Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea96e4e0-e6af-3fc8-a8aa-760469cd15fc.roa
File: ea96e4e0-e6af-3fc8-a8aa-760469cd15fc.roa (raw, json)
Hash identifier: ybEOywyqFDLYxlUsoIZehBEsXyKvCth/bCvzNQufqHo=
Subject key identifier: 83:8C:7C:B0:E1:E1:E5:A8:FD:EE:6C:CB:30:A4:E3:90:91:89:5F:1D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B8D2B554D34189A5D5B6D980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea96e4e0-e6af-3fc8-a8aa-760469cd15fc.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 206.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b8:d2:b5:54:d3:41:89:a5:d5:b6:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=c591200d-5e8a-4c55-992e-afbb936a2eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4c:cb:9e:77:a5:c8:e0:04:f8:36:66:c1:b2:
a2:34:b4:ed:2b:02:a6:45:2e:9b:d6:7c:f3:dd:79:
4f:5c:ba:3a:c5:c8:66:6f:87:f6:62:7a:b6:f0:59:
2a:f8:6b:6d:12:3c:1f:51:88:4a:67:5f:97:47:13:
97:ba:46:1a:8e:89:b1:c2:e2:d0:0a:89:0b:99:52:
da:4f:a8:e6:de:81:0e:04:d6:a4:e7:53:5e:94:4b:
33:72:a7:ec:dc:1e:60:d7:30:7e:30:40:05:66:a4:
19:9a:4e:06:b1:f1:8a:c4:c5:19:74:45:ca:b4:47:
b2:1d:d5:1c:86:f8:ca:b5:5a:ef:b7:67:57:f7:e8:
ab:98:1f:6e:a2:92:ba:95:e2:af:8e:66:26:00:a8:
98:4b:d5:cd:64:d1:7c:bb:94:54:31:92:a5:1f:db:
ce:ce:92:f0:39:1a:f7:52:cf:1f:4b:c7:1d:26:0c:
53:14:f6:98:9a:2a:17:a4:2b:9c:a0:d0:90:9c:a7:
0d:56:de:39:da:75:4a:e7:f7:f9:90:3b:9b:f9:5c:
48:4f:8c:ff:c7:e1:30:d4:cd:4f:ad:db:ff:cd:5a:
de:77:30:5c:f2:a4:29:c1:67:e3:c2:f9:38:3a:7f:
3b:2f:8e:d3:65:6f:02:55:dc:f0:b1:e9:b4:2b:f6:
7d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8C:7C:B0:E1:E1:E5:A8:FD:EE:6C:CB:30:A4:E3:90:91:89:5F:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea96e4e0-e6af-3fc8-a8aa-760469cd15fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
206.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:b3:70:9e:2a:01:01:1b:76:c8:be:0a:24:e5:cd:67:f5:b5:
db:a4:08:4d:12:e3:6e:c5:9c:c2:ae:0b:a8:7f:9d:a5:37:07:
9a:c0:79:ec:c6:ef:da:82:c3:1d:89:0a:3b:0d:9f:94:cb:4d:
7a:df:85:5a:05:cb:10:3f:bb:fa:00:f9:db:23:42:74:ad:4c:
d6:fb:70:32:f4:9f:7f:73:c8:75:0b:ff:7e:ed:f8:fd:55:e3:
cf:49:80:2e:a9:ea:50:4a:8c:69:3b:b0:95:e3:5e:d1:44:cf:
0b:14:64:d5:b9:8f:1c:58:56:4a:c5:7a:df:e8:e9:8a:56:70:
5b:10:8f:f7:bf:90:71:2c:ea:13:6e:75:9b:14:cc:29:b2:e0:
ac:64:c1:59:28:bf:79:13:d5:05:20:b9:ed:00:42:3c:64:c3:
11:0a:8b:20:a4:b1:72:ac:12:a4:5b:ab:5d:ca:26:ea:44:0e:
9f:8d:e7:cf:d1:81:85:9a:19:99:d2:4b:40:b0:74:61:fe:62:
08:f0:ca:ee:01:10:4a:14:38:c3:ea:74:57:80:37:a2:db:a1:
87:87:60:73:00:3f:39:a4:3f:fa:50:df:74:16:e3:43:f5:9e:
36:22:ed:fc:d0:cf:e6:71:b9:45:86:a2:74:ea:10:7c:96:a1:
02:31:2c:ba
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEC40rVU00GJpdW22YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEyNzEyMDAwMFoXDTIzMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
YzU5MTIwMGQtNWU4YS00YzU1LTk5MmUtYWZiYjkzNmEyZWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkzLnnelyOAE+DZmwbKiNLTtKwKmRS6b1nzz
3XlPXLo6xchmb4f2Ynq28Fkq+GttEjwfUYhKZ1+XRxOXukYajomxwuLQCokLmVLa
T6jm3oEOBNak51NelEszcqfs3B5g1zB+MEAFZqQZmk4GsfGKxMUZdEXKtEeyHdUc
hvjKtVrvt2dX9+irmB9uopK6leKvjmYmAKiYS9XNZNF8u5RUMZKlH9vOzpLwORr3
Us8fS8cdJgxTFPaYmioXpCucoNCQnKcNVt452nVK5/f5kDub+VxIT4z/x+Ew1M1P
rdv/zVredzBc8qQpwWfjwvk4On87L47TZW8CVdzwsem0K/Z9+QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIOMfLDh4eWo/e5syzCk45CRiV8dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZWE5NmU0ZTAtZTZhZi0z
ZmM4LWE4YWEtNzYwNDY5Y2QxNWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzkYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAabNwnioBARt2yL4KJOXNZ/W126QITRLjbsWcwq4LqH+dpTcHmsB57Mbv
2oLDHYkKOw2flMtNet+FWgXLED+7+gD52yNCdK1M1vtwMvSff3PIdQv/fu34/VXj
z0mALqnqUEqMaTuwleNe0UTPCxRk1bmPHFhWSsV63+jpilZwWxCP97+QcSzqE251
mxTMKbLgrGTBWSi/eRPVBSC57QBCPGTDEQqLIKSxcqwSpFurXcom6kQOn43nz9GB
hZoZmdJLQLB0Yf5iCPDK7gEQShQ4w+p0V4A3otuhh4dgcwA/OaQ/+lDfdBbjQ/We
NiLt/NDP5nG5RYaidOoQfJahAjEsug==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:58:03 2025 by rpki-client