Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4ff99f1-2302-335a-b718-8a8255a87e6f.roa
File: d4ff99f1-2302-335a-b718-8a8255a87e6f.roa (raw, json)
Hash identifier: Vh3VR23GNTS0lkfKQlaazn1grWB2Qar9+jDjfeW2RIQ=
Subject key identifier: A0:2B:2D:DE:D4:B0:15:01:77:06:2E:92:05:D6:CA:2F:C3:DD:0E:8A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584024B7551CE1EE076A86BA2C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4ff99f1-2302-335a-b718-8a8255a87e6f.roa
Signing time: Mon 05 Dec 2022 12:00:00 +0000
ROA not before: Mon 05 Dec 2022 12:00:00 +0000
ROA not after: Tue 10 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 136.11.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:24:b7:55:1c:e1:ee:07:6a:86:ba:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 5 12:00:00 2022 GMT
Not After : Jan 10 05:00:00 2023 GMT
Subject: CN=a902bfd2-7fd4-4dd8-8aee-e66e01079117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d6:2d:73:38:ea:3a:1c:55:3f:a5:1a:89:b8:
51:01:5d:b3:1c:21:82:54:bb:48:73:58:b4:7e:12:
8a:06:7a:31:98:97:25:79:f9:72:71:31:00:bf:b8:
1a:84:a9:84:50:a0:e1:09:ef:8a:dc:9f:b3:d6:96:
71:0b:35:63:67:8d:13:e3:72:a7:80:0f:c0:18:47:
70:fb:a8:19:01:85:1a:f8:bc:99:09:f2:a4:ab:da:
82:5d:e0:10:d4:85:9f:bc:12:9e:be:53:3e:33:f9:
11:3c:f5:bd:25:0f:99:87:a4:ce:0d:8e:ce:2c:26:
e0:c2:2f:ce:34:09:17:94:20:75:4a:85:3b:db:34:
7d:a7:27:eb:c6:0f:4c:ac:f4:01:fa:45:24:a6:34:
d9:35:6d:7e:4e:1e:0e:89:72:7c:3f:8e:b2:31:2a:
de:95:69:2a:8a:eb:7c:94:da:95:52:71:35:f7:e6:
5f:31:48:59:92:e4:20:71:d8:03:8f:44:cb:7f:5d:
0e:78:b5:5d:cb:90:0e:55:08:b4:a0:c9:59:1c:da:
c2:f7:55:c0:d4:db:9d:94:3f:b3:c0:f5:c8:69:d0:
e2:9c:e0:fb:12:b9:bd:c6:9f:b2:95:74:70:f6:09:
84:12:67:4e:f0:3b:65:56:4b:14:d7:f2:c7:c9:52:
f2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2B:2D:DE:D4:B0:15:01:77:06:2E:92:05:D6:CA:2F:C3:DD:0E:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4ff99f1-2302-335a-b718-8a8255a87e6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.11.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:37:63:6f:af:4c:6c:55:ad:65:c9:17:6f:da:8c:b7:4a:fa:
9f:c8:27:2f:6a:41:05:98:d7:4c:ef:8e:a0:86:97:50:d6:6d:
61:02:f5:81:3c:73:0b:61:60:92:08:19:26:38:ae:dd:78:94:
5d:85:36:c6:18:29:ce:c5:52:b3:76:ac:78:28:e0:b6:0f:4f:
1a:b2:11:88:aa:3d:f8:39:1a:0d:57:7c:5a:83:bd:61:56:ec:
d1:69:5e:b7:c2:75:5e:aa:f6:c6:e4:06:ea:8c:03:4d:79:cc:
5b:8a:1d:d2:ec:0e:02:b1:95:75:c9:ae:a0:3f:21:13:d2:0a:
20:96:8d:ad:ff:66:0c:f0:3f:b6:1b:16:53:8c:a7:ea:c7:5a:
a2:ed:d0:3a:14:e3:22:85:ea:70:2b:77:85:84:2a:b4:1b:20:
45:aa:34:00:20:42:5a:e9:51:b8:f5:6d:ee:91:4c:5a:a8:7d:
da:73:aa:69:31:6d:e1:82:af:bf:db:50:54:20:88:02:ee:be:
6b:2e:14:d8:4e:15:f8:c9:2b:63:00:97:e4:5c:57:ef:b7:60:
07:71:11:9e:ba:77:78:4b:4a:30:d6:ea:43:f2:4e:0c:76:4c:
00:99:f7:32:9d:49:61:9f:fa:ef:d1:84:91:b0:77:f6:7c:c4:
ed:d1:4c:7a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAkt1Uc4e4Haoa6LIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIwNTEyMDAwMFoXDTIzMDExMDA1MDAwMFowLzEtMCsGA1UEAxMk
YTkwMmJmZDItN2ZkNC00ZGQ4LThhZWUtZTY2ZTAxMDc5MTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNYtczjqOhxVP6UaibhRAV2zHCGCVLtIc1i0
fhKKBnoxmJcleflycTEAv7gahKmEUKDhCe+K3J+z1pZxCzVjZ40T43KngA/AGEdw
+6gZAYUa+LyZCfKkq9qCXeAQ1IWfvBKevlM+M/kRPPW9JQ+Zh6TODY7OLCbgwi/O
NAkXlCB1SoU72zR9pyfrxg9MrPQB+kUkpjTZNW1+Th4OiXJ8P46yMSrelWkqiut8
lNqVUnE19+ZfMUhZkuQgcdgDj0TLf10OeLVdy5AOVQi0oMlZHNrC91XA1NudlD+z
wPXIadDinOD7Erm9xp+ylXRw9gmEEmdO8DtlVksU1/LHyVLyzQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKArLd7UsBUBdwYukgXWyi/D3Q6KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDRmZjk5ZjEtMjMwMi0z
MzVhLWI3MTgtOGE4MjU1YTg3ZTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiAswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAnjdjb69MbFWtZckXb9qMt0r6n8gnL2pBBZjXTO+OoIaXUNZtYQL1gTxz
C2FgkggZJjiu3XiUXYU2xhgpzsVSs3aseCjgtg9PGrIRiKo9+DkaDVd8WoO9YVbs
0Wlet8J1Xqr2xuQG6owDTXnMW4od0uwOArGVdcmuoD8hE9IKIJaNrf9mDPA/thsW
U4yn6sdaou3QOhTjIoXqcCt3hYQqtBsgRao0ACBCWulRuPVt7pFMWqh92nOqaTFt
4YKvv9tQVCCIAu6+ay4U2E4V+MkrYwCX5FxX77dgB3ERnrp3eEtKMNbqQ/JODHZM
AJn3Mp1JYZ/679GEkbB39nzE7dFMeg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:18:12 2025 by rpki-client