Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f0155130-f3b7-368f-9aed-ef6324cfcd6f.roa
File: f0155130-f3b7-368f-9aed-ef6324cfcd6f.roa (raw, json)
Hash identifier: PTCCV6zXWLTXrsyb6WxzADo+uAO/SWrULcdSdcs7s1g=
Subject key identifier: 29:93:6E:03:17:99:FF:E0:5B:78:BC:3C:68:43:CF:C1:62:C4:9E:42
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E02E711EB138C320D0E79F400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f0155130-f3b7-368f-9aed-ef6324cfcd6f.roa
Signing time: Mon 23 May 2022 12:00:00 +0000
ROA not before: Mon 23 May 2022 12:00:00 +0000
ROA not after: Tue 28 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:02:e7:11:eb:13:8c:32:0d:0e:79:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 23 12:00:00 2022 GMT
Not After : Jun 28 04:00:00 2022 GMT
Subject: CN=431b4ce2-7993-403c-8b28-79ff61eb7bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:06:39:9e:65:74:b2:1e:39:44:95:32:c7:d7:
db:c3:c3:bd:6d:0d:42:63:af:e3:21:d1:1e:b4:c1:
a1:f6:e1:0f:7c:18:0d:0f:f9:7b:c7:b1:96:e9:e2:
ac:d4:fd:d2:5a:f9:c5:fd:c8:7f:12:39:78:7e:cf:
5c:d5:7b:f1:77:7c:c6:eb:8a:10:9d:b8:00:67:54:
1c:18:69:18:71:66:3c:fb:8b:6e:37:38:e5:ce:f4:
cf:71:ad:3c:95:89:5d:81:11:1a:fd:33:71:4e:c5:
4e:90:f1:9b:0e:4d:8d:74:3d:ca:fc:38:62:a6:04:
fd:03:8a:d0:3c:28:ec:c4:ef:bb:8e:db:a9:c5:41:
cb:19:16:03:43:ef:d1:ab:c5:c6:b2:c1:43:26:c2:
c7:f2:87:77:9f:60:d7:2c:ec:6d:77:1c:76:16:63:
af:91:1d:a9:64:25:cc:25:5f:96:0d:a9:32:80:00:
50:4b:2e:55:2b:7f:8b:a6:90:9c:56:e2:6b:98:bd:
9c:cb:8b:5e:5d:a7:f8:a5:d0:1b:fc:dd:7c:69:cd:
26:1a:69:2c:84:ba:76:bf:54:1e:2e:e5:0a:47:cd:
0c:bc:9c:05:7d:48:e4:af:b2:96:89:96:b0:0b:20:
08:c4:93:ec:cc:61:a5:bd:81:54:9f:98:1d:71:18:
5f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:93:6E:03:17:99:FF:E0:5B:78:BC:3C:68:43:CF:C1:62:C4:9E:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f0155130-f3b7-368f-9aed-ef6324cfcd6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:a1:69:88:b4:3e:76:c9:3b:b9:7a:0a:4d:c2:43:1a:ef:43:
aa:48:51:35:84:43:84:e7:0b:9a:f0:b0:1f:dd:a7:e3:92:19:
dd:77:29:56:7c:d3:0c:58:87:62:f1:27:df:1b:0e:9a:c0:07:
41:82:bc:8c:57:37:70:b9:50:9e:ea:dc:71:b2:04:18:ff:77:
fb:77:a0:0c:27:41:81:b3:1c:3e:fb:4d:ee:c8:6d:bd:cb:69:
39:01:03:45:3d:84:ef:a5:10:35:87:55:d1:44:6b:36:b1:df:
e2:c1:4f:4b:ea:b9:3e:e6:43:7e:60:79:c7:de:0a:2c:24:55:
43:42:b4:1c:97:7f:38:22:07:f9:0d:6e:33:f8:76:16:95:c0:
6e:4a:b3:60:d4:06:47:97:57:93:bc:e6:42:56:35:c3:e5:ea:
bd:40:51:a5:1f:0f:d6:cc:4d:1b:8e:2f:34:88:dd:6c:53:c3:
22:6c:e7:8b:66:8c:7f:a8:b9:e3:e0:4b:6d:a2:98:95:fd:27:
0a:a7:57:9c:aa:8c:7f:55:9b:16:e9:68:7f:f6:93:a5:a8:49:
0d:c0:f1:7e:e8:f4:57:3f:65:f5:93:50:84:26:e7:35:9b:72:
98:5d:c8:4b:36:21:5f:8a:33:c1:e1:37:86:b5:6b:ba:ee:f8:
5b:02:af:40
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4C5xHrE4wyDQ559AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUyMzEyMDAwMFoXDTIyMDYyODA0MDAwMFowLzEtMCsGA1UEAxMk
NDMxYjRjZTItNzk5My00MDNjLThiMjgtNzlmZjYxZWI3YmJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AY5nmV0sh45RJUyx9fbw8O9bQ1CY6/jIdEe
tMGh9uEPfBgND/l7x7GW6eKs1P3SWvnF/ch/Ejl4fs9c1Xvxd3zG64oQnbgAZ1Qc
GGkYcWY8+4tuNzjlzvTPca08lYldgREa/TNxTsVOkPGbDk2NdD3K/DhipgT9A4rQ
PCjsxO+7jtupxUHLGRYDQ+/Rq8XGssFDJsLH8od3n2DXLOxtdxx2FmOvkR2pZCXM
JV+WDakygABQSy5VK3+LppCcVuJrmL2cy4teXaf4pdAb/N18ac0mGmkshLp2v1Qe
LuUKR80MvJwFfUjkr7KWiZawCyAIxJPszGGlvYFUn5gdcRhfxwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCmTbgMXmf/gW3i8PGhDz8FixJ5CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZjAxNTUxMzAtZjNiNy0z
NjhmLTlhZWQtZWY2MzI0Y2ZjZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiIIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAH6FpiLQ+dsk7uXoKTcJDGu9DqkhRNYRDhOcLmvCwH92n45IZ3XcpVnzT
DFiHYvEn3xsOmsAHQYK8jFc3cLlQnurccbIEGP93+3egDCdBgbMcPvtN7shtvctp
OQEDRT2E76UQNYdV0URrNrHf4sFPS+q5PuZDfmB5x94KLCRVQ0K0HJd/OCIH+Q1u
M/h2FpXAbkqzYNQGR5dXk7zmQlY1w+XqvUBRpR8P1sxNG44vNIjdbFPDImzni2aM
f6i54+BLbaKYlf0nCqdXnKqMf1WbFulof/aTpahJDcDxfuj0Vz9l9ZNQhCbnNZty
mF3ISzYhX4ozweE3hrVruu74WwKvQA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:21:24 2025 by rpki-client