Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3763bf23-db44-3fa0-a3d0-cea6195a9a75.roa
File: 3763bf23-db44-3fa0-a3d0-cea6195a9a75.roa (raw, json)
Hash identifier: +r6QYVh9oRXQhMnEge0WRo/XmH6P0yQvCw9C3qrt1Xg=
Subject key identifier: 74:08:AF:BF:02:C1:86:C8:A3:F1:53:AF:F4:88:5A:70:30:51:50:14
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D81ABB1D28C031933BD26D880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3763bf23-db44-3fa0-a3d0-cea6195a9a75.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 167.149.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:ab:b1:d2:8c:03:19:33:bd:26:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=66b70d90-072d-41c0-a48d-470ab4054880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ad:59:ee:c3:ea:73:54:c8:95:30:fe:a7:a7:
55:6a:51:9b:ef:43:bf:ec:f3:60:d4:33:7c:20:b2:
3c:d1:3f:f3:a7:a2:e0:b6:c8:cf:50:b5:cc:40:ec:
50:b5:ee:a5:e4:e9:43:47:48:db:8b:36:82:21:fd:
d4:c7:8d:01:91:2f:1e:27:8b:9e:e1:7f:9b:55:69:
6e:1f:8f:bb:74:61:91:21:51:54:7d:43:ed:85:b1:
dc:96:f9:d2:6e:51:d1:ea:61:d2:7f:ac:6b:56:73:
63:3f:15:19:59:b0:46:c3:65:42:8c:a4:64:77:c1:
bb:a4:1b:04:d4:7f:d3:5a:79:7f:81:45:e1:58:a4:
f0:6d:76:1e:b7:e1:b2:99:86:ca:64:3d:d7:49:84:
8c:15:d0:c3:65:e2:08:d5:2c:7d:8a:66:10:e9:6c:
0c:af:f9:f3:9a:55:61:fa:ac:ee:11:95:45:e4:2f:
1a:65:31:8f:46:91:ed:fb:8d:2f:41:92:d2:8f:8c:
60:61:fb:50:03:fe:07:e2:1f:0a:c0:19:59:ac:b2:
ee:33:78:ab:68:a1:c6:e7:85:1c:41:85:a6:40:24:
71:04:6b:74:43:da:79:83:74:48:17:22:20:b2:6a:
0d:eb:fc:5e:81:d6:88:f6:63:4c:4f:8f:99:01:17:
be:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:08:AF:BF:02:C1:86:C8:A3:F1:53:AF:F4:88:5A:70:30:51:50:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3763bf23-db44-3fa0-a3d0-cea6195a9a75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
167.149.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:90:4c:0b:09:80:62:c2:21:00:80:5a:d1:69:94:7d:c6:4f:
75:dc:05:58:e5:77:64:26:ee:43:ad:db:03:71:d7:7a:61:e6:
2a:2d:fd:a3:5b:cb:4e:f4:58:b4:f3:30:89:cd:59:8f:b3:97:
f0:4f:47:14:3f:ed:eb:3c:18:93:9e:98:ba:1a:7d:d2:0a:bc:
d0:2a:88:e5:3a:a1:c6:bf:bc:c2:7a:5b:30:75:f6:02:45:ec:
f2:5d:6a:09:d9:72:39:25:99:d7:13:ec:3a:fb:0c:b4:f2:ce:
1d:f0:e3:71:a1:51:8b:11:8c:02:76:6c:9e:8d:65:27:24:c2:
65:a9:25:6d:da:e1:0e:c4:ef:10:40:30:63:38:08:c9:3f:6f:
d4:29:45:48:bf:0f:5a:ac:70:96:36:62:20:c1:08:5a:47:78:
0c:b1:d1:1a:f0:15:9c:a6:41:ce:26:b9:68:bc:7f:dd:f3:10:
2f:af:2f:4f:76:a7:94:e1:a7:01:96:cf:93:d2:aa:7c:fd:a7:
74:c5:aa:0c:f3:46:cf:fa:5c:59:0d:86:81:79:72:23:fd:79:
d9:b7:6f:aa:31:8b:f9:37:0e:d9:34:7f:c6:f2:80:c3:c3:da:
2a:a1:3c:f3:ab:3d:4d:01:4f:da:cf:ea:f9:bc:45:9b:8d:33:
30:7d:38:a9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2Bq7HSjAMZM70m2IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQwODA0MDAwMFoXDTIyMDUxMzA0MDAwMFowLzEtMCsGA1UEAxMk
NjZiNzBkOTAtMDcyZC00MWMwLWE0OGQtNDcwYWI0MDU0ODgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAya1Z7sPqc1TIlTD+p6dValGb70O/7PNg1DN8
ILI80T/zp6LgtsjPULXMQOxQte6l5OlDR0jbizaCIf3Ux40BkS8eJ4ue4X+bVWlu
H4+7dGGRIVFUfUPthbHclvnSblHR6mHSf6xrVnNjPxUZWbBGw2VCjKRkd8G7pBsE
1H/TWnl/gUXhWKTwbXYet+GymYbKZD3XSYSMFdDDZeII1Sx9imYQ6WwMr/nzmlVh
+qzuEZVF5C8aZTGPRpHt+40vQZLSj4xgYftQA/4H4h8KwBlZrLLuM3iraKHG54Uc
QYWmQCRxBGt0Q9p5g3RIFyIgsmoN6/xegdaI9mNMT4+ZARe+7wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHQIr78CwYbIo/FTr/SIWnAwUVAUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMzc2M2JmMjMtZGI0NC0z
ZmEwLWEzZDAtY2VhNjE5NWE5YTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAp5UwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAEZBMCwmAYsIhAIBa0WmUfcZPddwFWOV3ZCbuQ63bA3HXemHmKi39o1vL
TvRYtPMwic1Zj7OX8E9HFD/t6zwYk56Yuhp90gq80CqI5Tqhxr+8wnpbMHX2AkXs
8l1qCdlyOSWZ1xPsOvsMtPLOHfDjcaFRixGMAnZsno1lJyTCZaklbdrhDsTvEEAw
YzgIyT9v1ClFSL8PWqxwljZiIMEIWkd4DLHRGvAVnKZBzia5aLx/3fMQL68vT3an
lOGnAZbPk9KqfP2ndMWqDPNGz/pcWQ2GgXlyI/152bdvqjGL+TcO2TR/xvKAw8Pa
KqE886s9TQFP2s/q+bxFm40zMH04qQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:10:30 2025 by rpki-client