Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c772bdb8-c297-30ea-afd4-fc397556f813.roa
File: c772bdb8-c297-30ea-afd4-fc397556f813.roa (raw, json)
Hash identifier: oJj60q8tr/zDX3KqeK9aPwQlsE+6HwvLydPWzdSDmtA=
Subject key identifier: 3E:48:07:DB:92:DD:25:3D:64:9E:64:D8:25:BF:06:54:0F:7C:84:13
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E3E5F8840E93B4B5DC9462E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c772bdb8-c297-30ea-afd4-fc397556f813.roa
Signing time: Tue 14 Jun 2022 12:00:00 +0000
ROA not before: Tue 14 Jun 2022 12:00:00 +0000
ROA not after: Wed 20 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 3.64.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:3e:5f:88:40:e9:3b:4b:5d:c9:46:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 14 12:00:00 2022 GMT
Not After : Jul 20 04:00:00 2022 GMT
Subject: CN=e0d7905e-56a1-49ca-85d5-8736874a4bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9d:f8:b4:26:a5:bc:11:c9:90:02:3b:3a:4a:
e4:48:f3:1b:ca:fd:65:3b:0f:91:5f:8f:9f:b4:ac:
4f:c9:7b:49:c8:71:10:8c:f1:09:dd:94:09:35:c7:
0a:38:48:ca:b4:29:5b:76:ab:00:5a:10:93:b3:7f:
8a:ca:da:89:42:cd:a4:ed:79:ba:94:0e:03:5b:66:
8e:27:73:a9:74:5b:a6:32:fd:ff:b2:09:49:f8:5c:
78:f8:f2:f2:c6:bc:ba:a9:33:6c:4f:48:9d:82:a1:
75:64:32:2d:93:c7:b4:d2:b1:f7:f4:e4:c1:3e:97:
e6:8e:15:b2:22:f2:02:ef:87:ba:7f:b0:ab:be:d5:
3b:e2:b4:a9:55:54:52:91:8b:42:b2:65:b9:40:30:
9b:4c:65:e4:db:3f:8b:f4:b8:18:04:c5:c8:ee:49:
95:e7:2a:15:a4:8c:4f:2a:66:45:ac:22:9e:57:3f:
f4:3d:f0:93:df:f9:67:fb:3a:b1:2b:ee:45:19:59:
b5:07:7c:75:7e:a9:59:d9:36:ba:0b:89:0d:d0:73:
1f:e3:70:ec:ff:d0:36:90:85:59:5a:91:9a:18:a6:
27:9d:d3:32:e3:68:52:05:91:bc:a5:81:e5:03:25:
e4:e2:b0:30:54:2c:37:b2:fc:f2:0c:de:06:fc:b4:
32:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:48:07:DB:92:DD:25:3D:64:9E:64:D8:25:BF:06:54:0F:7C:84:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c772bdb8-c297-30ea-afd4-fc397556f813.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.64.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:bb:fe:ae:9b:8f:1e:3f:f1:d4:38:0b:45:84:4f:a5:5e:f7:
d1:56:66:82:b8:d1:9a:92:17:41:61:b7:33:09:56:4d:44:d7:
97:25:0c:53:79:ea:b5:8c:c4:23:c9:c9:08:97:fd:74:78:bb:
42:a6:0b:61:40:58:b7:7e:c3:b2:da:0b:3e:77:69:f1:9e:3a:
9c:7b:60:8d:29:e4:f2:5a:9e:56:6d:e9:db:65:0f:84:c7:e8:
bd:9b:0d:2d:5d:32:50:6b:c4:3d:4e:e1:94:30:31:59:63:67:
a4:50:32:4f:aa:8d:2c:53:b7:78:29:51:0c:92:a7:f7:1e:88:
c1:5c:ac:db:5d:a9:45:97:a9:76:4d:4b:f2:d9:3a:46:2c:8c:
a8:35:8e:db:5a:2f:6c:af:89:5b:85:05:33:99:4e:26:78:4b:
e8:d2:b1:ca:7e:91:e1:1f:67:35:67:e5:bf:8f:58:78:71:02:
88:3c:f5:09:fb:b1:63:20:34:98:62:5b:13:e8:ea:32:e9:cf:
1d:06:87:0e:21:a3:4d:03:9d:31:ed:a3:0f:76:51:32:65:37:
10:7f:01:9c:ea:da:5b:1b:3f:24:ba:61:83:44:b9:48:b5:a6:
33:58:f8:37:b9:72:bb:c6:8c:72:41:9b:7a:6a:12:51:b0:8c:
68:4e:97:84
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4+X4hA6TtLXclGLoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYxNDEyMDAwMFoXDTIyMDcyMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZTBkNzkwNWUtNTZhMS00OWNhLTg1ZDUtODczNjg3NGE0YmY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ34tCalvBHJkAI7OkrkSPMbyv1lOw+RX4+f
tKxPyXtJyHEQjPEJ3ZQJNccKOEjKtClbdqsAWhCTs3+KytqJQs2k7Xm6lA4DW2aO
J3OpdFumMv3/sglJ+Fx4+PLyxry6qTNsT0idgqF1ZDItk8e00rH39OTBPpfmjhWy
IvIC74e6f7CrvtU74rSpVVRSkYtCsmW5QDCbTGXk2z+L9LgYBMXI7kmV5yoVpIxP
KmZFrCKeVz/0PfCT3/ln+zqxK+5FGVm1B3x1fqlZ2Ta6C4kN0HMf43Ds/9A2kIVZ
WpGaGKYnndMy42hSBZG8pYHlAyXk4rAwVCw3svzyDN4G/LQy3wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFD5IB9uS3SU9ZJ5k2CW/BlQPfIQTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYzc3MmJkYjgtYzI5Ny0z
MGVhLWFmZDQtZmMzOTc1NTZmODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMGA0AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEArLv+rpuPHj/x1DgLRYRPpV730VZmgrjRmpIXQWG3MwlWTUTXlyUMU3nq
tYzEI8nJCJf9dHi7QqYLYUBYt37DstoLPndp8Z46nHtgjSnk8lqeVm3p22UPhMfo
vZsNLV0yUGvEPU7hlDAxWWNnpFAyT6qNLFO3eClRDJKn9x6IwVys212pRZepdk1L
8tk6RiyMqDWO21ovbK+JW4UFM5lOJnhL6NKxyn6R4R9nNWflv49YeHECiDz1Cfux
YyA0mGJbE+jqMunPHQaHDiGjTQOdMe2jD3ZRMmU3EH8BnOraWxs/JLphg0S5SLWm
M1j4N7lyu8aMckGbemoSUbCMaE6XhA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:20:01 2025 by rpki-client