Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cafc6e1d-807f-3b65-9360-a207d80c2d04.roa
File: cafc6e1d-807f-3b65-9360-a207d80c2d04.roa (raw, json)
Hash identifier: +qQUAwwiXApYVwW5lXADxAWRPYarxp7PEOvOvQF6ESQ=
Subject key identifier: D7:80:DA:5F:C8:60:B9:2D:59:14:B0:3C:7F:18:E0:4F:BE:A8:10:71
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E933ABB2A1BDFA7E23BAFFD40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cafc6e1d-807f-3b65-9360-a207d80c2d04.roa
Signing time: Thu 14 Jul 2022 12:00:00 +0000
ROA not before: Thu 14 Jul 2022 12:00:00 +0000
ROA not after: Fri 19 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 134.64.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:93:3a:bb:2a:1b:df:a7:e2:3b:af:fd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 14 12:00:00 2022 GMT
Not After : Aug 19 04:00:00 2022 GMT
Subject: CN=7e3b54b0-6c90-40e6-b303-886af6efcb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:56:d2:00:35:5c:fa:a9:52:66:08:a9:ce:b0:
e3:8e:90:d3:70:8d:bf:1d:22:9b:38:e9:59:9b:29:
21:41:41:48:d5:e3:ce:bf:f3:5b:58:68:2c:a5:44:
9d:2e:b9:84:51:ad:c4:98:b6:c7:ad:46:55:ea:ca:
f3:e0:1b:06:51:5c:4b:0a:e6:5b:6d:c7:8c:8d:74:
9d:28:e2:13:61:a1:d2:40:68:75:32:f4:3d:25:c9:
b1:fc:fe:19:12:59:6d:17:59:ec:de:df:30:01:55:
0c:c2:b2:2d:20:8f:3b:6f:89:1d:70:ca:22:b9:88:
03:96:f9:f8:c5:da:fb:27:05:d4:b5:c2:38:05:e7:
d7:24:f8:ee:e8:7f:4b:3d:ea:f9:2e:e5:8a:73:0e:
76:b7:ad:b5:8f:60:80:1e:09:e0:63:c8:ae:30:56:
29:e9:44:5c:78:a1:ff:70:48:bb:39:bf:6d:6e:4f:
93:31:76:62:62:27:65:9c:7b:da:d4:29:80:3c:14:
2f:1b:6c:0d:e4:60:8f:bc:04:60:ee:6f:21:dc:32:
91:56:ce:6f:4c:b2:07:63:8c:a7:20:25:e6:a3:8e:
a0:52:79:84:21:62:cf:38:1c:03:aa:1a:fe:5c:14:
4d:43:75:f5:4c:72:b1:56:1a:8b:fd:be:60:6a:89:
7f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:80:DA:5F:C8:60:B9:2D:59:14:B0:3C:7F:18:E0:4F:BE:A8:10:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cafc6e1d-807f-3b65-9360-a207d80c2d04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
134.64.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:1c:12:c3:10:7e:a0:f1:2b:b7:05:46:ad:e3:b2:31:b5:de:
2d:47:05:8c:23:00:cc:9d:b2:7d:3f:38:c7:48:b3:56:fe:32:
0e:76:32:d3:13:ad:ea:80:19:e3:dd:4d:c6:af:ee:fc:44:c2:
96:2f:b8:2c:8b:69:d1:53:00:70:d5:4c:6c:0c:e1:73:c8:9f:
36:4d:90:ba:92:11:e4:c7:c1:7c:ef:62:83:dd:05:91:fb:4c:
1a:9a:8b:1c:41:fd:fa:4b:57:f2:8d:6d:7a:27:97:10:92:a6:
9f:81:81:e7:2f:6d:a5:c8:f8:db:5a:2b:6d:d2:83:88:46:fe:
1a:44:6a:1e:92:80:e2:00:fe:c2:52:55:8b:2a:28:07:d5:74:
ca:2a:d0:47:96:96:9d:d7:a6:e4:fc:96:50:21:e7:e4:1b:03:
0e:cc:02:b4:de:13:b0:ff:7e:ff:d6:8b:d4:26:6b:ab:52:d4:
67:7d:67:aa:95:be:28:35:a2:ca:52:1e:06:e3:04:b4:43:55:
72:ea:84:32:55:c6:7b:28:f2:48:da:d3:34:23:ac:48:d3:b6:
92:16:0d:ad:4f:77:f1:a4:43:8f:84:ae:54:ac:32:89:47:54:
27:3a:21:14:5e:2e:a2:7c:95:c0:e9:6b:ba:fe:09:16:44:43:
ca:39:9d:06
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6TOrsqG9+n4juv/UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcxNDEyMDAwMFoXDTIyMDgxOTA0MDAwMFowLzEtMCsGA1UEAxMk
N2UzYjU0YjAtNmM5MC00MGU2LWIzMDMtODg2YWY2ZWZjYjFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolbSADVc+qlSZgipzrDjjpDTcI2/HSKbOOlZ
mykhQUFI1ePOv/NbWGgspUSdLrmEUa3EmLbHrUZV6srz4BsGUVxLCuZbbceMjXSd
KOITYaHSQGh1MvQ9Jcmx/P4ZElltF1ns3t8wAVUMwrItII87b4kdcMoiuYgDlvn4
xdr7JwXUtcI4BefXJPju6H9LPer5LuWKcw52t621j2CAHgngY8iuMFYp6URceKH/
cEi7Ob9tbk+TMXZiYidlnHva1CmAPBQvG2wN5GCPvARg7m8h3DKRVs5vTLIHY4yn
ICXmo46gUnmEIWLPOBwDqhr+XBRNQ3X1THKxVhqL/b5gaol/jQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNeA2l/IYLktWRSwPH8Y4E++qBBxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvY2FmYzZlMWQtODA3Zi0z
YjY1LTkzNjAtYTIwN2Q4MGMyZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhkAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEABBwSwxB+oPErtwVGreOyMbXeLUcFjCMAzJ2yfT84x0izVv4yDnYy0xOt
6oAZ491Nxq/u/ETCli+4LItp0VMAcNVMbAzhc8ifNk2QupIR5MfBfO9ig90FkftM
GpqLHEH9+ktX8o1teieXEJKmn4GB5y9tpcj421orbdKDiEb+GkRqHpKA4gD+wlJV
iyooB9V0yirQR5aWndem5PyWUCHn5BsDDswCtN4TsP9+/9aL1CZrq1LUZ31nqpW+
KDWiylIeBuMEtENVcuqEMlXGeyjySNrTNCOsSNO2khYNrU938aRDj4SuVKwyiUdU
JzohFF4uonyVwOlruv4JFkRDyjmdBg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:14:00 2025 by rpki-client