Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b1f1505-8bd3-386e-98f0-86dbe01657d6.roa
File: 3b1f1505-8bd3-386e-98f0-86dbe01657d6.roa (raw, json)
Hash identifier: bhNLPGQKjpjRBHg7RyGHn4Pi2bN2LykyIJY9Y+PY0vs=
Subject key identifier: 6B:A2:3C:0E:30:7E:37:E3:3A:27:E5:0E:83:8F:13:5B:4A:82:5B:34
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406256974B6F47FDB92845C900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b1f1505-8bd3-386e-98f0-86dbe01657d6.roa
Signing time: Tue 27 Dec 2022 12:00:00 +0000
ROA not before: Tue 27 Dec 2022 12:00:00 +0000
ROA not after: Wed 01 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 152.155.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:62:56:97:4b:6f:47:fd:b9:28:45:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 27 12:00:00 2022 GMT
Not After : Feb 1 05:00:00 2023 GMT
Subject: CN=cfe2e915-a91d-40c8-a581-6fa7bc34a8ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:91:34:49:6e:84:f7:4c:e1:db:48:1c:2a:da:
2f:57:15:4b:c0:0f:10:df:9d:c3:a2:54:e8:14:8e:
d4:b2:01:cf:bb:16:e3:68:ce:b8:63:35:0e:05:78:
29:cd:fe:73:5c:0d:ac:57:9c:d6:36:18:5a:81:6e:
2d:2c:f9:b2:e4:02:5e:a1:ef:b4:f1:5d:8b:37:7b:
84:72:94:78:a9:99:d5:04:82:f9:2e:69:62:27:e3:
2e:d3:e0:ce:ab:71:46:7c:fc:8e:9c:2b:93:60:15:
72:de:8a:66:4a:9c:80:85:71:a4:70:db:8e:aa:d1:
88:de:a4:ca:84:9f:5f:07:51:5e:36:4e:42:7a:fc:
c1:4a:00:50:d9:71:2c:2d:77:bd:73:0d:d4:cd:8c:
40:af:23:4f:a2:bf:4f:28:43:60:fb:af:1c:15:c1:
5a:73:f9:ec:bb:60:ed:3e:5f:91:22:b1:94:34:40:
c2:08:95:4c:c0:49:8f:37:a9:dc:14:cd:21:6e:33:
70:01:12:23:77:bd:eb:d8:79:b2:ae:7b:8f:8a:c8:
31:4d:fb:1f:3d:88:54:eb:1f:6d:41:af:96:d2:1d:
53:29:36:25:71:28:c9:48:a0:58:1e:16:14:6f:1f:
b0:2b:59:57:f4:fe:c5:55:5b:0f:e1:08:9c:3d:7d:
7a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A2:3C:0E:30:7E:37:E3:3A:27:E5:0E:83:8F:13:5B:4A:82:5B:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b1f1505-8bd3-386e-98f0-86dbe01657d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
152.155.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:80:89:00:7f:e7:fa:34:97:37:5b:26:52:5d:fb:dc:28:9c:
ba:66:16:cc:52:f5:7f:39:ac:84:b9:9a:4a:ee:c2:96:dd:41:
7d:16:e1:68:e1:99:66:9f:48:86:8f:11:ce:51:c2:2f:46:61:
da:a0:96:d4:db:c7:5b:45:02:cf:f0:47:2b:9a:0a:c8:93:34:
6b:66:19:0a:c3:d0:57:7a:b8:7f:67:c0:b6:bf:4d:5a:52:4c:
8e:5b:0b:14:02:dc:e7:c4:2b:f2:cd:b8:90:f9:24:ab:9b:51:
6d:44:d7:f9:5e:2b:84:b7:8b:3c:e3:d5:33:4c:5b:e9:6d:78:
44:65:1b:d3:d6:bb:12:a2:3b:0f:58:bf:8e:81:a2:06:00:f5:
91:5a:44:16:ad:00:6a:c8:30:c1:33:11:32:71:63:b1:d0:a2:
b8:42:e7:f9:5e:6d:18:cf:76:fe:92:2b:fb:2f:ec:6f:cd:1f:
07:8f:6f:0b:87:02:08:77:e8:bc:0a:39:7b:7b:af:b6:99:1c:
be:5e:27:51:8c:37:f2:c4:96:51:8c:f0:ce:51:c0:95:00:ab:
ae:0e:df:2e:00:c8:67:13:e9:a0:c4:87:b4:17:43:e4:14:02:
34:39:a0:0c:e5:de:56:40:89:3f:7b:33:9e:9e:85:7d:c9:c5:
1e:f1:0d:ba
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBiVpdLb0f9uShFyQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIyNzEyMDAwMFoXDTIzMDIwMTA1MDAwMFowLzEtMCsGA1UEAxMk
Y2ZlMmU5MTUtYTkxZC00MGM4LWE1ODEtNmZhN2JjMzRhOGNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJE0SW6E90zh20gcKtovVxVLwA8Q353DolTo
FI7UsgHPuxbjaM64YzUOBXgpzf5zXA2sV5zWNhhagW4tLPmy5AJeoe+08V2LN3uE
cpR4qZnVBIL5LmliJ+Mu0+DOq3FGfPyOnCuTYBVy3opmSpyAhXGkcNuOqtGI3qTK
hJ9fB1FeNk5CevzBSgBQ2XEsLXe9cw3UzYxAryNPor9PKENg+68cFcFac/nsu2Dt
Pl+RIrGUNEDCCJVMwEmPN6ncFM0hbjNwARIjd73r2HmyrnuPisgxTfsfPYhU6x9t
Qa+W0h1TKTYlcSjJSKBYHhYUbx+wK1lX9P7FVVsP4QicPX16WQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGuiPA4wfjfjOiflDoOPE1tKgls0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvM2IxZjE1MDUtOGJkMy0z
ODZlLTk4ZjAtODZkYmUwMTY1N2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmJswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAcoCJAH/n+jSXN1smUl373CicumYWzFL1fzmshLmaSu7Clt1BfRbhaOGZ
Zp9Iho8RzlHCL0Zh2qCW1NvHW0UCz/BHK5oKyJM0a2YZCsPQV3q4f2fAtr9NWlJM
jlsLFALc58Qr8s24kPkkq5tRbUTX+V4rhLeLPOPVM0xb6W14RGUb09a7EqI7D1i/
joGiBgD1kVpEFq0AasgwwTMRMnFjsdCiuELn+V5tGM92/pIr+y/sb80fB49vC4cC
CHfovAo5e3uvtpkcvl4nUYw38sSWUYzwzlHAlQCrrg7fLgDIZxPpoMSHtBdD5BQC
NDmgDOXeVkCJP3sznp6FfcnFHvENug==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:49:59 2025 by rpki-client