Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/280deac9-0625-302f-a6ee-1f7d2d9cbbc9.roa
File: 280deac9-0625-302f-a6ee-1f7d2d9cbbc9.roa (raw, json)
Hash identifier: ugAb2ZZmyxiayLbyTxX7RO/zHC0n/zwqpGdxwZzbRkQ=
Subject key identifier: B5:D7:2F:20:04:CE:9D:44:67:BA:93:EA:16:2A:85:EB:28:1F:6C:04
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840058327B9501FF3F5927A51C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/280deac9-0625-302f-a6ee-1f7d2d9cbbc9.roa
Signing time: Thu 24 Nov 2022 12:00:00 +0000
ROA not before: Thu 24 Nov 2022 12:00:00 +0000
ROA not after: Fri 30 Dec 2022 05:00:00 +0000
asID: 3356
IP address blocks: 161.188.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:05:83:27:b9:50:1f:f3:f5:92:7a:51:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 24 12:00:00 2022 GMT
Not After : Dec 30 05:00:00 2022 GMT
Subject: CN=c3419574-bdbf-4702-ab6a-644111a7f2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:23:f3:3e:4b:55:c6:46:aa:ad:1a:4e:63:
34:2d:85:e6:1e:cc:8f:3b:c7:ea:e5:0d:86:c5:82:
05:77:cc:62:a2:33:bd:b6:8c:40:19:2a:91:98:bc:
8f:d6:d6:55:71:ff:cf:c9:2a:9a:70:ad:71:c3:2f:
6b:11:2e:ed:b4:e9:0c:56:10:cc:60:c2:f6:61:ef:
72:72:5d:a7:2c:d3:5f:58:81:8a:e6:da:cc:02:15:
43:94:3b:43:69:aa:1e:7a:16:4d:f9:33:e8:59:c8:
ef:3b:59:ca:6c:e3:ec:dd:f0:b2:95:7d:36:e9:f8:
0c:a7:63:c8:7b:9c:ff:fa:59:6e:de:ae:f0:b3:13:
ea:b1:0c:b5:33:ae:d6:a4:ee:29:c5:94:4f:4d:06:
67:17:4f:30:30:3e:8d:cf:fa:4a:82:69:ea:a0:e4:
1a:93:33:79:29:ef:4a:33:28:91:79:ea:91:97:74:
04:a4:e4:df:6c:3b:8a:3c:52:df:dd:c0:87:aa:8c:
2b:08:50:2a:76:b4:22:86:aa:2f:de:56:3f:8b:cc:
59:12:4e:26:c8:55:4e:a8:a8:a2:96:03:0b:24:1a:
77:63:1a:e8:86:04:90:c9:f7:a8:d2:ef:8c:a9:97:
48:dd:84:5a:ab:71:12:7f:73:89:5c:62:df:ea:ab:
1b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D7:2F:20:04:CE:9D:44:67:BA:93:EA:16:2A:85:EB:28:1F:6C:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/280deac9-0625-302f-a6ee-1f7d2d9cbbc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:58:d4:78:88:a9:cc:da:15:a1:16:5e:fd:82:42:f2:d3:1b:
1b:07:78:f2:04:33:b3:76:97:d9:ea:40:e7:1f:e1:ce:0f:1c:
c2:c9:10:33:79:72:3e:d7:b2:52:07:35:da:cb:94:28:62:52:
45:fa:d5:a1:69:61:cd:b9:3a:33:0c:a0:eb:d3:20:96:5d:a4:
fe:9f:75:12:3b:bd:aa:ca:ce:b9:e3:ee:d7:e1:73:24:5f:09:
d7:20:5f:0d:5b:3d:96:b5:5e:c6:3b:ef:4a:d6:02:12:7f:b5:
64:6b:4e:ce:80:28:de:d8:58:1a:71:d2:53:7d:71:67:6b:0d:
9e:39:93:f7:b0:d3:c1:71:e1:dc:5f:84:12:ec:12:3c:39:37:
07:6a:83:ed:cb:0a:58:9d:d3:c3:77:90:f6:3a:44:12:d8:6f:
56:bf:7e:48:05:76:90:5e:f4:e2:4c:35:c2:73:9d:f1:fa:14:
01:6b:05:7a:58:2d:41:bc:67:ad:b6:17:10:7b:7d:da:cd:33:
fa:b1:3d:a0:e1:98:34:ef:84:87:78:c6:96:62:c1:e7:f1:df:
30:76:16:c5:06:5e:79:3b:06:e9:d8:20:87:bf:4e:f9:a4:19:
5e:3c:e8:5c:e8:40:41:4f:a2:12:50:48:92:6c:00:bc:4a:24:
11:2e:7a:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEAFgye5UB/z9ZJ6UcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEyNDEyMDAwMFoXDTIyMTIzMDA1MDAwMFowLzEtMCsGA1UEAxMk
YzM0MTk1NzQtYmRiZi00NzAyLWFiNmEtNjQ0MTExYTdmMmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApioj8z5LVcZGqq0aTmM0LYXmHsyPO8fq5Q2G
xYIFd8xiojO9toxAGSqRmLyP1tZVcf/PySqacK1xwy9rES7ttOkMVhDMYML2Ye9y
cl2nLNNfWIGK5trMAhVDlDtDaaoeehZN+TPoWcjvO1nKbOPs3fCylX026fgMp2PI
e5z/+llu3q7wsxPqsQy1M67WpO4pxZRPTQZnF08wMD6Nz/pKgmnqoOQakzN5Ke9K
MyiReeqRl3QEpOTfbDuKPFLf3cCHqowrCFAqdrQihqov3lY/i8xZEk4myFVOqKii
lgMLJBp3YxrohgSQyfeo0u+MqZdI3YRaq3ESf3OJXGLf6qsbYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLXXLyAEzp1EZ7qT6hYqhesoH2wEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMjgwZGVhYzktMDYyNS0z
MDJmLWE2ZWUtMWY3ZDJkOWNiYmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDobzYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABVY1HiIqczaFaEWXv2CQvLTGxsHePIEM7N2l9nqQOcf4c4PHMLJEDN5
cj7XslIHNdrLlChiUkX61aFpYc25OjMMoOvTIJZdpP6fdRI7varKzrnj7tfhcyRf
CdcgXw1bPZa1XsY770rWAhJ/tWRrTs6AKN7YWBpx0lN9cWdrDZ45k/ew08Fx4dxf
hBLsEjw5Nwdqg+3LClid08N3kPY6RBLYb1a/fkgFdpBe9OJMNcJznfH6FAFrBXpY
LUG8Z622FxB7fdrNM/qxPaDhmDTvhId4xpZiwefx3zB2FsUGXnk7BunYIIe/Tvmk
GV486FzoQEFPohJQSJJsALxKJBEuej4=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:50:44 2025 by rpki-client