Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/69832468-ab8b-35b7-a1a1-87548bd471c9.roa
File: 69832468-ab8b-35b7-a1a1-87548bd471c9.roa (raw, json)
Hash identifier: bOGyY7TLNO9c7cYutMIGgV3AJOQvy/iP73Xqj7vody4=
Subject key identifier: 4E:B3:78:B9:96:E4:CD:2E:DA:45:AE:3F:EA:D6:A1:03:BF:C6:BE:42
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858405FB89A67C2D7D0A46137DA80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/69832468-ab8b-35b7-a1a1-87548bd471c9.roa
Signing time: Mon 26 Dec 2022 12:00:00 +0000
ROA not before: Mon 26 Dec 2022 12:00:00 +0000
ROA not after: Tue 31 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 138.111.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5f:b8:9a:67:c2:d7:d0:a4:61:37:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 26 12:00:00 2022 GMT
Not After : Jan 31 05:00:00 2023 GMT
Subject: CN=e9466b3d-4ac4-48ca-8467-14d54bc64d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:45:dc:67:fc:ee:4a:85:20:15:4f:ad:db:bc:
98:fc:d3:b9:cc:de:da:db:a9:5e:a8:7d:7b:b7:96:
a4:15:7e:ab:cc:df:ee:d4:ef:eb:4b:58:ca:4b:87:
b3:f1:cb:ce:29:05:57:60:ce:40:56:d2:c1:81:86:
4b:88:a3:6a:d4:02:83:1d:86:72:f9:f7:a2:f1:60:
ba:67:01:af:27:5a:50:fa:76:e2:91:8f:02:3c:68:
9d:05:2d:8e:de:97:ba:26:4f:2b:05:4b:78:4e:7c:
e8:be:cd:b1:20:12:a0:12:4c:0a:c0:61:5e:b5:9d:
79:c5:da:b8:7c:8b:41:52:0c:e4:9f:9d:1e:9b:fd:
c9:a3:16:ec:32:4f:32:6e:b5:c1:e0:31:48:f4:63:
e5:8f:f8:9c:81:4e:85:da:48:f0:7d:5e:b2:42:34:
ec:db:c1:31:80:d7:9a:6d:8b:56:7e:b9:9b:ec:f4:
f2:28:ce:90:e8:e2:6f:32:25:01:cb:f1:7d:7c:f2:
ce:0c:bf:83:92:83:13:21:04:d9:95:91:96:10:08:
72:27:b9:8d:6c:13:b4:b9:c0:f9:84:18:70:74:29:
92:af:8c:89:58:3f:90:40:48:7e:dc:ee:34:7e:10:
c3:95:9d:0d:fa:07:8b:6e:cf:9d:8a:36:95:18:e1:
f7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B3:78:B9:96:E4:CD:2E:DA:45:AE:3F:EA:D6:A1:03:BF:C6:BE:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/69832468-ab8b-35b7-a1a1-87548bd471c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
138.111.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:3e:9b:17:f9:b5:14:e5:8e:26:ea:95:8b:6d:de:e5:7b:e8:
e6:83:6d:ee:25:81:10:70:6d:21:54:3d:37:b7:dd:a9:61:c2:
d2:a7:66:b0:3d:3a:79:ea:ff:eb:a9:35:60:f8:cd:fb:91:99:
27:c1:19:5b:a9:b3:d0:a6:67:61:5e:cd:9f:13:92:78:1f:44:
de:4c:8a:48:2d:cc:9e:cc:ee:13:50:5a:7a:1d:4d:3a:f7:da:
4a:cb:92:9a:ea:1f:9b:17:08:b0:b6:cf:d4:a9:cd:e3:47:9d:
30:44:ed:80:17:22:5c:44:29:ea:07:9f:63:a3:0b:3d:cf:4f:
87:6e:96:41:f1:b3:0a:52:a1:95:02:cd:8f:8b:45:df:6d:0a:
ac:f6:5d:07:da:a0:6a:d3:b4:7c:7b:6d:63:aa:2d:d0:0d:84:
79:0a:9b:c8:8e:9b:02:77:ea:32:e7:11:e3:ec:a0:c3:8d:c1:
ac:ef:e3:7e:18:82:7f:12:3f:52:b7:40:92:42:a9:fb:4c:8b:
d2:b8:63:a5:6a:3b:2c:fb:1f:c8:11:a4:03:e3:c3:d8:5d:26:
73:76:78:ae:e4:bf:b9:d8:11:12:98:5d:48:95:e1:bd:3d:15:
70:23:3d:79:8f:5c:2e:1e:d9:36:f9:1f:84:fb:35:27:ed:09:
c5:58:db:8e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBfuJpnwtfQpGE32oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIyNjEyMDAwMFoXDTIzMDEzMTA1MDAwMFowLzEtMCsGA1UEAxMk
ZTk0NjZiM2QtNGFjNC00OGNhLTg0NjctMTRkNTRiYzY0ZDZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUXcZ/zuSoUgFU+t27yY/NO5zN7a26leqH17
t5akFX6rzN/u1O/rS1jKS4ez8cvOKQVXYM5AVtLBgYZLiKNq1AKDHYZy+fei8WC6
ZwGvJ1pQ+nbikY8CPGidBS2O3pe6Jk8rBUt4Tnzovs2xIBKgEkwKwGFetZ15xdq4
fItBUgzkn50em/3JoxbsMk8ybrXB4DFI9GPlj/icgU6F2kjwfV6yQjTs28ExgNea
bYtWfrmb7PTyKM6Q6OJvMiUBy/F9fPLODL+DkoMTIQTZlZGWEAhyJ7mNbBO0ucD5
hBhwdCmSr4yJWD+QQEh+3O40fhDDlZ0N+geLbs+dijaVGOH3lwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFE6zeLmW5M0u2kWuP+rWoQO/xr5CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNjk4MzI0NjgtYWI4Yi0z
NWI3LWExYTEtODc1NDhiZDQ3MWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAim8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgz6bF/m1FOWOJuqVi23e5Xvo5oNt7iWBEHBtIVQ9N7fdqWHC0qdmsD06
eer/66k1YPjN+5GZJ8EZW6mz0KZnYV7NnxOSeB9E3kyKSC3MnszuE1Baeh1NOvfa
SsuSmuofmxcIsLbP1KnN40edMETtgBciXEQp6gefY6MLPc9Ph26WQfGzClKhlQLN
j4tF320KrPZdB9qgatO0fHttY6ot0A2EeQqbyI6bAnfqMucR4+ygw43BrO/jfhiC
fxI/UrdAkkKp+0yL0rhjpWo7LPsfyBGkA+PD2F0mc3Z4ruS/udgREphdSJXhvT0V
cCM9eY9cLh7ZNvkfhPs1J+0JxVjbjg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:13:00 2025 by rpki-client