Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/25d3fd25-a68e-36b7-86d8-f6342fb3c7ac.roa
File: 25d3fd25-a68e-36b7-86d8-f6342fb3c7ac.roa (raw, json)
Hash identifier: UGYwU7k49MxlSyFAoPopOPhkNQVna1JS7aakPi+zlbU=
Subject key identifier: 39:C0:CA:62:55:2F:22:F7:AA:E8:49:83:B3:A2:AD:19:0B:A3:FB:6B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840758F7E2AF6FEE5B1B5B958C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/25d3fd25-a68e-36b7-86d8-f6342fb3c7ac.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Wed 08 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 158.141.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:75:8f:7e:2a:f6:fe:e5:b1:b5:b9:58:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Feb 8 05:00:00 2023 GMT
Subject: CN=19801af7-4e61-401d-8769-570c193caf41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e4:b8:d4:5b:f0:64:eb:cc:7a:53:07:a0:a3:
ad:1b:28:c8:c4:c0:4f:37:d9:51:80:09:f2:a6:51:
23:04:fa:bf:2e:05:a4:8d:15:03:d9:9e:36:f0:cf:
e5:67:b9:54:3d:25:22:8f:74:55:8e:49:7b:e9:21:
d0:9e:78:29:19:d2:fc:1e:ba:6a:82:45:05:94:83:
eb:2e:26:f7:59:a8:9e:9e:69:a6:d3:48:56:9f:3d:
79:ed:02:14:94:1b:46:73:e6:a7:f7:cf:62:d6:e0:
de:e2:7c:a9:cd:51:14:d0:ed:da:95:11:ab:7a:20:
25:ea:cc:41:ce:d5:20:a1:76:4e:35:2c:11:65:06:
0a:77:0a:ea:cd:57:46:1d:25:42:e9:9a:e8:ce:75:
cf:4c:4a:02:e4:70:56:cd:fc:14:25:61:57:a1:08:
6d:07:98:54:90:0f:d7:16:ee:fe:8d:e9:6f:4a:69:
f7:91:d1:e8:7f:8d:14:e8:96:95:f6:c9:c3:e5:04:
91:81:93:a8:0f:ad:44:e2:5a:d5:b6:6b:71:40:9f:
ca:a6:a3:2a:3c:c5:da:73:e8:11:2f:b5:5d:65:36:
81:c8:75:00:45:c8:6b:ae:38:60:82:db:46:db:b6:
0a:0d:fa:73:83:04:ae:e6:cb:46:c3:71:a4:88:aa:
20:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C0:CA:62:55:2F:22:F7:AA:E8:49:83:B3:A2:AD:19:0B:A3:FB:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/25d3fd25-a68e-36b7-86d8-f6342fb3c7ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
158.141.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:04:a9:6e:c8:5b:f9:dd:cb:c6:5c:07:6c:dc:0f:03:92:4d:
4d:5f:b1:81:86:06:e4:8d:90:13:27:d9:40:87:a1:34:39:a9:
5e:14:12:dd:b3:33:a8:81:28:a8:92:1f:8f:7e:a7:f3:fc:d8:
7b:1a:b7:4c:c2:97:d8:e3:27:1f:d6:d6:98:0d:92:8c:54:0b:
3a:da:ee:01:7b:6c:6c:09:88:40:1f:b5:17:a0:1f:4b:2e:00:
04:d5:bf:c7:36:d4:bc:10:41:a8:ce:e2:85:3f:37:25:0e:36:
f1:76:0c:0e:13:20:4f:56:37:b4:92:30:60:06:59:52:3d:dd:
eb:25:ac:7e:34:05:35:e6:4d:87:73:23:62:ca:64:01:74:25:
fd:09:2f:39:b6:63:4e:29:8c:fc:42:9f:6e:8e:ca:ae:57:ed:
97:f3:ad:0d:7c:d0:cb:12:6b:d5:70:b1:a6:34:bc:fe:15:e5:
dc:a2:99:9f:6d:ce:83:44:da:ea:e9:94:1e:45:0b:82:f8:0f:
39:78:e9:63:05:4a:05:90:71:20:0a:26:5e:a2:32:1d:a0:05:
9b:c6:6b:38:16:48:bb:45:60:48:90:fc:3b:cb:24:15:c4:7f:
eb:49:b7:ec:fc:2e:ee:2e:85:b9:9c:c9:34:c9:14:80:d2:c6:
9b:27:f6:ce
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEB1j34q9v7lsbW5WMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEwMzEyMDAwMFoXDTIzMDIwODA1MDAwMFowLzEtMCsGA1UEAxMk
MTk4MDFhZjctNGU2MS00MDFkLTg3NjktNTcwYzE5M2NhZjQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuS41FvwZOvMelMHoKOtGyjIxMBPN9lRgAny
plEjBPq/LgWkjRUD2Z428M/lZ7lUPSUij3RVjkl76SHQnngpGdL8HrpqgkUFlIPr
Lib3Waienmmm00hWnz157QIUlBtGc+an989i1uDe4nypzVEU0O3alRGreiAl6sxB
ztUgoXZONSwRZQYKdwrqzVdGHSVC6ZroznXPTEoC5HBWzfwUJWFXoQhtB5hUkA/X
Fu7+jelvSmn3kdHof40U6JaV9snD5QSRgZOoD61E4lrVtmtxQJ/KpqMqPMXac+gR
L7VdZTaByHUARchrrjhggttG27YKDfpzgwSu5stGw3GkiKogIQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDnAymJVLyL3quhJg7OirRkLo/trMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMjVkM2ZkMjUtYTY4ZS0z
NmI3LTg2ZDgtZjYzNDJmYjNjN2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAno0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPwSpbshb+d3LxlwHbNwPA5JNTV+xgYYG5I2QEyfZQIehNDmpXhQS3bMz
qIEoqJIfj36n8/zYexq3TMKX2OMnH9bWmA2SjFQLOtruAXtsbAmIQB+1F6AfSy4A
BNW/xzbUvBBBqM7ihT83JQ428XYMDhMgT1Y3tJIwYAZZUj3d6yWsfjQFNeZNh3Mj
YspkAXQl/QkvObZjTimM/EKfbo7Krlftl/OtDXzQyxJr1XCxpjS8/hXl3KKZn23O
g0Ta6umUHkULgvgPOXjpYwVKBZBxIAomXqIyHaAFm8ZrOBZIu0VgSJD8O8skFcR/
60m37Pwu7i6FuZzJNMkUgNLGmyf2zg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:28:46 2025 by rpki-client