Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5d40b575-ce62-3d64-8db2-51cfc6280342.roa
File: 5d40b575-ce62-3d64-8db2-51cfc6280342.roa (raw, json)
Hash identifier: 5aHoE4gpQSE3XI0vfec3gYWeY2FGjU7tIY+921TVgE0=
Subject key identifier: 8A:B3:47:26:C2:E3:F1:2C:16:AD:D6:EE:6A:C1:95:48:6E:5E:55:AC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CEF3118481FC2D9DA12D97C00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5d40b575-ce62-3d64-8db2-51cfc6280342.roa
Signing time: Tue 15 Feb 2022 05:00:00 +0000
ROA not before: Tue 15 Feb 2022 05:00:00 +0000
ROA not after: Tue 22 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.16.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:ef:31:18:48:1f:c2:d9:da:12:d9:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 15 05:00:00 2022 GMT
Not After : Mar 22 04:00:00 2022 GMT
Subject: CN=d158626b-4d82-494f-8850-065065c15ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7b:55:77:07:a0:42:76:e5:bd:cb:67:94:94:
3b:93:69:44:8b:51:d2:87:93:75:e2:7a:a0:d6:6a:
8c:3e:d3:33:de:22:34:e4:c3:8a:1c:8f:5a:fc:bd:
ef:1f:3f:59:af:56:73:98:95:71:b9:26:c3:8b:78:
ae:ac:e2:97:e9:35:53:5d:73:d1:7a:14:29:65:c8:
6d:c7:a5:6f:7e:04:93:36:60:c3:3a:2c:d2:a1:32:
cb:d4:b8:00:4a:bf:6d:a6:63:90:61:57:21:8c:05:
5c:48:da:e3:dc:a4:ae:43:69:ab:61:c6:36:24:14:
99:8f:1c:4d:4a:ac:e3:ba:7e:f0:f2:14:f8:d0:60:
4f:a8:2d:1b:22:36:aa:83:9b:c5:22:b7:ab:82:f7:
49:d8:f6:c2:87:43:21:e7:7d:80:c6:ab:cb:3a:40:
94:2f:a1:8c:bb:2b:e6:dd:f2:74:87:c2:ac:c7:61:
f7:61:af:a1:56:a1:d5:15:b1:84:52:d1:e4:d8:3f:
a8:07:57:b9:32:b4:be:17:c6:df:db:a5:a8:c2:3b:
47:b5:f8:f0:16:10:3b:5c:38:1f:62:e3:5a:a5:e5:
9a:3e:67:76:c2:34:ee:c7:88:88:85:ad:9c:f8:48:
c9:29:20:05:39:f5:b7:91:47:1c:86:3f:98:14:9f:
58:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B3:47:26:C2:E3:F1:2C:16:AD:D6:EE:6A:C1:95:48:6E:5E:55:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5d40b575-ce62-3d64-8db2-51cfc6280342.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.16.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:64:eb:09:92:0f:7b:34:6a:94:66:66:a4:23:ea:b9:4a:b8:
e3:11:25:ea:0f:b2:f6:e5:d5:8c:2a:35:e0:87:c6:29:5f:5e:
b7:78:1d:80:8a:52:78:7b:bd:69:aa:09:64:41:50:aa:c5:74:
75:2e:b3:24:da:b4:22:3d:d8:23:85:d7:16:bd:ae:b4:d4:51:
9d:16:15:52:76:84:0a:19:2c:f9:ef:07:98:64:7b:01:e8:1d:
98:28:c4:47:b6:a0:0f:f9:49:69:4c:3e:91:cd:a0:a2:63:37:
44:24:9b:b3:8d:93:86:03:1d:22:0c:6a:83:ce:e3:93:4e:1d:
33:be:a4:5f:6b:f3:7d:54:99:4c:ee:47:a4:c5:c3:b1:4e:b6:
b3:83:83:9c:8a:ce:7c:4e:3d:3f:e1:27:3b:77:1d:db:58:e1:
9f:de:58:b9:69:3b:df:9f:9e:db:ae:b0:65:08:c7:74:28:6f:
24:55:0d:60:ba:16:18:a8:50:90:1e:84:fa:3c:38:f3:4a:23:
91:6c:89:41:b6:43:22:11:3b:d3:10:69:09:4b:3e:68:df:23:
8a:f1:e2:5d:58:93:a9:3c:12:b3:fe:3a:4e:dd:36:25:0f:bf:
a2:13:f1:32:f5:64:c2:14:fe:0c:59:7b:74:46:14:78:96:a7:
64:a1:ae:30
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzvMRhIH8LZ2hLZfAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIxNTA1MDAwMFoXDTIyMDMyMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZDE1ODYyNmItNGQ4Mi00OTRmLTg4NTAtMDY1MDY1YzE1YmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3tVdwegQnblvctnlJQ7k2lEi1HSh5N14nqg
1mqMPtMz3iI05MOKHI9a/L3vHz9Zr1ZzmJVxuSbDi3iurOKX6TVTXXPRehQpZcht
x6VvfgSTNmDDOizSoTLL1LgASr9tpmOQYVchjAVcSNrj3KSuQ2mrYcY2JBSZjxxN
Sqzjun7w8hT40GBPqC0bIjaqg5vFIrergvdJ2PbCh0Mh532AxqvLOkCUL6GMuyvm
3fJ0h8Ksx2H3Ya+hVqHVFbGEUtHk2D+oB1e5MrS+F8bf26WowjtHtfjwFhA7XDgf
YuNapeWaPmd2wjTux4iIha2c+EjJKSAFOfW3kUcchj+YFJ9YBQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIqzRybC4/EsFq3W7mrBlUhuXlWsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNWQ0MGI1NzUtY2U2Mi0z
ZDY0LThkYjItNTFjZmM2MjgwMzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiBAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAtWTrCZIPezRqlGZmpCPquUq44xEl6g+y9uXVjCo14IfGKV9et3gdgIpS
eHu9aaoJZEFQqsV0dS6zJNq0Ij3YI4XXFr2utNRRnRYVUnaEChks+e8HmGR7Aegd
mCjER7agD/lJaUw+kc2gomM3RCSbs42ThgMdIgxqg87jk04dM76kX2vzfVSZTO5H
pMXDsU62s4ODnIrOfE49P+EnO3cd21jhn95YuWk735+e266wZQjHdChvJFUNYLoW
GKhQkB6E+jw480ojkWyJQbZDIhE70xBpCUs+aN8jivHiXViTqTwSs/46Tt02JQ+/
ohPxMvVkwhT+DFl7dEYUeJanZKGuMA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:15:21 2025 by rpki-client