Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d3ede39-79da-3be7-b9ae-f894d4a4fc32.roa
File: 0d3ede39-79da-3be7-b9ae-f894d4a4fc32.roa (raw, json)
Hash identifier: gf67Nh0G1Snr3z2F9UrP/KJ5/fN4kJDzrTLoLyZmApQ=
Subject key identifier: 5B:50:D3:74:8D:84:04:A8:AA:DF:64:62:F6:3C:A6:55:61:32:46:6C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E1EA551D883851A590EA67A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d3ede39-79da-3be7-b9ae-f894d4a4fc32.roa
Signing time: Thu 02 Jun 2022 12:00:00 +0000
ROA not before: Thu 02 Jun 2022 12:00:00 +0000
ROA not after: Fri 08 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 153.49.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1e:a5:51:d8:83:85:1a:59:0e:a6:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 2 12:00:00 2022 GMT
Not After : Jul 8 04:00:00 2022 GMT
Subject: CN=569ab87c-6d69-4245-a770-11a3b85050b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f1:c6:6e:b7:2b:6f:44:29:7e:51:db:5b:e8:
5d:ed:54:84:5f:19:24:57:18:5b:b9:39:05:7b:11:
5e:07:86:c5:4b:94:8c:23:74:a0:8f:2c:fa:75:44:
b5:9e:22:13:b6:7e:c0:84:38:f6:29:9d:61:00:c8:
62:5f:9f:b8:bd:71:ce:5d:c3:78:9c:27:18:ba:d9:
b6:36:d5:63:f7:05:b7:08:73:43:fd:13:4d:53:bb:
03:89:66:97:c6:ac:3e:e8:df:9a:9e:76:d0:1e:17:
c2:ce:cc:e5:ec:14:2c:1d:6a:7b:ef:77:8e:3d:64:
c3:67:f4:b8:b3:92:c8:06:86:c5:f2:cb:04:e9:31:
da:f2:da:a0:07:d0:ee:08:0e:fa:39:d7:bf:2e:e1:
cc:81:f8:04:d4:18:a8:0c:72:3e:81:13:a6:87:32:
2c:0c:e4:7a:d5:74:a2:f2:2f:1c:93:d4:c5:f6:39:
cf:04:26:00:42:0d:9e:af:b2:a6:59:74:6d:e6:86:
02:38:8f:49:42:6a:1d:f3:ca:3e:ba:35:21:8e:2c:
38:a5:de:e3:b8:a8:5d:02:76:99:e1:88:c6:ff:14:
6c:6d:fb:42:df:23:43:e9:47:38:be:66:20:81:6d:
cf:14:90:e7:33:76:3b:60:ac:c3:52:f1:36:27:c3:
27:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:50:D3:74:8D:84:04:A8:AA:DF:64:62:F6:3C:A6:55:61:32:46:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d3ede39-79da-3be7-b9ae-f894d4a4fc32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
153.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:af:e8:8d:6c:b5:61:2d:b4:e1:90:ce:79:f6:95:b3:24:ba:
54:9c:b6:de:a3:6b:a3:fa:34:d6:f8:ba:df:37:b2:b6:3f:22:
97:bc:76:1b:8a:3a:2a:66:e0:fb:60:6d:68:59:f9:a7:62:0a:
79:25:c9:f6:52:86:6d:d7:b8:b5:36:c4:91:fc:d9:b1:5d:1b:
75:d2:e3:b0:1b:da:07:58:e2:93:24:b9:e8:cb:6f:d0:91:ac:
8d:50:52:12:ac:89:62:06:dc:00:f6:c1:e7:8e:e9:39:c5:a5:
2a:85:9a:ea:d0:c0:4a:dc:7e:d7:c2:f8:7f:cf:39:2b:cd:7d:
06:6c:22:6d:b6:03:00:4f:bd:c2:a5:0e:77:4f:73:7f:bc:28:
e0:a7:ae:7b:ac:26:49:9c:c9:c9:2d:e6:f3:5f:e3:36:89:12:
40:ff:97:d5:27:ee:05:9c:0e:5c:d1:fe:19:67:18:fe:c8:f9:
0b:76:2c:f1:20:51:11:85:85:97:8d:15:90:48:58:b0:dc:90:
29:c2:88:3f:1c:f7:fb:2d:a3:7b:a9:9d:65:2b:3a:a6:e8:65:
4a:f1:6a:51:0a:e4:e1:64:1b:a8:df:14:c0:e3:66:3f:30:23:
cc:e3:56:27:af:d8:18:77:6c:b1:56:c3:ac:7b:81:a8:6d:76:
77:cb:91:8e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4epVHYg4UaWQ6meoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYwMjEyMDAwMFoXDTIyMDcwODA0MDAwMFowLzEtMCsGA1UEAxMk
NTY5YWI4N2MtNmQ2OS00MjQ1LWE3NzAtMTFhM2I4NTA1MGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfHGbrcrb0QpflHbW+hd7VSEXxkkVxhbuTkF
exFeB4bFS5SMI3Sgjyz6dUS1niITtn7AhDj2KZ1hAMhiX5+4vXHOXcN4nCcYutm2
NtVj9wW3CHND/RNNU7sDiWaXxqw+6N+annbQHhfCzszl7BQsHWp773eOPWTDZ/S4
s5LIBobF8ssE6THa8tqgB9DuCA76Ode/LuHMgfgE1BioDHI+gROmhzIsDOR61XSi
8i8ck9TF9jnPBCYAQg2er7KmWXRt5oYCOI9JQmod88o+ujUhjiw4pd7juKhdAnaZ
4YjG/xRsbftC3yND6Uc4vmYggW3PFJDnM3Y7YKzDUvE2J8MnKwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFtQ03SNhASoqt9kYvY8plVhMkZsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMGQzZWRlMzktNzlkYS0z
YmU3LWI5YWUtZjg5NGQ0YTRmYzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmTEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAlq/ojWy1YS204ZDOefaVsyS6VJy23qNro/o01vi63zeytj8il7x2G4o6
Kmbg+2BtaFn5p2IKeSXJ9lKGbde4tTbEkfzZsV0bddLjsBvaB1jikyS56Mtv0JGs
jVBSEqyJYgbcAPbB547pOcWlKoWa6tDAStx+18L4f885K819BmwibbYDAE+9wqUO
d09zf7wo4Keue6wmSZzJyS3m81/jNokSQP+X1SfuBZwOXNH+GWcY/sj5C3Ys8SBR
EYWFl40VkEhYsNyQKcKIPxz3+y2je6mdZSs6puhlSvFqUQrk4WQbqN8UwONmPzAj
zONWJ6/YGHdssVbDrHuBqG12d8uRjg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:07:44 2025 by rpki-client