Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/36abf09d-0fa5-3afa-838c-57681bc7c40e.roa
File: 36abf09d-0fa5-3afa-838c-57681bc7c40e.roa (raw, json)
Hash identifier: C0DMYOvEl2GST3/jWiMcy3Oc8TBQIpciyv5CgrHRHQE=
Subject key identifier: 1D:29:53:92:C4:4E:AB:40:AB:D0:44:82:09:22:DD:EB:27:C2:24:85
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B04D681B103A751E10254A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/36abf09d-0fa5-3afa-838c-57681bc7c40e.roa
Signing time: Tue 24 Jan 2023 12:00:00 +0000
ROA not before: Tue 24 Jan 2023 12:00:00 +0000
ROA not after: Wed 01 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 158.221.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b0:4d:68:1b:10:3a:75:1e:10:25:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 24 12:00:00 2023 GMT
Not After : Mar 1 05:00:00 2023 GMT
Subject: CN=201c83ca-e9ae-48c6-81ed-d375b2220900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1e:ef:bd:47:df:d4:11:4b:cc:4c:01:1c:51:
15:e9:2a:53:0d:7e:be:29:61:42:37:5f:5c:3f:75:
54:50:36:da:4a:02:3b:f8:72:76:f3:69:12:5c:bd:
22:17:da:fe:21:13:a0:24:2e:c4:3f:46:c7:5d:14:
30:b4:c5:55:f1:14:9a:5b:0e:ff:86:f7:cc:32:77:
9b:21:3e:65:f5:3b:40:fe:06:64:0d:8c:ab:6c:31:
e2:40:8c:d5:9e:ad:2f:94:d4:fd:34:4e:cc:a2:8e:
c1:a1:c3:17:4f:2e:c8:75:68:e1:3a:93:70:6a:74:
85:5c:89:de:c2:e5:bb:46:5b:d6:ea:e3:a4:8e:98:
e4:2d:43:af:aa:bf:58:20:c1:9f:ee:ce:32:ae:1e:
1f:cb:ad:1a:35:d7:29:21:b0:ce:0b:2b:39:9c:45:
f0:38:00:d3:f5:64:d0:5c:12:06:43:c3:f8:c1:6b:
f3:9a:9b:dd:be:bd:c5:89:b9:5a:0e:ae:ea:c6:87:
fa:31:21:dd:2c:b2:db:c0:3c:0f:6f:f3:44:aa:7e:
5c:25:39:a9:42:80:50:4b:c4:f8:7f:4b:6a:16:78:
5c:0a:31:91:15:48:e0:b0:d8:70:13:2e:da:55:63:
e4:5a:be:02:77:7e:84:9a:fb:a9:91:33:1a:98:ae:
df:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:29:53:92:C4:4E:AB:40:AB:D0:44:82:09:22:DD:EB:27:C2:24:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/36abf09d-0fa5-3afa-838c-57681bc7c40e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
158.221.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:dd:bc:75:72:64:c6:d7:62:0f:5d:74:69:b0:9d:0f:5d:c7:
96:ce:5e:16:f0:43:f8:a3:41:08:b9:7e:4c:cd:b6:b1:3f:c4:
59:67:91:9c:8d:44:2c:48:59:8f:b7:b4:84:2d:c0:2d:91:d8:
2f:5a:e9:3e:42:1d:28:27:ac:1b:63:28:39:fd:bc:e3:c0:8f:
1a:25:b8:f1:5d:16:09:75:c6:56:5a:67:7f:fb:c6:b1:e9:5a:
c9:c2:04:fe:e7:f0:52:e0:1a:81:57:05:98:b1:28:97:0e:a3:
3f:3a:89:db:f4:9b:8e:65:24:cb:a0:2f:84:29:95:5c:94:1c:
f9:f2:78:06:5e:a6:e2:ae:62:91:2a:e7:d6:a0:af:d6:d8:8a:
87:51:70:37:8f:c3:63:71:c9:f1:44:f4:67:d2:3e:e4:2f:f0:
42:3d:83:96:23:d9:16:35:cf:4a:ac:3c:dd:b5:4c:6b:d9:47:
9c:2a:18:86:14:87:c8:f9:4c:d8:20:e6:ea:ff:49:09:f4:20:
d6:0e:49:c8:5d:4d:cb:ad:e3:97:0f:96:4e:e4:d3:cb:e3:2e:
98:26:f5:94:cb:0d:e9:f2:17:3c:66:55:5c:4c:d9:34:1a:85:
19:e9:36:74:a9:4a:20:f0:19:dd:ac:51:d9:eb:b9:c9:0e:7a:
86:ad:3c:92
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECwTWgbEDp1HhAlSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEyNDEyMDAwMFoXDTIzMDMwMTA1MDAwMFowLzEtMCsGA1UEAxMk
MjAxYzgzY2EtZTlhZS00OGM2LTgxZWQtZDM3NWIyMjIwOTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh7vvUff1BFLzEwBHFEV6SpTDX6+KWFCN19c
P3VUUDbaSgI7+HJ282kSXL0iF9r+IROgJC7EP0bHXRQwtMVV8RSaWw7/hvfMMneb
IT5l9TtA/gZkDYyrbDHiQIzVnq0vlNT9NE7Moo7BocMXTy7IdWjhOpNwanSFXIne
wuW7RlvW6uOkjpjkLUOvqr9YIMGf7s4yrh4fy60aNdcpIbDOCys5nEXwOADT9WTQ
XBIGQ8P4wWvzmpvdvr3FiblaDq7qxof6MSHdLLLbwDwPb/NEqn5cJTmpQoBQS8T4
f0tqFnhcCjGRFUjgsNhwEy7aVWPkWr4Cd36EmvupkTMamK7f3wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFB0pU5LETqtAq9BEggki3esnwiSFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMzZhYmYwOWQtMGZhNS0z
YWZhLTgzOGMtNTc2ODFiYzdjNDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnt0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAtt28dXJkxtdiD110abCdD13Hls5eFvBD+KNBCLl+TM22sT/EWWeRnI1E
LEhZj7e0hC3ALZHYL1rpPkIdKCesG2MoOf2848CPGiW48V0WCXXGVlpnf/vGsela
ycIE/ufwUuAagVcFmLEolw6jPzqJ2/SbjmUky6AvhCmVXJQc+fJ4Bl6m4q5ikSrn
1qCv1tiKh1FwN4/DY3HJ8UT0Z9I+5C/wQj2DliPZFjXPSqw83bVMa9lHnCoYhhSH
yPlM2CDm6v9JCfQg1g5JyF1Ny63jlw+WTuTTy+MumCb1lMsN6fIXPGZVXEzZNBqF
Gek2dKlKIPAZ3axR2eu5yQ56hq08kg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:43:48 2025 by rpki-client