Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5e0df89e-044f-3472-a5db-6a8cb15c4c8c.roa
File: 5e0df89e-044f-3472-a5db-6a8cb15c4c8c.roa (raw, json)
Hash identifier: p2QLe7GonhQkrWIQF3EhPRdbxDn8hjvAzMrzp9nSsEo=
Subject key identifier: E7:FA:1E:04:61:FF:8E:72:2E:54:9C:EA:70:F7:4C:9E:F1:57:8E:C7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858405FB88DBA2D2BA1372674BC00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5e0df89e-044f-3472-a5db-6a8cb15c4c8c.roa
Signing time: Mon 26 Dec 2022 12:00:00 +0000
ROA not before: Mon 26 Dec 2022 12:00:00 +0000
ROA not after: Tue 31 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 138.111.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5f:b8:8d:ba:2d:2b:a1:37:26:74:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 26 12:00:00 2022 GMT
Not After : Jan 31 05:00:00 2023 GMT
Subject: CN=bd17cfd8-5c87-490c-bedd-b986915e45af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:50:3f:0e:35:c2:20:61:7f:99:e7:90:88:84:
a5:ad:94:a4:a3:e2:e3:9a:62:b1:bf:be:13:82:11:
b8:55:47:fd:91:fe:f0:cd:bd:28:c8:ae:51:63:dc:
0d:f3:0a:62:45:c6:c2:e4:84:22:3b:b9:13:0b:17:
35:4e:09:c2:b7:71:11:fa:84:82:13:bc:85:39:34:
2f:e8:cc:52:35:b6:a3:97:ee:92:10:2f:a2:b3:cb:
42:30:43:fc:1d:29:a8:29:20:87:ec:71:3b:27:eb:
c9:84:e9:f1:07:c5:97:91:cf:16:4b:64:f9:ba:e5:
bb:66:ab:14:ac:43:49:c4:d8:54:97:18:80:d7:a7:
fc:57:36:64:4e:86:ff:ac:97:c1:6b:1e:ca:f0:20:
05:00:0a:77:a1:94:d5:e7:81:39:47:2c:74:40:64:
81:d8:95:09:ca:e8:e5:3e:5c:54:eb:1c:ea:c7:a3:
f1:fb:8e:9c:96:41:df:92:1c:b3:21:49:6d:7c:ea:
1b:b9:e5:06:fd:98:ba:3a:b3:5f:33:fe:c8:8e:32:
a9:5d:88:32:d3:de:29:ee:5c:3b:fe:06:88:7e:3b:
f7:2d:7a:36:b2:9a:df:72:90:7d:1b:f4:0f:c0:ec:
86:27:12:34:a6:d3:71:3f:71:5a:4a:15:5c:59:6b:
9a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FA:1E:04:61:FF:8E:72:2E:54:9C:EA:70:F7:4C:9E:F1:57:8E:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5e0df89e-044f-3472-a5db-6a8cb15c4c8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
138.111.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:b9:b0:de:2e:1e:9b:00:03:6c:2c:e1:3b:f4:58:b3:61:14:
5f:b3:76:1e:f9:49:f2:16:f7:d0:64:06:54:f5:65:05:1a:b3:
cb:a0:4a:a0:1b:69:26:6b:de:ab:f5:e2:61:b3:7d:4b:ed:66:
71:55:12:96:2b:42:3c:9c:4a:64:c1:3d:0f:fb:e2:22:14:bc:
b5:23:e3:02:ba:57:7a:71:1e:d0:5b:65:e8:42:33:94:bb:fe:
4c:66:3d:a9:c8:7a:0d:9d:d2:d9:c0:7c:c6:76:d4:e7:30:7f:
72:50:6a:ce:6b:e5:aa:4d:16:2f:4b:e8:6b:e2:4f:d4:30:1e:
e1:c3:e0:99:bd:de:8f:c7:c2:f4:61:dd:24:9b:77:bf:08:37:
90:68:07:e4:bc:28:df:3e:99:6e:89:fe:b4:53:f9:e7:e5:57:
0a:09:5a:93:53:33:c2:70:48:22:9d:11:6b:bb:cd:ad:7b:b5:
98:57:ab:b1:fa:ba:6f:5b:be:9e:2a:11:8d:c9:f3:86:ba:13:
be:bb:2d:94:66:3c:4e:99:66:c6:dc:58:78:97:cf:1e:61:f3:
a0:7a:bf:53:9d:1d:b9:d6:8a:78:11:c0:84:f0:01:6c:fd:6d:
e8:68:f3:ac:d7:88:be:de:2a:ef:e6:78:de:88:88:e4:ac:37:
4e:a1:ef:83
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBfuI26LSuhNyZ0vAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIyNjEyMDAwMFoXDTIzMDEzMTA1MDAwMFowLzEtMCsGA1UEAxMk
YmQxN2NmZDgtNWM4Ny00OTBjLWJlZGQtYjk4NjkxNWU0NWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1A/DjXCIGF/meeQiISlrZSko+LjmmKxv74T
ghG4VUf9kf7wzb0oyK5RY9wN8wpiRcbC5IQiO7kTCxc1TgnCt3ER+oSCE7yFOTQv
6MxSNbajl+6SEC+is8tCMEP8HSmoKSCH7HE7J+vJhOnxB8WXkc8WS2T5uuW7ZqsU
rENJxNhUlxiA16f8VzZkTob/rJfBax7K8CAFAAp3oZTV54E5Ryx0QGSB2JUJyujl
PlxU6xzqx6Px+46clkHfkhyzIUltfOobueUG/Zi6OrNfM/7IjjKpXYgy094p7lw7
/gaIfjv3LXo2sprfcpB9G/QPwOyGJxI0ptNxP3FaShVcWWuaaQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOf6HgRh/45yLlSc6nD3TJ7xV47HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNWUwZGY4OWUtMDQ0Zi0z
NDcyLWE1ZGItNmE4Y2IxNWM0YzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAim8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAoLmw3i4emwADbCzhO/RYs2EUX7N2HvlJ8hb30GQGVPVlBRqzy6BKoBtp
Jmveq/XiYbN9S+1mcVUSlitCPJxKZME9D/viIhS8tSPjArpXenEe0Ftl6EIzlLv+
TGY9qch6DZ3S2cB8xnbU5zB/clBqzmvlqk0WL0voa+JP1DAe4cPgmb3ej8fC9GHd
JJt3vwg3kGgH5Lwo3z6Zbon+tFP55+VXCglak1MzwnBIIp0Ra7vNrXu1mFersfq6
b1u+nioRjcnzhroTvrstlGY8TplmxtxYeJfPHmHzoHq/U50dudaKeBHAhPABbP1t
6GjzrNeIvt4q7+Z43oiI5Kw3TqHvgw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:24:33 2025 by rpki-client