Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f12a4aa2-1620-3a06-b77c-e7692952b336.roa
File: f12a4aa2-1620-3a06-b77c-e7692952b336.roa (raw, json)
Hash identifier: TWMWfg+vL7Z3j2zeqGgQbfqLg5dDmbExiPJ3lnaMLlk=
Subject key identifier: 96:59:13:4A:50:36:AF:F6:AC:E6:09:6C:36:F2:02:EA:C9:7A:9A:48
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858404163CC2F6B1DDAC395CC67C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f12a4aa2-1620-3a06-b77c-e7692952b336.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 144.207.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:41:63:cc:2f:6b:1d:da:c3:95:cc:67:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=eb338715-76a5-4b4a-972c-77e66dea8fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:2e:10:3f:cd:90:a5:10:44:c3:a4:75:50:
86:7c:cd:65:bd:b0:28:45:28:0d:bf:19:85:f1:bb:
a5:9c:b1:14:d5:59:be:25:9d:86:41:7d:2b:ff:75:
ca:a3:f5:6d:da:97:88:e5:eb:f7:38:14:91:46:38:
dc:7b:74:98:69:c4:29:1d:92:32:5c:53:45:a8:73:
be:24:3a:8c:90:96:27:d4:1e:23:8f:4e:bd:17:79:
06:09:cd:b6:bb:d5:e7:9e:93:c8:14:88:65:b8:dc:
6c:f1:c2:46:2c:ed:4a:d5:e7:80:2d:fa:4a:eb:15:
53:16:b3:1c:e5:fa:2a:80:7a:f8:b4:f4:9d:e8:4e:
f0:b9:6f:d2:00:dd:31:7c:26:f8:66:fc:16:9f:97:
28:77:a8:0a:9f:1c:68:0d:57:45:19:9c:35:ec:1c:
e7:2b:43:e4:b4:c3:84:31:d6:07:5e:2d:77:67:92:
b6:fd:b3:f6:6e:0b:87:b6:13:3f:cb:74:ec:74:4b:
34:fa:1a:1b:da:0a:aa:3b:c2:37:5a:7a:89:b3:4d:
9f:83:6e:62:f3:d3:5e:9e:5c:ef:8a:65:57:04:74:
d2:86:5d:ac:40:fa:2c:28:fc:ea:0f:af:ce:8c:ce:
82:26:c1:ed:1d:f3:a7:97:87:29:b6:bc:ef:7d:4e:
ea:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:59:13:4A:50:36:AF:F6:AC:E6:09:6C:36:F2:02:EA:C9:7A:9A:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f12a4aa2-1620-3a06-b77c-e7692952b336.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
144.207.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:9c:07:15:6e:1c:a1:86:b8:96:bf:17:af:8f:af:ff:77:6e:
36:a9:e2:56:17:c3:7c:5d:e1:e0:82:bf:2d:0c:9e:f9:ff:eb:
4a:04:37:08:f0:ee:64:77:fd:ff:2b:85:09:a2:1a:92:f7:a0:
dd:c0:8f:9f:7c:0c:e4:e1:e9:c5:b1:a6:c7:5f:73:10:fe:d1:
78:92:52:dd:8a:48:15:12:e1:72:91:9b:00:69:40:12:7b:af:
17:ef:ca:63:79:6f:65:9b:14:6c:b3:eb:a0:e7:d0:ac:11:a9:
bd:3c:f7:c0:f2:bb:44:6a:ff:4a:1b:17:d0:18:cc:1d:68:70:
15:11:6e:6e:a5:1a:a6:ea:1b:e8:83:23:fb:14:0b:a5:ef:e5:
6a:9a:40:b3:54:0b:67:27:f6:78:3d:0b:bd:a2:01:31:4c:9d:
1a:35:b3:75:85:ef:f6:f1:77:a4:87:94:e5:0f:dc:f4:75:0e:
2f:d1:16:e3:b2:b7:e5:2f:db:a0:98:d0:0b:8e:1a:fa:d2:d3:
38:f2:18:d4:b6:1a:a8:5d:42:e4:97:68:b0:b5:ba:75:af:45:
35:03:ec:4e:61:2c:fe:86:0b:e3:17:e4:a3:2b:4b:2b:b9:c2:
7d:ad:44:77:04:a4:7f:ad:ca:1b:47:1c:61:a4:e4:30:7c:93:
98:d1:cd:ab
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBBY8wvax3aw5XMZ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNTEyMDAwMFoXDTIzMDEyMDA1MDAwMFowLzEtMCsGA1UEAxMk
ZWIzMzg3MTUtNzZhNS00YjRhLTk3MmMtNzdlNjZkZWE4ZmQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmsuED/NkKUQRMOkdVCGfM1lvbAoRSgNvxmF
8bulnLEU1Vm+JZ2GQX0r/3XKo/Vt2peI5ev3OBSRRjjce3SYacQpHZIyXFNFqHO+
JDqMkJYn1B4jj069F3kGCc22u9XnnpPIFIhluNxs8cJGLO1K1eeALfpK6xVTFrMc
5foqgHr4tPSd6E7wuW/SAN0xfCb4ZvwWn5cod6gKnxxoDVdFGZw17BznK0PktMOE
MdYHXi13Z5K2/bP2bguHthM/y3TsdEs0+hob2gqqO8I3WnqJs02fg25i89Nenlzv
imVXBHTShl2sQPosKPzqD6/OjM6CJsHtHfOnl4cptrzvfU7qDwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJZZE0pQNq/2rOYJbDbyAurJeppIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZjEyYTRhYTItMTYyMC0z
YTA2LWI3N2MtZTc2OTI5NTJiMzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkM8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYJwHFW4coYa4lr8Xr4+v/3duNqniVhfDfF3h4IK/LQye+f/rSgQ3CPDu
ZHf9/yuFCaIakveg3cCPn3wM5OHpxbGmx19zEP7ReJJS3YpIFRLhcpGbAGlAEnuv
F+/KY3lvZZsUbLProOfQrBGpvTz3wPK7RGr/ShsX0BjMHWhwFRFubqUapuob6IMj
+xQLpe/lappAs1QLZyf2eD0LvaIBMUydGjWzdYXv9vF3pIeU5Q/c9HUOL9EW47K3
5S/boJjQC44a+tLTOPIY1LYaqF1C5JdosLW6da9FNQPsTmEs/oYL4xfkoytLK7nC
fa1EdwSkf63KG0ccYaTkMHyTmNHNqw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 21:21:24 2025 by rpki-client