Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5891db61-a8d7-30b4-ad8c-f65ea3ead00b.roa
File: 5891db61-a8d7-30b4-ad8c-f65ea3ead00b.roa (raw, json)
Hash identifier: zm3VQRhId4JaASO4g2pVz6DBXOXrKRFAQ98Ya3ztYVY=
Subject key identifier: 84:42:8B:AC:26:37:D8:40:47:05:06:48:4C:0F:A9:2C:14:51:6B:C5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6C6FBAC616061B63E97B0D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5891db61-a8d7-30b4-ad8c-f65ea3ead00b.roa
Signing time: Thu 30 Jun 2022 12:00:00 +0000
ROA not before: Thu 30 Jun 2022 12:00:00 +0000
ROA not after: Fri 05 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 152.137.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6c:6f:ba:c6:16:06:1b:63:e9:7b:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 30 12:00:00 2022 GMT
Not After : Aug 5 04:00:00 2022 GMT
Subject: CN=f8335e88-8caa-423d-a5dc-cd41ddde5f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:f5:68:ce:de:9d:ad:70:41:00:25:ba:71:
41:dd:f3:4e:46:3c:3d:9e:fb:0a:f1:0c:0f:8f:aa:
77:eb:7b:90:fc:30:f8:49:0c:ac:05:38:05:8d:4b:
c2:1b:d8:f9:2d:b4:8c:00:b6:4b:07:36:a1:67:96:
8a:44:c0:0d:42:e5:b4:8d:cb:12:4e:b2:e4:66:a7:
0e:13:40:4a:5d:d1:72:19:61:cd:c4:83:92:5d:e3:
ca:e5:69:33:d2:c6:16:9d:c5:0c:02:94:1c:ee:c2:
7f:1a:4b:4b:11:75:8b:17:f4:a5:32:97:72:ab:ac:
24:ba:14:61:af:9a:3b:7a:6e:f2:52:a3:fc:ab:ef:
4b:27:d1:9b:a5:33:85:4d:4f:38:f1:2f:1d:ae:b2:
de:4b:15:b7:78:db:8c:f2:dd:f2:69:b6:dc:6a:38:
60:29:b5:8a:2f:7d:62:2e:15:7e:b9:81:67:6a:93:
32:67:d5:82:d8:b3:b9:46:62:9f:12:19:4b:c4:5c:
6b:84:f5:44:c9:99:7b:0f:d0:17:d3:6e:b9:2f:1c:
ef:74:5d:35:92:ab:ee:50:ff:f7:21:96:3e:b2:de:
cb:61:95:c1:93:85:7d:36:72:a5:9d:a4:94:d7:09:
dd:f6:6e:1f:6b:70:43:77:5a:81:12:e9:2f:07:a1:
21:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:42:8B:AC:26:37:D8:40:47:05:06:48:4C:0F:A9:2C:14:51:6B:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5891db61-a8d7-30b4-ad8c-f65ea3ead00b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
152.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:63:db:23:44:93:a3:72:1b:14:e0:2e:50:c8:33:3e:ab:5c:
5d:61:d8:67:5b:e6:92:46:b0:c7:83:55:0b:bf:f7:e9:d9:23:
63:6c:f7:ad:e5:0a:d5:66:b7:d2:5f:38:00:3f:b2:40:c7:79:
51:8f:98:cc:45:60:d2:e3:cf:5c:3f:3f:0b:a1:26:37:a0:ac:
c8:34:d9:a6:08:21:83:84:4b:7b:c7:47:45:05:07:71:ef:3b:
5d:f3:2a:4e:52:bc:a2:b7:09:d2:0b:69:e3:50:d8:9b:83:bc:
ae:41:45:db:8a:61:94:05:13:c9:65:4c:3a:43:9d:12:62:6f:
3e:bb:23:80:4a:3c:3c:ba:3d:59:07:46:42:6a:13:5f:5b:9e:
0a:d7:26:84:92:ab:82:50:33:c1:e8:81:b2:de:c7:c5:12:f8:
a7:d9:07:68:85:f6:f4:08:d3:35:e9:1f:0a:cb:b2:ef:0d:56:
69:67:cf:98:c6:42:fb:ba:c1:92:21:8b:22:81:b0:a0:64:7a:
3d:fd:79:75:0e:d4:1a:bf:01:f9:3e:0a:de:3b:e6:8e:9e:10:
9a:0e:d6:36:b0:ae:b5:b8:91:e8:23:1d:2f:ef:89:a3:96:59:
9b:7c:6c:e9:b4:f1:30:8f:2b:03:0c:1b:13:15:5a:b9:e7:68:
f7:fd:b2:8c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5sb7rGFgYbY+l7DYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYzMDEyMDAwMFoXDTIyMDgwNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZjgzMzVlODgtOGNhYS00MjNkLWE1ZGMtY2Q0MWRkZGU1ZjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSj1aM7ena1wQQAlunFB3fNORjw9nvsK8QwP
j6p363uQ/DD4SQysBTgFjUvCG9j5LbSMALZLBzahZ5aKRMANQuW0jcsSTrLkZqcO
E0BKXdFyGWHNxIOSXePK5Wkz0sYWncUMApQc7sJ/GktLEXWLF/SlMpdyq6wkuhRh
r5o7em7yUqP8q+9LJ9GbpTOFTU848S8drrLeSxW3eNuM8t3yabbcajhgKbWKL31i
LhV+uYFnapMyZ9WC2LO5RmKfEhlLxFxrhPVEyZl7D9AX0265LxzvdF01kqvuUP/3
IZY+st7LYZXBk4V9NnKlnaSU1wnd9m4fa3BDd1qBEukvB6EhzwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIRCi6wmN9hARwUGSEwPqSwUUWvFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNTg5MWRiNjEtYThkNy0z
MGI0LWFkOGMtZjY1ZWEzZWFkMDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmIkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAEGPbI0STo3IbFOAuUMgzPqtcXWHYZ1vmkkawx4NVC7/36dkjY2z3reUK
1Wa30l84AD+yQMd5UY+YzEVg0uPPXD8/C6EmN6CsyDTZpgghg4RLe8dHRQUHce87
XfMqTlK8orcJ0gtp41DYm4O8rkFF24phlAUTyWVMOkOdEmJvPrsjgEo8PLo9WQdG
QmoTX1ueCtcmhJKrglAzweiBst7HxRL4p9kHaIX29AjTNekfCsuy7w1WaWfPmMZC
+7rBkiGLIoGwoGR6Pf15dQ7UGr8B+T4K3jvmjp4Qmg7WNrCutbiR6CMdL++Jo5ZZ
m3xs6bTxMI8rAwwbExVauedo9/2yjA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:32:42 2025 by rpki-client