Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6953dbe2-b580-373e-bf9e-8371b50816ae.roa
File: 6953dbe2-b580-373e-bf9e-8371b50816ae.roa (raw, json)
Hash identifier: i8hiqg0W8zaRAVgNYsODTN+acosZJbbdod5ZpvVU2mU=
Subject key identifier: 3B:5C:56:98:42:23:8E:09:E4:B7:EC:9E:AE:04:BB:5B:69:F5:88:44
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F57594B88F16DBA0AB2348140
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6953dbe2-b580-373e-bf9e-8371b50816ae.roa
Signing time: Thu 22 Sep 2022 12:00:00 +0000
ROA not before: Thu 22 Sep 2022 12:00:00 +0000
ROA not after: Fri 28 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 146.207.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:57:59:4b:88:f1:6d:ba:0a:b2:34:81:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 22 12:00:00 2022 GMT
Not After : Oct 28 04:00:00 2022 GMT
Subject: CN=cce74859-0ac1-4dc4-8fbc-c15ef5d11691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:e3:94:4c:c1:a1:6c:12:a5:db:38:2b:02:
64:77:29:10:13:47:f8:79:23:70:a4:d6:28:5f:bd:
2f:b6:d8:05:75:d4:57:a9:78:2a:5c:59:b7:eb:4f:
cf:99:12:96:4c:d1:e0:00:79:de:da:80:2a:1b:59:
05:ee:01:9e:62:f2:6b:51:cf:23:18:62:05:c3:52:
8c:9b:06:3f:c2:29:c1:24:30:a4:b7:d9:6d:56:81:
34:20:37:b7:be:54:d5:05:63:05:47:53:db:59:65:
62:23:70:b7:b0:5a:6c:b1:28:70:ca:6d:1b:2b:16:
81:14:8a:06:ae:95:9f:de:7e:53:4c:1a:d8:7e:06:
9b:95:d7:26:b6:6d:2e:38:96:ae:f6:ed:f3:64:82:
80:cb:e6:66:2f:0e:7d:c9:89:fd:27:b9:1b:02:2e:
fb:1e:64:e6:fd:44:b6:95:aa:6c:19:e2:24:6e:c1:
cc:04:7e:a0:53:4c:58:06:33:9d:f0:d1:81:28:83:
ad:c2:4a:e1:1a:39:6e:20:ed:b9:c7:d8:3b:4a:9a:
d2:60:d8:ea:50:5f:a2:05:95:90:80:aa:34:39:1a:
64:3e:a3:38:bd:fd:49:c5:90:e6:1a:9a:d9:80:3f:
dd:b1:25:3a:77:a4:91:3b:39:76:0c:f5:0d:e8:59:
83:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5C:56:98:42:23:8E:09:E4:B7:EC:9E:AE:04:BB:5B:69:F5:88:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6953dbe2-b580-373e-bf9e-8371b50816ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
146.207.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:12:81:65:8f:b9:8f:cc:2d:ce:65:d2:7a:64:a1:08:d7:03:
e3:96:6b:75:cd:83:93:d8:e5:8f:1a:e4:78:1d:72:ce:5f:c9:
34:11:6c:17:14:1c:a6:e7:4c:14:8c:c3:5f:a0:42:c9:1a:40:
81:aa:9a:d2:6a:2c:96:ab:ac:13:c3:78:74:90:f8:1f:4e:22:
e4:0b:50:57:19:c4:b0:82:dd:ac:31:ab:b1:1a:2d:62:84:21:
d9:a7:79:d9:cc:61:3b:67:5c:06:5d:ef:8c:9f:aa:b8:6a:bd:
48:9f:16:6b:a7:ae:ec:e4:7c:e3:2b:63:01:05:40:a1:21:8a:
ed:82:5e:31:03:8d:43:22:2b:00:df:b8:9c:da:2e:d2:0f:d7:
43:94:8b:e0:1e:89:2e:1f:be:f0:67:a3:53:58:e0:06:70:8c:
fa:b8:74:6a:b7:ce:91:2c:be:32:9e:90:da:57:7b:c2:f5:b7:
c7:63:41:1c:80:9f:d7:0e:39:c1:c4:12:5b:bc:1c:96:32:e1:
5d:78:de:44:39:1a:25:cc:38:c6:0d:b6:ba:b5:15:88:28:bc:
25:6f:7f:44:98:86:c7:51:2e:45:24:56:45:4c:43:97:e0:10:
90:8e:96:8c:15:76:b2:a2:ab:00:6a:50:5a:ff:8f:56:a8:90:
3d:98:90:70
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9XWUuI8W26CrI0gUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkyMjEyMDAwMFoXDTIyMTAyODA0MDAwMFowLzEtMCsGA1UEAxMk
Y2NlNzQ4NTktMGFjMS00ZGM0LThmYmMtYzE1ZWY1ZDExNjkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1PjlEzBoWwSpds4KwJkdykQE0f4eSNwpNYo
X70vttgFddRXqXgqXFm360/PmRKWTNHgAHne2oAqG1kF7gGeYvJrUc8jGGIFw1KM
mwY/winBJDCkt9ltVoE0IDe3vlTVBWMFR1PbWWViI3C3sFpssShwym0bKxaBFIoG
rpWf3n5TTBrYfgabldcmtm0uOJau9u3zZIKAy+ZmLw59yYn9J7kbAi77HmTm/US2
lapsGeIkbsHMBH6gU0xYBjOd8NGBKIOtwkrhGjluIO25x9g7SprSYNjqUF+iBZWQ
gKo0ORpkPqM4vf1JxZDmGprZgD/dsSU6d6SROzl2DPUN6FmD4QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDtcVphCI44J5Lfsnq4Eu1tp9YhEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNjk1M2RiZTItYjU4MC0z
NzNlLWJmOWUtODM3MWI1MDgxNmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAks8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAcRKBZY+5j8wtzmXSemShCNcD45Zrdc2Dk9jljxrkeB1yzl/JNBFsFxQc
pudMFIzDX6BCyRpAgaqa0moslqusE8N4dJD4H04i5AtQVxnEsILdrDGrsRotYoQh
2ad52cxhO2dcBl3vjJ+quGq9SJ8Wa6eu7OR84ytjAQVAoSGK7YJeMQONQyIrAN+4
nNou0g/XQ5SL4B6JLh++8GejU1jgBnCM+rh0arfOkSy+Mp6Q2ld7wvW3x2NBHICf
1w45wcQSW7wcljLhXXjeRDkaJcw4xg22urUViCi8JW9/RJiGx1EuRSRWRUxDl+AQ
kI6WjBV2sqKrAGpQWv+PVqiQPZiQcA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:18:21 2025 by rpki-client