Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d836d828-4049-380c-8cd2-9f58afe44e2b.roa
File: d836d828-4049-380c-8cd2-9f58afe44e2b.roa (raw, json)
Hash identifier: 9BpUGqsvc7Tdm3K30exbxIjsIhv6xtMsUdYPyzIvJME=
Subject key identifier: 59:3F:CE:C6:FE:3C:22:5A:0D:C0:DA:DE:D3:BE:E0:63:B9:3F:8D:3F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE484757CF3C426058D2F2F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d836d828-4049-380c-8cd2-9f58afe44e2b.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 47.128.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:84:75:7c:f3:c4:26:05:8d:2f:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=235ae033-a304-4198-9d24-3a3dc4c17979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9b:f8:b5:d5:cc:9c:d0:4e:41:e1:51:ec:45:
21:a7:d3:1b:5a:a8:56:a7:7f:27:11:0f:f8:32:52:
e4:4a:a8:ad:ac:27:44:b5:04:70:86:e7:8d:aa:de:
a9:59:1b:3e:55:9d:f6:18:28:34:2b:c0:16:55:d3:
f9:d4:92:24:f3:4e:5d:4a:3a:31:b3:c8:ce:dd:bc:
be:f7:6b:c9:0d:f6:e8:db:fe:65:9d:d5:b3:ee:a9:
24:5a:aa:e3:1d:a4:10:e5:4c:fe:07:b1:f4:4b:49:
c2:73:a6:e6:c1:e9:64:b0:24:b3:53:56:20:c7:a3:
21:67:6b:3d:d7:a8:5e:40:45:6c:ad:f1:ae:93:36:
b4:5e:6d:da:62:e8:1b:fa:13:fa:cf:4c:83:50:f7:
c0:27:4c:44:30:f5:e1:21:ab:c7:f7:e2:1e:7b:43:
bb:bf:51:f5:52:e4:40:a5:81:3a:51:31:07:54:ef:
03:d3:b1:aa:41:5a:bb:03:77:1a:25:48:19:25:a7:
c5:fc:24:9b:d7:85:7d:d9:21:7c:df:1c:3b:08:f7:
78:ac:33:c0:a0:4c:46:8c:88:b2:a6:9b:d6:e8:e4:
43:ea:63:7a:bb:09:b1:10:6f:27:da:a1:f3:dd:34:
88:47:31:51:03:79:92:3d:36:2e:49:39:7b:f6:d4:
91:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3F:CE:C6:FE:3C:22:5A:0D:C0:DA:DE:D3:BE:E0:63:B9:3F:8D:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d836d828-4049-380c-8cd2-9f58afe44e2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
47.128.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:b1:10:78:e0:bc:3c:9f:c6:dc:fb:5a:33:65:e3:34:07:d3:
46:69:d6:4a:e2:98:ad:38:47:a3:53:af:2f:73:a4:a7:1d:8c:
b0:9a:2b:cb:5f:7e:30:34:9f:93:b6:d0:b4:eb:9f:9d:58:83:
f6:b0:01:1e:ec:f4:5d:e5:fd:bf:e5:ad:1d:d3:f5:ea:09:c7:
48:d4:0f:8d:b6:d7:d2:f5:e7:7f:17:b7:43:2e:bb:c8:53:a8:
01:72:24:fe:21:09:8c:72:67:b0:27:04:d4:3e:07:1c:f5:36:
cc:0b:20:d7:0e:6d:d0:0c:f8:f6:57:c9:3e:ed:8e:a0:80:e3:
67:0a:86:a4:2c:37:82:e0:01:55:12:6a:8e:5c:eb:eb:4b:24:
81:cf:13:51:ea:8f:df:9a:30:a0:0d:d2:bc:97:17:dc:af:41:
e9:71:11:c8:89:83:54:5b:8f:da:ef:a6:14:77:8d:42:5c:70:
23:ac:0d:db:0a:44:33:03:c4:ff:fe:91:12:6f:81:98:6c:d0:
1b:e7:d7:f0:16:fe:e3:35:80:3b:7c:de:2b:08:2a:b3:4a:02:
a7:33:ab:ba:e9:78:0f:30:10:4f:78:08:00:bc:2b:f7:7e:6a:
d7:70:4a:4b:d6:57:3f:dc:f8:b1:05:d0:0b:64:18:b5:d0:2c:
5b:ac:a6:9e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzkhHV888QmBY0vLwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIxMTA1MDAwMFoXDTIyMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
MjM1YWUwMzMtYTMwNC00MTk4LTlkMjQtM2EzZGM0YzE3OTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpv4tdXMnNBOQeFR7EUhp9MbWqhWp38nEQ/4
MlLkSqitrCdEtQRwhueNqt6pWRs+VZ32GCg0K8AWVdP51JIk805dSjoxs8jO3by+
92vJDfbo2/5lndWz7qkkWqrjHaQQ5Uz+B7H0S0nCc6bmwelksCSzU1Ygx6MhZ2s9
16heQEVsrfGukza0Xm3aYugb+hP6z0yDUPfAJ0xEMPXhIavH9+Iee0O7v1H1UuRA
pYE6UTEHVO8D07GqQVq7A3caJUgZJafF/CSb14V92SF83xw7CPd4rDPAoExGjIiy
ppvW6ORD6mN6uwmxEG8n2qHz3TSIRzFRA3mSPTYuSTl79tSRjQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFk/zsb+PCJaDcDa3tO+4GO5P40/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDgzNmQ4MjgtNDA0OS0z
ODBjLThjZDItOWY1OGFmZTQ0ZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCL4AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAErEQeOC8PJ/G3PtaM2XjNAfTRmnWSuKYrThHo1OvL3Okpx2MsJory19+
MDSfk7bQtOufnViD9rABHuz0XeX9v+WtHdP16gnHSNQPjbbX0vXnfxe3Qy67yFOo
AXIk/iEJjHJnsCcE1D4HHPU2zAsg1w5t0Az49lfJPu2OoIDjZwqGpCw3guABVRJq
jlzr60skgc8TUeqP35owoA3SvJcX3K9B6XERyImDVFuP2u+mFHeNQlxwI6wN2wpE
MwPE//6REm+BmGzQG+fX8Bb+4zWAO3zeKwgqs0oCpzOruul4DzAQT3gIALwr935q
13BKS9ZXP9z4sQXQC2QYtdAsW6ymng==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:17:00 2025 by rpki-client