Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3f7e444-9d17-370c-8db3-e2eda5d32adb.roa
File: c3f7e444-9d17-370c-8db3-e2eda5d32adb.roa (raw, json)
Hash identifier: grD37Ovg5AoreuCl3QFfe6nVerVw+9Hs11meMW9t/OE=
Subject key identifier: 04:A5:6D:F3:61:A5:66:E0:38:D8:ED:C3:AE:2D:5E:89:B4:59:13:8D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C9668B2F5058B2BF00B69D580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3f7e444-9d17-370c-8db3-e2eda5d32adb.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 52.144.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:68:b2:f5:05:8b:2b:f0:0b:69:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=9a65df3f-ab9a-4f8d-bf47-ab30c2308774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7a:04:db:7f:f8:7a:5c:b6:f2:7a:dc:07:1c:
9e:c8:93:3b:29:0b:8b:d0:00:0f:52:18:ae:1d:58:
38:73:21:98:d0:97:93:e7:6e:33:eb:d3:63:0c:30:
53:e0:f8:ea:86:44:99:fc:7f:79:e4:42:d1:7a:cb:
7b:76:ef:ca:b9:e9:a2:bf:fe:da:4c:8d:bb:b4:2d:
2e:22:5f:2a:f0:7e:6d:4c:93:9c:c0:a6:42:2f:20:
8c:f3:4c:a7:40:78:f8:4f:b7:fd:58:00:63:bb:eb:
3f:e7:94:16:0d:3d:9e:f5:4f:05:56:b5:f2:96:a8:
33:5e:64:82:dc:b4:35:e5:28:90:94:4b:23:a1:8f:
22:96:4b:b3:be:ae:96:d2:5f:5b:ec:8f:65:76:f2:
f1:63:8f:4f:56:a0:02:01:6b:f5:65:96:04:ec:91:
77:73:f3:a1:fd:5c:3b:0f:ef:79:50:e3:13:72:83:
bf:e7:43:f5:76:59:54:13:f0:95:1c:a1:b6:c4:55:
1a:45:dc:b9:bf:c1:54:b4:5f:3b:81:3f:7a:be:23:
ff:32:66:8f:12:5e:b9:f1:d7:8c:31:1b:57:83:54:
d7:9e:ac:6e:33:b7:0e:61:e9:32:00:8f:cf:48:e7:
98:27:c4:05:63:a1:23:47:4f:29:2c:51:8d:54:34:
57:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A5:6D:F3:61:A5:66:E0:38:D8:ED:C3:AE:2D:5E:89:B4:59:13:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3f7e444-9d17-370c-8db3-e2eda5d32adb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.144.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:70:73:b0:ff:73:06:5d:77:5a:13:49:74:9e:b2:bf:f9:ca:
64:b1:3d:88:e0:d9:93:01:c7:7f:94:c0:a9:2b:3b:b2:cd:52:
82:ed:cb:56:3c:a0:14:b1:8a:82:a4:e8:62:76:67:5f:1b:52:
fc:d7:e8:26:80:29:28:8e:10:9c:43:d3:6b:20:93:d4:bb:2a:
97:f9:14:14:1b:05:9c:59:86:79:0a:af:7b:11:a7:b4:09:1a:
ac:a1:ac:72:fa:fd:06:c2:d4:26:97:ba:d4:db:b0:7b:54:d2:
20:0a:6f:ab:17:49:12:82:1c:33:4c:46:a3:cf:d6:24:83:b0:
09:68:62:0d:11:75:1a:34:d1:36:17:37:42:8e:62:d1:51:2e:
5a:5a:11:1b:87:d3:6b:1f:77:e1:6f:19:19:2b:a7:9c:97:1f:
82:61:3d:c9:04:33:0c:bf:31:3e:a3:dc:d4:a7:9a:b6:7b:48:
8c:b4:87:1a:90:b6:23:b6:09:6c:1d:f2:e2:56:18:13:5b:08:
c1:82:eb:41:03:72:14:17:eb:2e:77:ad:91:b4:ab:43:fa:f3:
33:5d:9a:0e:9f:95:aa:28:1f:32:0b:2c:83:55:6e:17:4a:e7:
fb:7e:8b:9f:ec:ae:4c:b3:d3:d7:1f:94:5b:f8:b2:00:f7:74:
81:07:01:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDyWaLL1BYsr8Atp1YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDExNDA1MDAwMFoXDTIyMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
OWE2NWRmM2YtYWI5YS00ZjhkLWJmNDctYWIzMGMyMzA4Nzc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XoE23/4ely28nrcBxyeyJM7KQuL0AAPUhiu
HVg4cyGY0JeT524z69NjDDBT4PjqhkSZ/H955ELRest7du/Kuemiv/7aTI27tC0u
Il8q8H5tTJOcwKZCLyCM80ynQHj4T7f9WABju+s/55QWDT2e9U8FVrXylqgzXmSC
3LQ15SiQlEsjoY8ilkuzvq6W0l9b7I9ldvLxY49PVqACAWv1ZZYE7JF3c/Oh/Vw7
D+95UOMTcoO/50P1dllUE/CVHKG2xFUaRdy5v8FUtF87gT96viP/MmaPEl658deM
MRtXg1TXnqxuM7cOYekyAI/PSOeYJ8QFY6EjR08pLFGNVDRXmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFASlbfNhpWbgONjtw64tXom0WRONMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYzNmN2U0NDQtOWQxNy0z
NzBjLThkYjMtZTJlZGE1ZDMyYWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHNJCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGhwc7D/cwZdd1oTSXSesr/5ymSxPYjg2ZMBx3+UwKkrO7LNUoLty1Y8
oBSxioKk6GJ2Z18bUvzX6CaAKSiOEJxD02sgk9S7Kpf5FBQbBZxZhnkKr3sRp7QJ
GqyhrHL6/QbC1CaXutTbsHtU0iAKb6sXSRKCHDNMRqPP1iSDsAloYg0RdRo00TYX
N0KOYtFRLlpaERuH02sfd+FvGRkrp5yXH4JhPckEMwy/MT6j3NSnmrZ7SIy0hxqQ
tiO2CWwd8uJWGBNbCMGC60EDchQX6y53rZG0q0P68zNdmg6flaooHzILLINVbhdK
5/t+i5/srkyz09cflFv4sgD3dIEHATY=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:52:50 2025 by rpki-client