Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/24a0969e-d617-30d4-a52b-5ecdc5dc1698.roa
File: 24a0969e-d617-30d4-a52b-5ecdc5dc1698.roa (raw, json)
Hash identifier: pgNNm4HpKYfcVVFG3ee6dK/Ba/AGLTXSW2GgVA9jPa0=
Subject key identifier: 66:79:29:77:D3:57:DB:8E:D1:0F:66:E6:72:AE:41:AE:34:D9:97:22
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EB355C0A01E21F5EAF90232C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/24a0969e-d617-30d4-a52b-5ecdc5dc1698.roa
Signing time: Tue 26 Jul 2022 12:00:00 +0000
ROA not before: Tue 26 Jul 2022 12:00:00 +0000
ROA not after: Wed 31 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 155.38.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b3:55:c0:a0:1e:21:f5:ea:f9:02:32:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 26 12:00:00 2022 GMT
Not After : Aug 31 04:00:00 2022 GMT
Subject: CN=566bcb37-225d-4d74-abfd-2d676f3be88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:c8:0b:a4:00:f4:3f:25:77:cd:94:90:e7:
64:c6:bf:ba:f1:f1:61:a7:f4:ae:10:a0:40:18:37:
76:ae:ad:6a:db:2c:3d:c0:5d:d8:59:59:27:4a:97:
75:57:27:e3:2e:3c:2b:f3:4f:ed:30:50:d5:bb:cb:
81:ad:83:1f:27:76:05:4c:4c:66:c2:cb:2d:3b:0b:
6e:4d:41:27:2d:e7:18:34:19:29:6a:e1:c7:c6:9c:
4f:d9:ca:03:b8:fb:50:50:c5:81:74:5f:c9:5e:63:
53:99:ce:8d:ad:69:1f:be:a2:4a:49:db:61:25:81:
d6:2a:4c:c3:35:4e:fd:c7:2e:b6:7a:b4:7e:5f:55:
b9:7d:a6:a0:91:35:82:58:49:66:ca:1f:00:6f:b0:
2d:bf:24:a7:8b:23:dc:f1:f4:71:76:a1:54:3f:53:
0f:b3:4d:bb:9f:ed:10:03:49:32:56:8b:6b:3a:36:
68:6d:24:8c:73:7d:73:1a:03:d0:c5:8e:9f:2b:35:
4f:26:3d:3f:c8:de:39:67:47:0d:0f:83:ac:15:b5:
f4:ee:f6:c0:87:cc:5f:b7:9f:38:45:b4:20:ad:76:
d5:22:ca:30:cd:1c:0e:cd:a6:d0:51:1e:42:a6:85:
65:78:29:c2:9c:b3:7d:c5:fe:39:9d:66:09:02:a3:
bf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:79:29:77:D3:57:DB:8E:D1:0F:66:E6:72:AE:41:AE:34:D9:97:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/24a0969e-d617-30d4-a52b-5ecdc5dc1698.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.38.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:94:8d:3b:03:c4:4b:86:90:d8:e2:b6:23:87:e6:3e:8d:90:
64:5d:3d:1a:6d:38:38:38:5f:f9:5a:5f:15:25:33:c8:7c:c4:
86:b7:d9:b5:8b:e2:99:0c:45:b0:8c:ca:17:cf:2c:fe:e4:87:
bb:92:a9:b1:b0:b0:85:23:aa:20:9b:15:09:25:d8:92:f0:83:
73:ca:f8:fb:7e:6b:79:3b:69:05:75:ad:03:dd:86:9b:bf:e8:
34:8f:68:91:a5:a7:ce:40:43:75:28:e2:fb:c7:2f:38:c8:bb:
f3:c5:99:12:7f:b6:66:22:cc:a6:ff:d7:48:4f:52:ac:f8:af:
cb:8c:0a:50:44:17:75:54:bd:fd:e3:cd:9a:16:19:97:a6:1a:
33:d9:d8:1e:fd:08:57:cb:50:71:8f:10:56:f7:f1:0d:28:10:
e0:a2:5f:fd:18:0e:41:14:db:25:bf:f9:28:bf:8f:19:11:20:
5b:e9:a1:84:f0:2b:2e:64:5e:0e:e0:47:c3:bd:37:ea:19:a8:
86:55:68:8d:5f:c9:19:20:4f:75:ad:15:b2:67:85:0b:05:d0:
a2:62:aa:66:fc:8d:ac:fb:44:61:4a:8f:0e:6b:52:ff:c1:f9:
be:81:d7:ab:de:30:ea:9f:c8:4c:a5:56:ec:a8:54:ac:ea:fe:
b0:d4:3c:ab
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6zVcCgHiH16vkCMsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcyNjEyMDAwMFoXDTIyMDgzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NTY2YmNiMzctMjI1ZC00ZDc0LWFiZmQtMmQ2NzZmM2JlODhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMHIC6QA9D8ld82UkOdkxr+68fFhp/SuEKBA
GDd2rq1q2yw9wF3YWVknSpd1VyfjLjwr80/tMFDVu8uBrYMfJ3YFTExmwsstOwtu
TUEnLecYNBkpauHHxpxP2coDuPtQUMWBdF/JXmNTmc6NrWkfvqJKSdthJYHWKkzD
NU79xy62erR+X1W5faagkTWCWElmyh8Ab7AtvySniyPc8fRxdqFUP1MPs027n+0Q
A0kyVotrOjZobSSMc31zGgPQxY6fKzVPJj0/yN45Z0cND4OsFbX07vbAh8xft584
RbQgrXbVIsowzRwOzabQUR5CpoVleCnCnLN9xf45nWYJAqO/CQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGZ5KXfTV9uO0Q9m5nKuQa402ZciMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMjRhMDk2OWUtZDYxNy0z
MGQ0LWE1MmItNWVjZGM1ZGMxNjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmyYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAdJSNOwPES4aQ2OK2I4fmPo2QZF09Gm04ODhf+VpfFSUzyHzEhrfZtYvi
mQxFsIzKF88s/uSHu5KpsbCwhSOqIJsVCSXYkvCDc8r4+35reTtpBXWtA92Gm7/o
NI9okaWnzkBDdSji+8cvOMi788WZEn+2ZiLMpv/XSE9SrPivy4wKUEQXdVS9/ePN
mhYZl6YaM9nYHv0IV8tQcY8QVvfxDSgQ4KJf/RgOQRTbJb/5KL+PGREgW+mhhPAr
LmReDuBHw7036hmohlVojV/JGSBPda0VsmeFCwXQomKqZvyNrPtEYUqPDmtS/8H5
voHXq94w6p/ITKVW7KhUrOr+sNQ8qw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:08 2025 by rpki-client