Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/396b9aa1-f5ad-382b-ae4a-ed32b9676521.roa
File: 396b9aa1-f5ad-382b-ae4a-ed32b9676521.roa (raw, json)
Hash identifier: RuJTvw/n89NHaigWQYfheZ09WZJ2/753JVz30SrSdUg=
Subject key identifier: AA:B9:2A:B4:81:42:FD:AC:24:F2:32:D2:87:41:16:88:CA:0C:93:9C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D6F1DE646036C16F1ED519FA0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/396b9aa1-f5ad-382b-ae4a-ed32b9676521.roa
Signing time: Fri 01 Apr 2022 04:00:00 +0000
ROA not before: Fri 01 Apr 2022 04:00:00 +0000
ROA not after: Fri 06 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 148.162.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:6f:1d:e6:46:03:6c:16:f1:ed:51:9f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 1 04:00:00 2022 GMT
Not After : May 6 04:00:00 2022 GMT
Subject: CN=73d544b5-3d8f-4909-91fa-3cfdb4c45bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:57:4b:5b:c2:ab:47:fc:a5:d6:b8:0d:c1:b9:
a2:9c:1e:e8:25:03:39:bb:5d:7d:db:a3:07:f8:e6:
4a:3a:0d:c1:64:f9:5b:6b:13:32:3f:ad:6d:d8:2d:
ae:13:48:c7:d9:3c:bf:e6:b4:6d:2e:6d:d7:ce:50:
db:d1:79:64:4e:06:2d:c0:a5:a3:04:a2:aa:ff:b4:
16:e5:48:91:97:71:43:17:b6:34:c5:35:c3:4c:36:
7e:8b:87:78:4f:b0:7f:13:f6:ad:ae:b8:2e:e9:f0:
c6:e9:f5:75:dc:4f:c4:06:bd:68:72:26:d9:db:c9:
e9:52:61:6f:7e:fd:92:cd:c7:87:78:ce:4c:e3:08:
f1:72:22:c2:29:01:e1:8d:7a:ef:4f:7d:21:56:23:
5f:c4:f2:09:dc:24:6b:3d:17:4f:61:32:50:bb:9e:
74:b8:bb:70:8e:b8:69:75:a0:ca:84:73:b7:91:44:
1e:f1:84:bf:c4:e6:71:a7:8d:7e:01:ec:9b:7b:99:
96:8c:01:5e:02:b4:9d:71:72:b3:6e:ec:fc:8e:3c:
48:a6:d9:c6:75:e1:b5:87:15:d4:77:c4:86:cb:4a:
fd:dd:89:e3:53:44:bd:3e:34:38:5b:51:d8:e7:f4:
9e:2d:a9:43:e3:64:58:cc:b8:00:5f:78:9e:52:05:
13:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B9:2A:B4:81:42:FD:AC:24:F2:32:D2:87:41:16:88:CA:0C:93:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/396b9aa1-f5ad-382b-ae4a-ed32b9676521.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
148.162.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:15:44:82:de:23:a9:bf:6f:96:e1:9f:ab:83:99:8d:13:87:
ed:04:57:c4:bf:db:cd:6a:c9:27:b2:b2:3d:a0:77:20:eb:41:
83:77:82:18:c0:d1:d3:96:94:f1:40:d1:5d:96:1f:ce:0c:ce:
e5:77:da:d6:23:7d:d0:78:4c:41:b7:0a:ce:50:64:46:66:ac:
89:e2:98:2f:83:ec:44:94:c2:6d:8b:3e:a0:4a:bf:7b:e6:42:
b9:76:05:22:50:fe:09:cb:a2:1f:ac:90:44:0e:92:79:b4:66:
7e:12:9b:08:48:76:79:60:a8:e5:82:79:bf:7a:ab:77:a5:c7:
be:94:ab:98:72:d3:42:cf:27:60:bf:9d:b1:11:cd:98:8f:6a:
48:a2:cb:51:d0:43:9d:fd:56:89:bf:80:10:52:37:b0:d8:32:
74:c7:5c:75:f9:21:35:62:5c:48:de:46:2c:71:62:54:e4:f4:
20:12:3a:51:02:45:ac:70:b6:6d:cd:35:85:3e:23:68:88:0a:
38:1a:18:d9:cd:9e:94:11:1a:11:1a:f9:b3:1f:7b:0b:aa:88:
8c:3f:36:97:c4:34:11:54:bd:96:e4:57:a0:d5:fe:8a:59:b5:
2e:fc:0f:36:0d:e1:9c:69:53:f8:89:2c:bc:b2:43:ee:28:e2:
97:8f:7c:c4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1vHeZGA2wW8e1Rn6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQwMTA0MDAwMFoXDTIyMDUwNjA0MDAwMFowLzEtMCsGA1UEAxMk
NzNkNTQ0YjUtM2Q4Zi00OTA5LTkxZmEtM2NmZGI0YzQ1YmVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVdLW8KrR/yl1rgNwbminB7oJQM5u11926MH
+OZKOg3BZPlbaxMyP61t2C2uE0jH2Ty/5rRtLm3XzlDb0XlkTgYtwKWjBKKq/7QW
5UiRl3FDF7Y0xTXDTDZ+i4d4T7B/E/atrrgu6fDG6fV13E/EBr1ocibZ28npUmFv
fv2SzceHeM5M4wjxciLCKQHhjXrvT30hViNfxPIJ3CRrPRdPYTJQu550uLtwjrhp
daDKhHO3kUQe8YS/xOZxp41+Aeybe5mWjAFeArSdcXKzbuz8jjxIptnGdeG1hxXU
d8SGy0r93YnjU0S9PjQ4W1HY5/SeLalD42RYzLgAX3ieUgUT0QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKq5KrSBQv2sJPIy0odBFojKDJOcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMzk2YjlhYTEtZjVhZC0z
ODJiLWFlNGEtZWQzMmI5Njc2NTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlKIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEARhVEgt4jqb9vluGfq4OZjROH7QRXxL/bzWrJJ7KyPaB3IOtBg3eCGMDR
05aU8UDRXZYfzgzO5Xfa1iN90HhMQbcKzlBkRmasieKYL4PsRJTCbYs+oEq/e+ZC
uXYFIlD+CcuiH6yQRA6SebRmfhKbCEh2eWCo5YJ5v3qrd6XHvpSrmHLTQs8nYL+d
sRHNmI9qSKLLUdBDnf1Wib+AEFI3sNgydMdcdfkhNWJcSN5GLHFiVOT0IBI6UQJF
rHC2bc01hT4jaIgKOBoY2c2elBEaERr5sx97C6qIjD82l8Q0EVS9luRXoNX+ilm1
LvwPNg3hnGlT+IksvLJD7ijil498xA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:51:49 2025 by rpki-client