Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1524f0aa-2f49-3dd4-9cd2-ba02fbbd5aec.roa
File: 1524f0aa-2f49-3dd4-9cd2-ba02fbbd5aec.roa (raw, json)
Hash identifier: FMeAIPRt1yoYUVtRymxI7SD3+LPiqBCmVQtj1gIS+Vg=
Subject key identifier: 91:38:AA:7B:93:CC:AC:B5:42:71:FE:BB:32:84:1C:6A:BE:B3:9C:40
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E46BF84843677EB5764421C10
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1524f0aa-2f49-3dd4-9cd2-ba02fbbd5aec.roa
Signing time: Fri 17 Jun 2022 12:00:00 +0000
ROA not before: Fri 17 Jun 2022 12:00:00 +0000
ROA not after: Sat 23 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 168.163.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:46:bf:84:84:36:77:eb:57:64:42:1c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 17 12:00:00 2022 GMT
Not After : Jul 23 04:00:00 2022 GMT
Subject: CN=941bc6c5-b414-4545-ae72-8a3b094c5c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:e6:b0:96:5c:dd:1c:35:ec:25:b9:26:86:
c1:32:01:19:71:20:a7:00:84:62:55:42:c0:98:b9:
e6:c0:07:ac:2c:57:19:6b:8b:7a:77:df:11:f3:95:
36:f4:a6:33:cd:cd:e7:ca:36:73:fd:04:5e:e5:72:
17:fd:fb:e8:ef:0a:3c:a5:4d:6b:8a:2f:7d:cd:4d:
7d:09:f0:d1:3f:91:f1:82:95:db:37:14:fa:9a:6e:
39:8b:a2:5e:76:26:b3:59:6a:5a:78:2a:a2:6c:be:
4b:b0:e9:5c:0c:28:99:fc:af:9a:fc:30:b0:ac:ba:
cc:f3:6a:11:35:7f:8c:92:e6:42:d9:7b:04:a9:a8:
9f:89:7f:db:eb:12:46:f8:4a:06:7a:19:75:7f:29:
e9:17:8d:84:7e:2f:17:2a:77:e5:7a:09:ee:a4:ba:
d4:a8:79:a6:4a:d7:ac:19:89:1e:ac:71:42:e6:4d:
6f:de:dd:93:da:6d:9f:b4:ac:76:42:fe:32:31:45:
91:00:7a:cb:a2:bf:3a:6f:dc:05:b8:bb:d6:85:4a:
e7:b0:29:77:56:2e:bb:9f:1c:eb:87:eb:71:30:19:
77:18:27:5d:39:c8:49:5b:ff:80:b5:fa:9a:59:46:
a1:ae:ce:ae:35:1e:69:82:27:0c:00:02:ac:c9:c6:
8f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:38:AA:7B:93:CC:AC:B5:42:71:FE:BB:32:84:1C:6A:BE:B3:9C:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1524f0aa-2f49-3dd4-9cd2-ba02fbbd5aec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
168.163.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:e1:bc:d8:f3:72:d2:9f:ba:1d:7a:54:a3:9c:d4:4f:22:26:
e7:b9:88:46:68:bb:0c:3e:ca:31:57:67:06:7b:cc:26:74:1c:
cc:38:a3:bc:5a:17:e4:92:60:56:c9:6c:90:19:e1:db:c4:12:
a8:c6:b3:be:ec:d0:d1:b3:ca:03:4a:64:f8:ce:ce:83:bc:42:
44:24:80:d4:3d:19:f3:2e:8a:a7:6f:a7:eb:15:bb:ab:51:d9:
cc:b7:50:ea:0b:75:8d:8e:ab:56:42:71:98:eb:6e:66:fa:f0:
e4:df:10:d8:12:d4:6f:49:60:95:81:e2:98:48:43:8f:40:9c:
de:df:bd:ab:80:c5:4c:cf:6e:e6:4a:26:1d:cb:e2:13:e9:49:
c5:01:6b:18:c1:93:bc:2b:9f:dd:a9:dc:e6:e6:c9:04:40:e0:
40:f9:62:db:f2:64:37:a6:05:41:32:d8:09:cd:1a:bc:10:9c:
4e:63:b3:b3:5e:46:34:2d:3c:69:b4:30:b7:06:00:58:ea:90:
35:06:67:b7:a8:15:f8:eb:3d:02:54:d6:d7:20:32:ca:91:1f:
8f:8c:54:41:ac:c9:38:5b:b6:53:11:49:aa:e6:bd:6c:13:e8:
8d:a7:33:e9:ac:7e:83:64:4a:c7:50:46:c1:de:68:a4:e7:61:
d9:ad:a8:95
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5Gv4SENnfrV2RCHBAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYxNzEyMDAwMFoXDTIyMDcyMzA0MDAwMFowLzEtMCsGA1UEAxMk
OTQxYmM2YzUtYjQxNC00NTQ1LWFlNzItOGEzYjA5NGM1Yzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmjmsJZc3Rw17CW5JobBMgEZcSCnAIRiVULA
mLnmwAesLFcZa4t6d98R85U29KYzzc3nyjZz/QRe5XIX/fvo7wo8pU1rii99zU19
CfDRP5HxgpXbNxT6mm45i6JediazWWpaeCqibL5LsOlcDCiZ/K+a/DCwrLrM82oR
NX+MkuZC2XsEqaifiX/b6xJG+EoGehl1fynpF42Efi8XKnflegnupLrUqHmmStes
GYkerHFC5k1v3t2T2m2ftKx2Qv4yMUWRAHrLor86b9wFuLvWhUrnsCl3Vi67nxzr
h+txMBl3GCddOchJW/+AtfqaWUahrs6uNR5pgicMAAKsycaPbwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJE4qnuTzKy1QnH+uzKEHGq+s5xAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMTUyNGYwYWEtMmY0OS0z
ZGQ0LTljZDItYmEwMmZiYmQ1YWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqKMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAt+G82PNy0p+6HXpUo5zUTyIm57mIRmi7DD7KMVdnBnvMJnQczDijvFoX
5JJgVslskBnh28QSqMazvuzQ0bPKA0pk+M7Og7xCRCSA1D0Z8y6Kp2+n6xW7q1HZ
zLdQ6gt1jY6rVkJxmOtuZvrw5N8Q2BLUb0lglYHimEhDj0Cc3t+9q4DFTM9u5kom
HcviE+lJxQFrGMGTvCuf3anc5ubJBEDgQPli2/JkN6YFQTLYCc0avBCcTmOzs15G
NC08abQwtwYAWOqQNQZnt6gV+Os9AlTW1yAyypEfj4xUQazJOFu2UxFJqua9bBPo
jacz6ax+g2RKx1BGwd5opOdh2a2olQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:45:58 2025 by rpki-client