Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b2657a7a-6a66-36a9-923f-00a9c6d52188.roa
File: b2657a7a-6a66-36a9-923f-00a9c6d52188.roa (raw, json)
Hash identifier: gId1nMwl6JwbnSzslLvv6XFTYuaZmAf4YMox5xfK4MY=
Subject key identifier: 97:96:9C:B1:98:27:9C:78:60:6B:55:15:7A:3B:F5:10:93:8F:F4:01
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EEAE88FCC96BC022A591E69C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b2657a7a-6a66-36a9-923f-00a9c6d52188.roa
Signing time: Sun 14 Aug 2022 12:00:00 +0000
ROA not before: Sun 14 Aug 2022 12:00:00 +0000
ROA not after: Mon 19 Sep 2022 04:00:00 +0000
asID: 7224
IP address blocks: 3.33.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:ea:e8:8f:cc:96:bc:02:2a:59:1e:69:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 14 12:00:00 2022 GMT
Not After : Sep 19 04:00:00 2022 GMT
Subject: CN=0af2ba07-037d-431b-bbf5-7ee7a3b65c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:34:fb:65:7c:b8:fb:8a:3b:09:3a:b7:c3:
37:5b:e2:3d:b0:e1:27:c8:26:51:9c:28:3b:88:e1:
c4:01:d5:41:85:66:b7:85:33:7e:c9:96:23:1c:be:
86:9f:7e:e6:d7:74:91:6c:2e:0e:a7:37:10:2d:98:
61:c4:b9:8f:9c:46:e1:b5:68:c3:69:da:95:0a:6d:
64:1c:40:f8:ce:11:50:f3:77:8a:72:1c:c4:3b:95:
8b:86:49:70:0f:8d:9e:da:f7:fd:ff:00:da:19:b2:
b5:6e:aa:3b:73:98:08:b4:c8:e5:a4:a9:22:a4:17:
63:cf:a3:5b:f0:cf:d9:66:72:38:84:05:99:44:0e:
20:f9:55:17:31:f8:91:46:99:a6:4f:0b:22:41:a3:
d9:24:6f:ac:f2:b1:bd:28:34:db:de:21:3a:23:d9:
de:00:c0:0c:71:b6:bd:9f:26:16:6d:e3:9d:c8:19:
76:52:a9:e8:19:8e:c4:cd:f4:23:34:c0:18:fb:75:
44:e1:d5:6f:a2:15:a9:53:ec:89:dc:40:a9:97:8c:
30:77:ae:72:ff:43:15:6c:b6:3d:3c:4c:e4:4d:2d:
70:9e:89:48:96:25:68:49:0e:07:8e:ce:47:a9:6d:
e9:90:51:5e:d0:24:54:8f:f7:ca:8d:08:19:02:8e:
5b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:96:9C:B1:98:27:9C:78:60:6B:55:15:7A:3B:F5:10:93:8F:F4:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b2657a7a-6a66-36a9-923f-00a9c6d52188.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.33.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:7c:e9:88:1d:08:e5:55:19:3d:3e:3a:41:40:67:e6:71:03:
64:93:fc:e4:50:4e:f7:d4:72:98:52:51:0f:e8:42:f6:40:5e:
43:99:0d:60:6b:fd:ef:8e:76:e2:b4:33:c9:a8:d3:8e:53:d4:
e0:a8:82:43:7e:b3:a6:d7:48:f3:8e:e0:86:2a:0a:67:16:04:
27:80:4c:4e:4a:82:4d:dc:94:c9:d5:34:1b:95:da:1e:17:1a:
82:d6:89:a1:f4:7e:31:24:f8:d1:6d:fb:68:08:7a:1d:c8:d9:
4a:f4:c3:a5:3a:2c:fb:17:12:01:4c:5a:51:83:f4:3c:b6:07:
16:2e:ce:db:e6:cc:89:25:75:d1:8a:ad:6f:6d:29:58:0d:99:
1f:fc:b5:22:55:c8:8e:4d:54:2b:b7:d1:b7:02:fd:d9:1a:1d:
5a:ff:d7:dd:07:f8:86:60:8e:cd:a0:76:60:e1:b4:b4:35:c2:
ec:37:23:dd:a6:08:70:cc:c8:a8:8b:81:07:aa:43:a0:7c:ad:
ff:af:2b:1e:be:f1:98:ca:94:84:35:09:53:82:69:56:b9:d6:
a4:91:db:39:3b:40:38:53:e4:b3:d8:c5:39:ab:1b:70:ad:a3:
4e:a5:d0:c1:e6:8d:cd:e4:78:a5:1d:f7:9f:25:8a:c9:e9:e2:
e8:10:4c:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD7q6I/MlrwCKlkeacAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgxNDEyMDAwMFoXDTIyMDkxOTA0MDAwMFowLzEtMCsGA1UEAxMk
MGFmMmJhMDctMDM3ZC00MzFiLWJiZjUtN2VlN2EzYjY1YzBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+A0+2V8uPuKOwk6t8M3W+I9sOEnyCZRnCg7
iOHEAdVBhWa3hTN+yZYjHL6Gn37m13SRbC4OpzcQLZhhxLmPnEbhtWjDadqVCm1k
HED4zhFQ83eKchzEO5WLhklwD42e2vf9/wDaGbK1bqo7c5gItMjlpKkipBdjz6Nb
8M/ZZnI4hAWZRA4g+VUXMfiRRpmmTwsiQaPZJG+s8rG9KDTb3iE6I9neAMAMcba9
nyYWbeOdyBl2UqnoGY7EzfQjNMAY+3VE4dVvohWpU+yJ3ECpl4wwd65y/0MVbLY9
PEzkTS1wnolIliVoSQ4Hjs5HqW3pkFFe0CRUj/fKjQgZAo5bKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJeWnLGYJ5x4YGtVFXo79RCTj/QBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYjI2NTdhN2EtNmE2Ni0z
NmE5LTkyM2YtMDBhOWM2ZDUyMTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEAyEwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG186YgdCOVVGT0+OkFAZ+ZxA2ST/ORQTvfUcphSUQ/oQvZAXkOZDWBr
/e+OduK0M8mo045T1OCogkN+s6bXSPOO4IYqCmcWBCeATE5Kgk3clMnVNBuV2h4X
GoLWiaH0fjEk+NFt+2gIeh3I2Ur0w6U6LPsXEgFMWlGD9Dy2BxYuztvmzIklddGK
rW9tKVgNmR/8tSJVyI5NVCu30bcC/dkaHVr/190H+IZgjs2gdmDhtLQ1wuw3I92m
CHDMyKiLgQeqQ6B8rf+vKx6+8ZjKlIQ1CVOCaVa51qSR2zk7QDhT5LPYxTmrG3Ct
o06l0MHmjc3keKUd958lisnp4ugQTDY=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:36:42 2025 by rpki-client