Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/52e1a28d-c199-3e43-bbe4-aeeed104f497.roa
File: 52e1a28d-c199-3e43-bbe4-aeeed104f497.roa (raw, json)
Hash identifier: wBMkMvH1UpIf41YslSrqY4bckMp2cuCnDY/wDeTbRwo=
Subject key identifier: CF:D0:2C:19:B2:3B:95:05:A6:49:E8:28:2C:89:C7:1D:E4:F2:E7:14
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584005B73936EA44979D76AF6AC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/52e1a28d-c199-3e43-bbe4-aeeed104f497.roa
Signing time: Thu 24 Nov 2022 12:00:00 +0000
ROA not before: Thu 24 Nov 2022 12:00:00 +0000
ROA not after: Fri 30 Dec 2022 05:00:00 +0000
asID: 6167
IP address blocks: 161.188.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:05:b7:39:36:ea:44:97:9d:76:af:6a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 24 12:00:00 2022 GMT
Not After : Dec 30 05:00:00 2022 GMT
Subject: CN=3ad7d87c-bd13-43f9-8c79-3aad0d00bce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:c3:32:cf:13:67:22:3f:ce:01:9b:50:18:
2f:0d:3d:7c:ee:80:f6:0f:19:15:c4:aa:99:3e:82:
62:e4:ff:79:ce:08:11:18:41:91:df:6f:02:6c:ac:
5f:95:4c:12:61:09:a3:b1:f7:f4:99:b9:c4:d0:b6:
40:59:1a:9e:42:a3:87:ba:2c:3d:8c:6f:dc:f5:d1:
f9:be:73:9a:86:4a:5e:da:fc:b4:05:85:b2:42:bb:
08:b9:8c:e1:63:77:a9:40:14:91:0f:cd:05:1e:c3:
fd:cf:bb:cf:97:f1:ea:ff:49:5f:5c:ae:ba:c1:5e:
00:6c:74:f9:f5:38:9c:98:80:02:ee:0c:e0:be:53:
84:4e:0b:d5:e8:43:34:7e:01:cd:c4:dc:af:cc:e9:
2e:16:5c:73:e8:88:3a:99:d3:22:0d:25:fc:5b:ea:
40:e7:f8:86:d2:4f:4f:08:c6:56:c6:50:91:8f:05:
c3:14:78:71:25:81:32:99:aa:13:9c:d3:db:ea:8a:
43:40:1d:6c:e4:40:58:83:87:dd:1d:25:2d:56:c1:
81:6f:b5:b5:e6:17:78:69:40:18:d7:a5:7b:b3:3d:
c8:7e:f7:bb:d3:0a:79:85:3a:74:8e:da:93:71:4d:
b9:0b:f0:96:e4:ed:1d:df:a3:30:5e:76:7f:7e:e8:
d9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D0:2C:19:B2:3B:95:05:A6:49:E8:28:2C:89:C7:1D:E4:F2:E7:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/52e1a28d-c199-3e43-bbe4-aeeed104f497.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:a5:35:e0:ea:93:aa:0c:08:7c:b6:e2:c5:94:05:c2:c0:1b:
ba:ff:10:4b:8b:e2:5d:1c:1d:1c:6c:fa:38:1f:02:61:2a:ba:
1a:d4:b9:b7:27:22:39:a8:ad:a2:7e:d6:fb:d0:8e:b2:33:54:
cf:09:ec:04:ce:8c:a2:df:2a:d6:3e:a4:a4:d4:21:10:d7:d8:
1b:db:bc:42:28:93:ff:bf:c4:d7:2a:fd:62:cd:49:a2:fb:5c:
cc:3f:ae:9f:c1:43:79:72:0a:7d:25:df:94:d1:5b:f6:ce:ee:
ab:43:30:36:7d:58:47:de:47:35:07:3e:59:70:24:9d:0e:83:
bb:44:ea:66:76:54:5c:3c:4b:47:5c:5c:60:c9:3d:6a:e8:6b:
73:f6:78:e4:3f:cf:13:e6:0b:b5:40:a6:f8:27:dd:50:cb:12:
4b:9f:b8:dd:13:6c:4a:6a:81:ce:f9:4e:92:b1:d2:01:5f:dd:
30:ea:7c:7b:52:b2:3c:97:d9:b1:f5:46:c6:e8:d6:09:cb:ca:
a7:43:11:17:cc:2e:d1:64:7d:af:08:64:cd:88:86:e7:65:be:
e2:72:03:64:e2:01:0c:61:e5:63:18:b4:21:5f:74:4b:0a:7d:
7a:d4:a5:c8:a7:97:af:a9:fe:1a:96:66:98:33:61:8f:54:f8:
30:11:da:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEAFtzk26kSXnXavasAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEyNDEyMDAwMFoXDTIyMTIzMDA1MDAwMFowLzEtMCsGA1UEAxMk
M2FkN2Q4N2MtYmQxMy00M2Y5LThjNzktM2FhZDBkMDBiY2U2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm3DMs8TZyI/zgGbUBgvDT187oD2DxkVxKqZ
PoJi5P95zggRGEGR328CbKxflUwSYQmjsff0mbnE0LZAWRqeQqOHuiw9jG/c9dH5
vnOahkpe2vy0BYWyQrsIuYzhY3epQBSRD80FHsP9z7vPl/Hq/0lfXK66wV4AbHT5
9TicmIAC7gzgvlOETgvV6EM0fgHNxNyvzOkuFlxz6Ig6mdMiDSX8W+pA5/iG0k9P
CMZWxlCRjwXDFHhxJYEymaoTnNPb6opDQB1s5EBYg4fdHSUtVsGBb7W15hd4aUAY
16V7sz3Ifve70wp5hTp0jtqTcU25C/CW5O0d36MwXnZ/fujZCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM/QLBmyO5UFpknoKCyJxx3k8ucUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNTJlMWEyOGQtYzE5OS0z
ZTQzLWJiZTQtYWVlZWQxMDRmNDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEobwQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACGlNeDqk6oMCHy24sWUBcLAG7r/EEuL4l0cHRxs+jgfAmEquhrUubcn
IjmoraJ+1vvQjrIzVM8J7ATOjKLfKtY+pKTUIRDX2BvbvEIok/+/xNcq/WLNSaL7
XMw/rp/BQ3lyCn0l35TRW/bO7qtDMDZ9WEfeRzUHPllwJJ0Og7tE6mZ2VFw8S0dc
XGDJPWroa3P2eOQ/zxPmC7VApvgn3VDLEkufuN0TbEpqgc75TpKx0gFf3TDqfHtS
sjyX2bH1Rsbo1gnLyqdDERfMLtFkfa8IZM2IhudlvuJyA2TiAQxh5WMYtCFfdEsK
fXrUpcinl6+p/hqWZpgzYY9U+DAR2iE=
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:07:38 2025 by rpki-client