Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/03ae8793-f6a3-3e49-beb6-0e802792f637.roa
File: 03ae8793-f6a3-3e49-beb6-0e802792f637.roa (raw, json)
Hash identifier: 9atcdHLUWdTjBBUaK0anOHIy7DGez1IEcLk9LtrW6tk=
Subject key identifier: AD:7E:0E:F2:25:5E:C5:0A:47:D4:06:BF:81:6B:BF:16:F7:FD:B7:BA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B75EA7742BE444EC83C13C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/03ae8793-f6a3-3e49-beb6-0e802792f637.roa
Signing time: Thu 26 Jan 2023 12:00:00 +0000
ROA not before: Thu 26 Jan 2023 12:00:00 +0000
ROA not after: Fri 03 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 146.9.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b7:5e:a7:74:2b:e4:44:ec:83:c1:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 26 12:00:00 2023 GMT
Not After : Mar 3 05:00:00 2023 GMT
Subject: CN=9a7fb44c-bcdc-4695-8aaf-cc9832aea38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c8:d6:53:8e:0a:a1:b4:90:f4:e1:b4:13:0c:
b1:d3:b3:99:40:54:49:59:29:42:6a:05:d2:0a:fe:
12:e7:47:37:31:1e:47:91:46:6a:87:ba:ab:64:b5:
a1:81:29:c6:9b:bd:15:9c:43:6c:12:0d:56:31:5b:
eb:92:d3:b6:e3:61:78:a2:92:7a:14:e3:d8:81:7b:
5f:1e:ba:5e:62:5d:51:72:6f:50:c8:4b:3c:6c:34:
1c:9a:06:fa:22:50:cc:b4:7f:cb:8f:f8:15:66:06:
bb:34:57:79:1f:26:79:0d:91:08:74:fc:65:b0:42:
4f:8b:ed:e5:d6:36:0e:01:cd:31:9f:89:14:6b:d9:
9c:1a:3b:88:8e:f6:cf:0e:a7:32:e0:c9:d0:7f:22:
37:80:a0:e8:b4:91:62:64:67:d0:5c:3c:0b:03:38:
d9:18:c3:93:3e:14:c4:df:0b:c4:12:9a:02:0b:cf:
69:32:8f:0c:34:47:5f:0d:4e:fa:cc:00:ed:d6:8c:
0c:92:81:80:0a:d7:cc:8f:3b:f8:75:95:cb:88:14:
86:bf:db:c4:fd:bf:49:bc:04:2d:9b:29:2b:e9:b1:
5b:12:4a:c4:e4:49:05:0d:95:4b:e1:5f:b6:d5:91:
ce:67:09:c4:6a:a5:d7:66:28:3a:9c:79:c2:93:e3:
bc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7E:0E:F2:25:5E:C5:0A:47:D4:06:BF:81:6B:BF:16:F7:FD:B7:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/03ae8793-f6a3-3e49-beb6-0e802792f637.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
146.9.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:fe:a9:b7:90:e6:93:12:7b:00:40:67:37:be:c3:e2:9c:38:
1b:40:3f:79:63:67:32:2a:0f:f8:9a:ff:5e:e1:6d:ef:60:e0:
8a:a7:c3:bb:07:82:92:74:51:14:3f:42:38:63:41:f1:2b:97:
13:06:5e:c6:c4:f9:8c:30:fc:ac:f9:a7:c5:41:ce:85:de:e7:
13:c0:94:b7:56:41:64:f1:f6:9f:02:a3:78:a2:64:f8:d8:6c:
ea:c5:7c:ab:36:c3:30:24:d8:66:80:5f:19:b1:76:99:74:8c:
54:fb:21:ba:cc:f2:c4:75:3f:f1:41:e0:ff:a4:7d:0d:d1:49:
d6:7e:e4:2c:68:a3:43:13:aa:18:fb:2e:4e:20:bf:28:c6:90:
c4:31:cc:63:e1:66:c1:f4:ca:63:f1:b0:a4:88:8d:0f:c1:03:
4e:77:ad:7f:97:bf:24:4b:f3:11:73:9b:e1:a4:9c:66:d4:f4:
7f:a6:c0:fb:b3:e8:94:52:8c:70:51:ab:ba:67:30:d9:a5:3b:
4b:55:ee:d9:84:17:2b:aa:85:55:82:d5:26:46:af:9f:9c:71:
ef:31:81:77:6d:68:c4:76:85:9c:a9:8f:db:a2:96:79:9b:3b:
5b:f2:59:14:11:a0:9b:7f:fb:57:e2:ee:aa:dc:fc:f8:06:da:
3c:6d:0b:5c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEC3Xqd0K+RE7IPBPIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEyNjEyMDAwMFoXDTIzMDMwMzA1MDAwMFowLzEtMCsGA1UEAxMk
OWE3ZmI0NGMtYmNkYy00Njk1LThhYWYtY2M5ODMyYWVhMzhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMjWU44KobSQ9OG0Ewyx07OZQFRJWSlCagXS
Cv4S50c3MR5HkUZqh7qrZLWhgSnGm70VnENsEg1WMVvrktO242F4opJ6FOPYgXtf
HrpeYl1Rcm9QyEs8bDQcmgb6IlDMtH/Lj/gVZga7NFd5HyZ5DZEIdPxlsEJPi+3l
1jYOAc0xn4kUa9mcGjuIjvbPDqcy4MnQfyI3gKDotJFiZGfQXDwLAzjZGMOTPhTE
3wvEEpoCC89pMo8MNEdfDU76zADt1owMkoGACtfMjzv4dZXLiBSGv9vE/b9JvAQt
mykr6bFbEkrE5EkFDZVL4V+21ZHOZwnEaqXXZig6nHnCk+O88QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFK1+DvIlXsUKR9QGv4Frvxb3/be6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMDNhZTg3OTMtZjZhMy0z
ZTQ5LWJlYjYtMGU4MDI3OTJmNjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkgkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWf6pt5DmkxJ7AEBnN77D4pw4G0A/eWNnMioP+Jr/XuFt72DgiqfDuweC
knRRFD9COGNB8SuXEwZexsT5jDD8rPmnxUHOhd7nE8CUt1ZBZPH2nwKjeKJk+Nhs
6sV8qzbDMCTYZoBfGbF2mXSMVPshuszyxHU/8UHg/6R9DdFJ1n7kLGijQxOqGPsu
TiC/KMaQxDHMY+FmwfTKY/GwpIiND8EDTnetf5e/JEvzEXOb4aScZtT0f6bA+7Po
lFKMcFGrumcw2aU7S1Xu2YQXK6qFVYLVJkavn5xx7zGBd21oxHaFnKmP26KWeZs7
W/JZFBGgm3/7V+Luqtz8+AbaPG0LXA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:42:42 2025 by rpki-client