Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf0cbaa7-43eb-32b2-9eb9-735fe128b503.roa
File: cf0cbaa7-43eb-32b2-9eb9-735fe128b503.roa (raw, json)
Hash identifier: rcJ8bWjZlqb2DxdcmPW3WrwJLAghoDXfza3hw/dz7LY=
Subject key identifier: 96:D0:DF:10:F6:0A:50:70:4E:67:ED:42:88:FA:FF:7D:6C:DC:27:17
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FC53EB4CE4033B8472B4244C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf0cbaa7-43eb-32b2-9eb9-735fe128b503.roa
Signing time: Tue 01 Nov 2022 12:00:00 +0000
ROA not before: Tue 01 Nov 2022 12:00:00 +0000
ROA not after: Wed 07 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 146.65.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c5:3e:b4:ce:40:33:b8:47:2b:42:44:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 1 12:00:00 2022 GMT
Not After : Dec 7 05:00:00 2022 GMT
Subject: CN=aa40ed8e-ae10-461e-a0a1-1bdfe77d7c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:db:7e:b7:3b:87:4a:94:a0:cd:42:6f:a6:
de:85:bc:54:e0:6f:05:0b:f2:ff:b2:8b:88:fc:9b:
f2:ad:1d:cf:54:ec:b4:3b:90:49:8e:c4:37:ff:de:
f3:e0:38:ad:86:50:b1:7d:1f:65:c4:91:57:5d:3b:
81:3d:dc:ca:67:90:8a:99:3e:9e:6f:9e:a8:b9:23:
ce:e5:67:65:71:50:dc:aa:7c:0b:27:4a:d0:bb:55:
6c:bb:18:08:fd:4a:37:83:be:1e:56:14:06:db:2b:
0c:10:e5:e8:19:a7:69:05:32:83:80:c6:a2:02:89:
af:f1:d7:1e:98:7c:44:f7:5c:78:b7:ea:57:00:03:
6e:13:ec:ea:13:e0:02:7b:c3:47:a9:00:4e:83:f9:
60:01:6f:72:79:d0:0f:3d:3b:0f:11:22:e4:a2:0a:
88:1e:db:f4:0b:6d:eb:10:a9:82:09:13:9b:93:0e:
a3:4d:c0:a2:f5:d9:3e:da:66:b8:d8:b2:8c:87:96:
ce:69:bc:91:0d:01:2c:db:7b:e6:9b:94:ae:19:7e:
d6:a8:41:0d:0d:00:b9:2d:b8:26:6c:78:e6:14:d6:
8c:6e:68:35:22:a2:c2:83:c4:09:04:69:61:af:33:
bd:2c:4f:83:f3:74:df:aa:a8:48:af:0c:e6:01:c9:
9c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D0:DF:10:F6:0A:50:70:4E:67:ED:42:88:FA:FF:7D:6C:DC:27:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf0cbaa7-43eb-32b2-9eb9-735fe128b503.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
146.65.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:34:ef:11:d6:35:95:d0:03:38:7b:4b:23:10:1c:29:84:51:
28:ca:cb:94:df:04:63:76:a2:a9:2c:a9:7b:eb:ea:72:5f:76:
ac:4a:1d:38:87:5d:2a:d4:48:cf:52:5f:a4:8e:f6:e2:2f:ea:
a3:7b:e1:86:22:2f:c3:01:67:b8:4a:82:af:36:8e:dd:5e:88:
16:dc:77:30:91:d8:3c:33:1f:af:bc:4b:a1:e7:98:e3:9a:22:
eb:9d:40:df:1a:ef:e3:e4:b0:f4:90:d3:db:2e:ed:c0:81:82:
e3:68:c9:94:b3:ed:cb:ee:d0:f7:b0:43:04:9e:e8:f1:b0:8f:
9f:32:82:ff:9c:35:df:90:63:95:9d:da:14:70:46:13:26:57:
59:d0:1e:4b:a3:7b:14:ba:7e:2d:8b:d2:c6:a8:fa:d5:61:cd:
0c:bb:0d:75:92:22:98:8a:e0:54:75:4a:d5:33:99:05:34:d5:
60:7e:0d:6c:a4:11:7e:f2:25:e8:18:2a:88:65:3c:31:d4:7c:
39:fb:7b:fb:24:98:75:79:40:51:54:83:89:53:a6:02:c2:48:
17:6c:7f:cb:02:42:77:8e:36:08:b6:16:73:43:5d:ab:8d:34:
88:e5:67:f8:8a:72:f6:14:88:dd:b3:62:ac:9d:47:6e:14:00:
71:60:f6:43
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/FPrTOQDO4RytCRMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEwMTEyMDAwMFoXDTIyMTIwNzA1MDAwMFowLzEtMCsGA1UEAxMk
YWE0MGVkOGUtYWUxMC00NjFlLWEwYTEtMWJkZmU3N2Q3Yzk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvjbfrc7h0qUoM1Cb6behbxU4G8FC/L/souI
/JvyrR3PVOy0O5BJjsQ3/97z4DithlCxfR9lxJFXXTuBPdzKZ5CKmT6eb56ouSPO
5WdlcVDcqnwLJ0rQu1VsuxgI/Uo3g74eVhQG2ysMEOXoGadpBTKDgMaiAomv8dce
mHxE91x4t+pXAANuE+zqE+ACe8NHqQBOg/lgAW9yedAPPTsPESLkogqIHtv0C23r
EKmCCRObkw6jTcCi9dk+2ma42LKMh5bOabyRDQEs23vmm5SuGX7WqEENDQC5Lbgm
bHjmFNaMbmg1IqLCg8QJBGlhrzO9LE+D83TfqqhIrwzmAcmccwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJbQ3xD2ClBwTmftQoj6/31s3CcXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvY2YwY2JhYTctNDNlYi0z
MmIyLTllYjktNzM1ZmUxMjhiNTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkkEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEADzTvEdY1ldADOHtLIxAcKYRRKMrLlN8EY3aiqSype+vqcl92rEodOIdd
KtRIz1JfpI724i/qo3vhhiIvwwFnuEqCrzaO3V6IFtx3MJHYPDMfr7xLoeeY45oi
651A3xrv4+Sw9JDT2y7twIGC42jJlLPty+7Q97BDBJ7o8bCPnzKC/5w135BjlZ3a
FHBGEyZXWdAeS6N7FLp+LYvSxqj61WHNDLsNdZIimIrgVHVK1TOZBTTVYH4NbKQR
fvIl6BgqiGU8MdR8Oft7+ySYdXlAUVSDiVOmAsJIF2x/ywJCd442CLYWc0Ndq400
iOVn+Ipy9hSI3bNirJ1HbhQAcWD2Qw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:09:04 2025 by rpki-client