Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3a09e600-d5dd-3487-a1f0-ca400b7b76b2.roa
File: 3a09e600-d5dd-3487-a1f0-ca400b7b76b2.roa (raw, json)
Hash identifier: +NsVt1WgZVDwrj1wb/9hFuFv4MLurfF41XcLVb5T1TI=
Subject key identifier: F1:26:49:A9:5B:EA:18:46:B6:E0:DA:AE:CE:F0:05:07:A4:A9:E7:94
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584053CC1B59CAC4B436F0951D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3a09e600-d5dd-3487-a1f0-ca400b7b76b2.roa
Signing time: Thu 22 Dec 2022 12:00:00 +0000
ROA not before: Thu 22 Dec 2022 12:00:00 +0000
ROA not after: Fri 27 Jan 2023 05:00:00 +0000
asID: 36263
IP address blocks: 161.188.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:53:cc:1b:59:ca:c4:b4:36:f0:95:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 22 12:00:00 2022 GMT
Not After : Jan 27 05:00:00 2023 GMT
Subject: CN=8e546462-2f90-4d9d-a2fd-cf9459ed5f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ea:90:1e:62:45:5a:43:77:40:8d:b3:c9:7a:
96:6c:5d:81:9c:dd:c3:d9:d6:8d:a3:6c:83:c8:c8:
4e:05:24:9c:19:3b:4a:b5:22:22:d9:a7:98:f7:a9:
85:5c:7b:1d:4e:1f:8c:9a:bf:f2:de:e1:9c:50:5c:
fe:2c:45:bb:f9:ed:de:01:67:60:d2:cd:a3:ec:63:
d9:e5:29:52:a1:68:84:5a:e5:e1:6d:e8:c9:6d:0f:
0e:f8:c3:9d:16:4e:e5:45:92:c0:a9:de:86:1f:63:
e0:a8:1e:9d:4d:a3:81:34:e9:60:c0:63:8d:fd:20:
42:c0:9c:be:d7:39:c1:79:18:f1:33:79:46:d5:da:
9b:64:ad:9b:38:48:9b:43:82:48:f2:73:d6:77:85:
b9:71:98:56:5d:43:20:12:62:48:66:88:2f:0e:f7:
0a:4c:72:d0:04:ef:c8:17:2a:de:b0:34:17:34:d5:
c0:26:2f:de:eb:69:05:81:8f:8e:54:2b:2c:88:fe:
a4:af:d5:62:0c:47:a6:f9:0b:de:0f:08:36:fd:79:
ae:86:12:6a:ac:3f:aa:ee:f3:66:9d:96:be:b8:ab:
81:f5:50:30:e1:2f:98:2f:e7:b7:d9:35:eb:74:56:
c4:7c:a7:01:8f:96:43:f2:66:06:aa:ee:2d:54:ad:
4a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:26:49:A9:5B:EA:18:46:B6:E0:DA:AE:CE:F0:05:07:A4:A9:E7:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3a09e600-d5dd-3487-a1f0-ca400b7b76b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:81:c8:9f:b3:2c:a6:95:da:cd:66:3a:c3:12:77:6e:1f:de:
49:75:f0:59:8c:35:ef:cc:60:4a:83:1e:0a:75:00:cc:e6:5f:
14:b5:ee:fc:7f:9a:ba:59:ea:9d:14:e0:19:06:c9:12:21:85:
a7:f3:1a:2d:24:f3:99:e3:3b:6c:52:ee:45:d1:79:aa:94:17:
e3:b4:d8:c7:98:38:51:70:db:f9:12:a9:d8:f2:26:98:69:9c:
ee:4f:5b:96:49:67:7e:5a:b0:4e:a5:46:3d:78:d1:31:df:88:
51:a6:4d:1b:00:48:0e:77:b7:6f:3c:09:a1:eb:65:70:56:29:
55:4a:6d:bc:40:2e:ca:f9:86:8c:66:eb:05:1b:3f:11:3a:20:
29:6d:8b:28:ea:83:96:45:d8:55:84:f0:4b:cd:6c:9a:cc:d9:
d9:16:ad:3a:65:21:b3:70:31:be:83:7c:92:a4:23:81:63:00:
64:67:89:aa:ac:f3:ea:ed:5b:05:6b:01:6e:fa:0d:fe:6d:ee:
a9:02:c0:d5:a1:ba:e9:28:43:b0:fa:5a:2e:cf:41:26:e9:e9:
19:62:8d:a4:00:dc:9c:27:f7:b5:28:cd:9c:f2:71:ab:1d:f1:
90:b3:0f:0f:9d:fe:e0:ce:55:2a:c1:d9:29:57:3d:59:64:90:
33:64:e7:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBTzBtZysS0NvCVHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIyMjEyMDAwMFoXDTIzMDEyNzA1MDAwMFowLzEtMCsGA1UEAxMk
OGU1NDY0NjItMmY5MC00ZDlkLWEyZmQtY2Y5NDU5ZWQ1ZjEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOqQHmJFWkN3QI2zyXqWbF2BnN3D2daNo2yD
yMhOBSScGTtKtSIi2aeY96mFXHsdTh+Mmr/y3uGcUFz+LEW7+e3eAWdg0s2j7GPZ
5SlSoWiEWuXhbejJbQ8O+MOdFk7lRZLAqd6GH2PgqB6dTaOBNOlgwGON/SBCwJy+
1znBeRjxM3lG1dqbZK2bOEibQ4JI8nPWd4W5cZhWXUMgEmJIZogvDvcKTHLQBO/I
FyresDQXNNXAJi/e62kFgY+OVCssiP6kr9ViDEem+QveDwg2/XmuhhJqrD+q7vNm
nZa+uKuB9VAw4S+YL+e32TXrdFbEfKcBj5ZD8mYGqu4tVK1KKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPEmSalb6hhGtuDars7wBQekqeeUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvM2EwOWU2MDAtZDVkZC0z
NDg3LWExZjAtY2E0MDBiN2I3NmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDobzYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALOByJ+zLKaV2s1mOsMSd24f3kl18FmMNe/MYEqDHgp1AMzmXxS17vx/
mrpZ6p0U4BkGyRIhhafzGi0k85njO2xS7kXReaqUF+O02MeYOFFw2/kSqdjyJphp
nO5PW5ZJZ35asE6lRj140THfiFGmTRsASA53t288CaHrZXBWKVVKbbxALsr5hoxm
6wUbPxE6ICltiyjqg5ZF2FWE8EvNbJrM2dkWrTplIbNwMb6DfJKkI4FjAGRniaqs
8+rtWwVrAW76Df5t7qkCwNWhuukoQ7D6Wi7PQSbp6RlijaQA3Jwn97UozZzycasd
8ZCzDw+d/uDOVSrB2SlXPVlkkDNk52g=
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:59:53 2025 by rpki-client