Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b5e463b1-82a5-3207-99d7-cb61d1badec7.roa
File: b5e463b1-82a5-3207-99d7-cb61d1badec7.roa (raw, json)
Hash identifier: OnYcfHth68o9+MejX6CWK2BXAYpEp5r7BAlxCQxE7tA=
Subject key identifier: A7:4D:0C:EF:05:85:E7:41:A0:D2:75:AA:6E:47:40:5C:90:AA:1D:6E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858408F7133E778371150A1B50C00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b5e463b1-82a5-3207-99d7-cb61d1badec7.roa
Signing time: Thu 12 Jan 2023 12:00:00 +0000
ROA not before: Thu 12 Jan 2023 12:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 137.114.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8f:71:33:e7:78:37:11:50:a1:b5:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 12 12:00:00 2023 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=bb459b5e-6e11-427a-9610-89e93cecb470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e2:9b:fc:eb:b9:b7:f7:12:21:e3:39:39:66:
6f:e7:88:70:51:ab:64:d9:51:fc:ae:07:10:60:28:
ef:ac:32:6d:d5:c2:cc:77:17:3e:16:00:4b:b1:e7:
e2:83:a1:5c:de:37:2a:2e:cb:fc:a4:08:4b:ed:3f:
6b:1a:90:c0:4e:12:a6:d6:a2:22:5f:69:33:51:6c:
ef:d2:cb:21:97:e4:4c:37:1c:73:e8:89:37:d9:49:
8a:e2:c9:5d:ca:29:df:37:0c:44:bb:f9:10:7b:98:
d0:9f:ca:0a:91:1c:69:8e:89:e3:9f:7e:d6:31:09:
8e:ac:d5:79:1b:5b:38:e8:55:56:d6:4c:a3:3a:b7:
8c:1f:30:2c:70:5f:dd:7e:50:a6:bd:0a:5f:5d:0e:
c9:81:51:a3:82:df:7e:0c:5e:68:33:c8:8b:2c:63:
78:61:80:a0:5f:3c:e2:a1:80:51:d6:8d:d1:44:58:
e1:34:7d:b6:7a:9c:2d:4f:5b:9d:2d:77:3f:c6:ce:
3e:0f:54:62:2b:ed:0c:38:4c:2f:93:bf:d0:b8:69:
c3:80:49:42:43:8d:9e:34:d9:18:27:ae:43:34:5b:
0f:4f:31:91:00:89:e9:51:9b:fe:88:86:ad:75:c0:
f0:b7:7f:24:9f:ef:28:6c:80:98:08:d1:a4:c6:4b:
dd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4D:0C:EF:05:85:E7:41:A0:D2:75:AA:6E:47:40:5C:90:AA:1D:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b5e463b1-82a5-3207-99d7-cb61d1badec7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
137.114.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:0e:bd:f4:c0:76:7b:29:2a:41:2a:df:39:70:02:f6:aa:6b:
71:2e:3f:a7:1a:c1:10:1c:34:4a:e2:31:55:6f:e5:ff:03:35:
09:c4:20:91:11:24:91:50:a5:5e:a3:b5:fb:c5:c3:4d:aa:4f:
d1:d5:91:6e:69:63:4a:36:fe:90:83:79:7e:1b:9f:d5:d5:34:
03:ac:ee:37:86:ba:29:a2:a4:d4:a5:01:4b:ab:65:e5:28:7f:
4e:60:4b:57:fb:83:7b:b1:2a:97:03:4b:9a:3d:b4:e9:7e:72:
81:e8:a8:70:64:7a:f6:ff:96:01:7e:7a:3b:86:bb:a4:d9:1f:
6b:2e:bf:06:e7:a8:0f:8d:9a:e0:ba:fa:28:18:ef:b3:42:fb:
8d:77:72:9e:48:81:f0:10:24:ad:13:4e:3b:f2:6c:d6:73:63:
da:12:7e:92:e0:e4:0d:92:81:17:03:7d:68:d9:8d:79:61:b4:
61:39:f0:18:6e:2d:17:5e:a6:1e:bb:f3:07:c8:68:11:d8:8b:
52:75:af:61:1e:82:d7:47:b8:2f:c6:d4:0d:99:ef:67:99:98:
84:ec:20:f8:57:64:cd:da:f0:bb:af:43:19:b3:44:07:e3:33:
38:2f:fb:64:4d:1c:21:3f:5c:11:a9:e7:35:6a:c0:5c:21:30:
86:44:00:f5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECPcTPneDcRUKG1DAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExMjEyMDAwMFoXDTIzMDIxNzA1MDAwMFowLzEtMCsGA1UEAxMk
YmI0NTliNWUtNmUxMS00MjdhLTk2MTAtODllOTNjZWNiNDcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+Kb/Ou5t/cSIeM5OWZv54hwUatk2VH8rgcQ
YCjvrDJt1cLMdxc+FgBLsefig6Fc3jcqLsv8pAhL7T9rGpDAThKm1qIiX2kzUWzv
0sshl+RMNxxz6Ik32UmK4sldyinfNwxEu/kQe5jQn8oKkRxpjonjn37WMQmOrNV5
G1s46FVW1kyjOreMHzAscF/dflCmvQpfXQ7JgVGjgt9+DF5oM8iLLGN4YYCgXzzi
oYBR1o3RRFjhNH22epwtT1udLXc/xs4+D1RiK+0MOEwvk7/QuGnDgElCQ42eNNkY
J65DNFsPTzGRAInpUZv+iIatdcDwt38kn+8obICYCNGkxkvdhQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKdNDO8FhedBoNJ1qm5HQFyQqh1uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYjVlNDYzYjEtODJhNS0z
MjA3LTk5ZDctY2I2MWQxYmFkZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiXIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEARQ699MB2eykqQSrfOXAC9qprcS4/pxrBEBw0SuIxVW/l/wM1CcQgkREk
kVClXqO1+8XDTapP0dWRbmljSjb+kIN5fhuf1dU0A6zuN4a6KaKk1KUBS6tl5Sh/
TmBLV/uDe7EqlwNLmj206X5ygeiocGR69v+WAX56O4a7pNkfay6/BueoD42a4Lr6
KBjvs0L7jXdynkiB8BAkrRNOO/Js1nNj2hJ+kuDkDZKBFwN9aNmNeWG0YTnwGG4t
F16mHrvzB8hoEdiLUnWvYR6C10e4L8bUDZnvZ5mYhOwg+Fdkzdrwu69DGbNEB+Mz
OC/7ZE0cIT9cEannNWrAXCEwhkQA9Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:50:22 2025 by rpki-client