Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/729dde88-bef4-3c1b-9d62-6baf15df42e8.roa
File: 729dde88-bef4-3c1b-9d62-6baf15df42e8.roa (raw, json)
Hash identifier: 1M7Ih6o1Hz9UXZvSre84pcmvLuRC//Yr+g8ZID7V/Ks=
Subject key identifier: BA:9A:7E:24:8D:BA:A4:39:51:C7:A3:E5:4B:0A:32:A7:D5:A8:67:D6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD0E9C2FAD9C313D45DFD2380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/729dde88-bef4-3c1b-9d62-6baf15df42e8.roa
Signing time: Thu 05 May 2022 12:00:00 +0000
ROA not before: Thu 05 May 2022 12:00:00 +0000
ROA not after: Fri 10 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 156.7.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d0:e9:c2:fa:d9:c3:13:d4:5d:fd:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 5 12:00:00 2022 GMT
Not After : Jun 10 04:00:00 2022 GMT
Subject: CN=29dea5b1-d2b8-48a9-ae48-602c0bcb3a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:db:7c:1b:fa:2b:1d:1f:a1:63:c9:ba:54:
00:37:cd:3c:6a:57:2d:a5:76:4d:72:62:a8:37:fc:
61:80:a9:eb:9c:88:3b:b4:0a:25:16:e0:25:b3:9e:
19:c4:d8:9d:51:02:1d:72:3c:7f:3f:d1:b0:21:01:
d0:74:1e:37:2a:59:51:ac:ca:d3:2c:de:1b:35:d8:
ff:7b:2d:ae:1e:23:43:fd:4c:90:ed:56:80:96:66:
67:22:ac:b7:67:63:53:bf:9e:73:72:e0:f9:53:81:
ce:d9:10:5b:ed:bd:ed:89:85:70:19:50:86:d7:5f:
29:4c:81:b5:51:93:55:b6:d4:43:83:d2:95:b8:bf:
31:ba:5d:2b:80:b8:d0:aa:d7:f1:26:25:31:c2:9f:
40:b8:c9:17:9a:f9:27:e7:d3:28:3a:b9:43:9e:dd:
db:bf:8a:ee:97:c5:b5:d1:4b:fc:a0:36:7c:5f:50:
f1:2f:40:f3:37:89:e0:b2:24:0c:52:54:df:16:73:
0a:98:4b:38:4e:90:16:97:d1:d4:78:b5:d8:a5:0e:
f3:bb:1e:5b:e3:08:7e:84:45:21:58:20:20:29:ba:
9c:99:d3:5e:3d:6f:95:67:9c:fc:54:be:59:14:91:
7c:f4:08:fa:49:15:bb:3b:82:f2:8a:5b:3c:21:2f:
dc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9A:7E:24:8D:BA:A4:39:51:C7:A3:E5:4B:0A:32:A7:D5:A8:67:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/729dde88-bef4-3c1b-9d62-6baf15df42e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
156.7.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:fe:6d:47:d1:82:7a:7b:08:e9:78:48:f0:ec:58:94:4e:67:
65:f1:68:4a:59:bd:ff:9e:79:d1:dd:b7:8e:97:9b:c3:01:b2:
22:a7:7a:16:78:2e:98:b6:1f:0a:82:6d:45:55:f5:39:af:d4:
d0:f3:4d:a2:a8:28:40:de:af:a4:22:22:95:a5:f2:cc:c2:fc:
fa:cf:2e:a1:15:8e:84:45:4d:52:f3:6d:99:90:d2:ef:1a:8d:
a8:7c:3d:18:66:ab:9a:24:09:5f:01:e4:91:0d:5b:8f:1a:b1:
44:f3:ef:12:ad:ba:c7:ee:6a:fe:59:10:2b:21:7e:93:a6:1b:
ae:9a:b1:04:f9:ea:74:94:e2:cc:9e:58:24:4a:b4:1c:7b:ed:
20:4a:e6:77:bb:f3:d6:85:36:49:5b:af:fc:de:c7:90:b5:02:
f2:71:05:ea:b9:c6:bf:d9:9e:21:ff:93:52:ea:f0:26:e0:1a:
eb:bf:10:f0:b7:3f:fd:56:b5:eb:20:0e:1c:e5:cf:2b:09:ad:
08:c9:40:17:38:e6:ef:d4:fc:60:b1:bf:4d:cd:db:24:77:8e:
b3:05:ae:24:51:b6:1e:44:01:6a:84:11:b4:12:ea:a6:bc:94:
e6:cd:c5:39:78:b5:77:95:40:d4:5d:a7:1a:96:7e:58:23:e1:
b3:4c:e8:cf
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3Q6cL62cMT1F39I4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUwNTEyMDAwMFoXDTIyMDYxMDA0MDAwMFowLzEtMCsGA1UEAxMk
MjlkZWE1YjEtZDJiOC00OGE5LWFlNDgtNjAyYzBiY2IzYTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJjbfBv6Kx0foWPJulQAN808alctpXZNcmKo
N/xhgKnrnIg7tAolFuAls54ZxNidUQIdcjx/P9GwIQHQdB43KllRrMrTLN4bNdj/
ey2uHiND/UyQ7VaAlmZnIqy3Z2NTv55zcuD5U4HO2RBb7b3tiYVwGVCG118pTIG1
UZNVttRDg9KVuL8xul0rgLjQqtfxJiUxwp9AuMkXmvkn59MoOrlDnt3bv4rul8W1
0Uv8oDZ8X1DxL0DzN4ngsiQMUlTfFnMKmEs4TpAWl9HUeLXYpQ7zux5b4wh+hEUh
WCAgKbqcmdNePW+VZ5z8VL5ZFJF89Aj6SRW7O4Lyils8IS/ciQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLqafiSNuqQ5Ucej5UsKMqfVqGfWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNzI5ZGRlODgtYmVmNC0z
YzFiLTlkNjItNmJhZjE1ZGY0MmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnAcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAtP5tR9GCensI6XhI8OxYlE5nZfFoSlm9/5550d23jpebwwGyIqd6Fngu
mLYfCoJtRVX1Oa/U0PNNoqgoQN6vpCIilaXyzML8+s8uoRWOhEVNUvNtmZDS7xqN
qHw9GGarmiQJXwHkkQ1bjxqxRPPvEq26x+5q/lkQKyF+k6YbrpqxBPnqdJTizJ5Y
JEq0HHvtIErmd7vz1oU2SVuv/N7HkLUC8nEF6rnGv9meIf+TUurwJuAa678Q8Lc/
/Va16yAOHOXPKwmtCMlAFzjm79T8YLG/Tc3bJHeOswWuJFG2HkQBaoQRtBLqpryU
5s3FOXi1d5VA1F2nGpZ+WCPhs0zozw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:17:24 2025 by rpki-client