c:65:6b:4e:1e:79:e9:19:
4c:06:8c:12:f1:78:85:75:5c:48:56:1a:c4:b8:a1:
44:ac:80:ba:24:e0:e1:e0:9a:0c:bd:92:f6:0c:b9:
bc:fa:75:6d:dc:29:ac:42:01:8b:9a:8f:1e:09:26:
cc:f3:65:25:d0:25:d1:80:4d:04:65:7a:8e:9f:c0:
c0:b8:8e:86:78:88:99:d6:8f:d4:0b:f9:db:4b:63:
ae:95:0d:32:7d:01:2a:d4:89:8b:8a:b6:8c:b6:e5:
1d:d0:4c:ce:ef:9f:82:dc:95:72:3d:53:02:28:40:
25:f8:e1:7c:54:ce:a8:82:cb:ae:1e:d1:36:86:69:
0f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DB:0C:99:7C:38:41:2E:DF:12:BA:DF:B7:7A:70:09:2B:3E:FC:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/acdb0651-e482-362b-aea6-9e9639d518c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
144.220.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:66:00:dc:99:34:1b:31:a1:76:99:59:ad:f5:55:f9:c8:2c:
34:9e:83:75:3b:2b:1f:73:32:c2:40:d1:5e:94:ab:03:0a:6d:
ef:f9:90:51:3a:49:8b:66:44:fd:99:05:88:e7:ad:8a:ed:5c:
b2:1d:26:cb:ca:78:41:0d:fc:1a:e8:5d:aa:7a:3e:8f:4f:d3:
31:96:42:98:b5:af:ec:88:ce:5b:ef:ac:1c:c4:c3:6b:5d:d8:
96:ae:10:a1:dd:bb:b5:d2:83:61:b4:c2:15:48:dc:bc:d9:b0:
40:2e:ed:21:01:45:cb:ef:af:e3:59:14:7c:bd:d7:07:b9:b7:
dc:6d:a0:76:02:e5:67:7f:05:4d:3e:9a:8a:0e:1e:c8:85:3a:
9b:ec:98:f6:5c:12:3c:12:d9:78:5b:09:b3:c7:c5:8f:a3:05:
31:c6:3d:41:78:32:82:ba:92:6d:57:2d:f1:44:25:31:cf:33:
61:69:da:53:9c:3a:74:47:b9:56:08:86:46:ef:ed:10:ba:6b:
30:40:0e:f4:7d:94:d6:59:d3:78:7e:a3:30:7d:7c:85:b3:49:
d7:1b:9e:23:d3:18:8a:4c:78:87:52:23:33:86:53:5e:68:8b:
25:d4:7f:07:41:50:0a:da:17:c9:6f:2c:04:a3:3f:15:04:1e:
93:0e:90:e5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAe7cAtNAxhhhxV2YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIwMzEyMDAwMFoXDTIzMDEwODA1MDAwMFowLzEtMCsGA1UEAxMk
MWE5YzBiMjItYzU5Mi00MTliLWFiZTItZWE3ZjI3N2M2MGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCrOIuem7+WdSRssPGZhILSX6hDob1g0y2xm
xqt4KU141rMxs401zX1nE1mocG5EYYorHhPc9tFrXR8yevU2srVuBCAQ/WuBa1nY
uAY9RSkBm4dqz/4e2G+FasTdHzeBVrfLBpoozM8gxXI4tNgRCMgA4GK7nE/poNKD
uhKSLGVrTh556RlMBowS8XiFdVxIVhrEuKFErIC6JODh4JoMvZL2DLm8+nVt3Cms
QgGLmo8eCSbM82Ul0CXRgE0EZXqOn8DAuI6GeIiZ1o/UC/nbS2OulQ0yfQEq1ImL
iraMtuUd0EzO75+C3JVyPVMCKEAl+OF8VM6ogsuuHtE2hmkPzwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJvbDJl8OEEu3xK637d6cAkrPvzvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYWNkYjA2NTEtZTQ4Mi0z
NjJiLWFlYTYtOWU5NjM5ZDUxOGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkNwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEALmYA3Jk0GzGhdplZrfVV+cgsNJ6DdTsrH3MywkDRXpSrAwpt7/mQUTpJ
i2ZE/ZkFiOetiu1csh0my8p4QQ38Guhdqno+j0/TMZZCmLWv7IjOW++sHMTDa13Y
lq4Qod27tdKDYbTCFUjcvNmwQC7tIQFFy++v41kUfL3XB7m33G2gdgLlZ38FTT6a
ig4eyIU6m+yY9lwSPBLZeFsJs8fFj6MFMcY9QXgygrqSbVct8UQlMc8zYWnaU5w6
dEe5VgiGRu/tELprMEAO9H2U1lnTeH6jMH18hbNJ1xueI9MYikx4h1IjM4ZTXmiL
JdR/B0FQCtoXyW8sBKM/FQQekw6Q5Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:53:58 2025 by rpki-client