Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c00b61e-f26e-31dc-8d63-d197ad30418e.roa
File: 7c00b61e-f26e-31dc-8d63-d197ad30418e.roa (raw, json)
Hash identifier: EVa4p4sfewgXfN0rApzxOrqBzT8IFNozOmzJ2e60ZHc=
Subject key identifier: 72:11:2D:C9:9C:DE:BE:BD:33:F1:98:B6:26:5F:FB:B1:4F:D8:A1:A9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0C7A7597CAEA0A99979FE880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c00b61e-f26e-31dc-8d63-d197ad30418e.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 152.25.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0c:7a:75:97:ca:ea:0a:99:97:9f:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=ff374dd3-d5d3-4969-a022-2791e80b73f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e3:40:16:2c:28:53:a2:19:9d:4c:38:e9:f4:
cf:73:c8:b9:ff:82:c7:9e:24:af:7a:fc:fc:44:c4:
46:e8:61:f0:ce:a2:cc:10:ff:53:98:1e:f3:d1:20:
14:f8:9f:06:78:a7:39:2a:fc:34:bc:24:30:bd:24:
06:f1:a3:03:8b:73:86:ee:b7:78:14:c9:b2:61:a0:
2e:77:39:4c:f9:ab:18:0c:32:a6:26:c6:7b:bc:17:
64:a4:55:28:77:a1:43:2b:7e:87:82:7d:54:3f:c5:
cb:be:f8:8d:3d:73:b6:46:11:ca:50:98:49:8b:1c:
93:38:df:dc:15:5a:71:16:f1:22:41:c6:1c:29:60:
d4:6c:a5:df:a5:c4:fa:58:ef:95:64:63:1f:56:25:
99:80:63:6c:53:90:97:c6:fa:dc:23:d8:3b:e7:4c:
d9:94:0d:f2:d1:07:0d:ca:26:81:38:e9:a3:94:0c:
24:0c:d2:91:63:dc:f6:78:05:59:fe:2d:d3:31:ee:
de:fc:c6:2c:bf:77:be:eb:62:7a:31:99:4c:63:51:
c6:40:0a:b4:40:76:ff:16:1a:5b:0c:cf:e0:fc:57:
89:5b:5c:e4:fb:ec:7d:2c:6d:37:16:62:a8:be:b7:
aa:77:cd:24:e6:18:e4:01:15:6a:a2:2c:24:c9:ff:
71:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:11:2D:C9:9C:DE:BE:BD:33:F1:98:B6:26:5F:FB:B1:4F:D8:A1:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7c00b61e-f26e-31dc-8d63-d197ad30418e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
152.25.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:4c:64:0a:9b:24:88:6b:c0:d1:4e:86:f5:ee:a3:3a:8a:75:
93:5a:fa:a1:58:c9:c5:07:de:8c:ef:b2:d2:c6:e2:ca:19:c8:
16:35:bb:d7:b0:4c:ce:0c:ba:38:e0:70:34:3f:88:0e:86:89:
34:28:38:d7:59:ad:1f:36:36:d2:67:3e:9c:32:48:c3:e6:2e:
05:d6:4e:00:8d:b9:07:a7:d2:ef:81:de:36:9d:73:41:fe:53:
1d:68:85:04:cb:c4:a9:e8:ac:53:fc:c3:fc:45:97:a1:78:bd:
23:d1:11:b7:3a:1b:07:23:d4:53:f3:e5:ec:3e:c6:81:60:5b:
37:4e:57:24:cc:44:b8:d5:e7:41:d8:82:f5:09:32:56:f1:66:
41:0b:07:22:e8:f7:ee:ec:0b:5e:f9:3b:94:7d:a2:24:20:40:
99:fc:63:b5:78:29:55:a8:53:05:21:8c:96:a7:1f:92:73:23:
6d:7a:35:8c:1f:7f:f0:64:24:c2:52:f2:82:bb:1a:6b:92:3e:
ed:b0:2f:d7:e5:0f:33:b9:57:7e:54:3a:c3:5f:06:7f:77:de:
fe:fb:b6:9f:96:12:26:74:a9:41:1d:4c:7f:7f:05:47:f2:cd:
13:3a:a6:ce:94:7d:9a:0e:08:35:bd:ac:fa:08:0f:f3:fb:fd:
ec:ef:38:48
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0MenWXyuoKmZef6IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIyNTA1MDAwMFoXDTIyMDQwMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZmYzNzRkZDMtZDVkMy00OTY5LWEwMjItMjc5MWU4MGI3M2YxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieNAFiwoU6IZnUw46fTPc8i5/4LHniSvevz8
RMRG6GHwzqLMEP9TmB7z0SAU+J8GeKc5Kvw0vCQwvSQG8aMDi3OG7rd4FMmyYaAu
dzlM+asYDDKmJsZ7vBdkpFUod6FDK36Hgn1UP8XLvviNPXO2RhHKUJhJixyTON/c
FVpxFvEiQcYcKWDUbKXfpcT6WO+VZGMfViWZgGNsU5CXxvrcI9g750zZlA3y0QcN
yiaBOOmjlAwkDNKRY9z2eAVZ/i3TMe7e/MYsv3e+62J6MZlMY1HGQAq0QHb/Fhpb
DM/g/FeJW1zk++x9LG03FmKovreqd80k5hjkARVqoiwkyf9xsQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHIRLcmc3r69M/GYtiZf+7FP2KGpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvN2MwMGI2MWUtZjI2ZS0z
MWRjLThkNjMtZDE5N2FkMzA0MThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmBkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAVkxkCpskiGvA0U6G9e6jOop1k1r6oVjJxQfejO+y0sbiyhnIFjW717BM
zgy6OOBwND+IDoaJNCg411mtHzY20mc+nDJIw+YuBdZOAI25B6fS74HeNp1zQf5T
HWiFBMvEqeisU/zD/EWXoXi9I9ERtzobByPUU/Pl7D7GgWBbN05XJMxEuNXnQdiC
9QkyVvFmQQsHIuj37uwLXvk7lH2iJCBAmfxjtXgpVahTBSGMlqcfknMjbXo1jB9/
8GQkwlLygrsaa5I+7bAv1+UPM7lXflQ6w18Gf3fe/vu2n5YSJnSpQR1Mf38FR/LN
EzqmzpR9mg4INb2s+ggP8/v97O84SA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:07 2025 by rpki-client