Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7e378dd3-f417-315b-b77b-3a30d943095d.roa
File: 7e378dd3-f417-315b-b77b-3a30d943095d.roa (raw, json)
Hash identifier: uei6nYObIBVeGNQhOWmKreiXCi5WgKgo1cRke3DiCOM=
Subject key identifier: 3E:45:29:1A:45:33:EC:C5:68:A1:B5:49:6B:7B:17:A3:F1:50:5E:2C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840430BF45C4F6C0C66A4DD4F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7e378dd3-f417-315b-b77b-3a30d943095d.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 152.137.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:43:0b:f4:5c:4f:6c:0c:66:a4:dd:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=8de53c25-d657-4a69-9044-f8e0132c7d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ab:3d:7e:1f:13:6a:11:f6:6e:d6:78:54:01:
aa:45:ab:ae:05:ac:b4:3f:56:56:8b:f1:fa:3c:02:
72:de:77:32:b6:7b:a6:63:87:d9:cd:ef:58:fb:1e:
2a:e5:ab:78:3d:dc:ca:ba:df:7f:73:d4:67:76:2d:
4b:58:83:21:b1:5b:09:c2:d5:18:7b:b0:25:19:ab:
62:89:28:0b:ce:f1:a3:df:b2:b7:52:85:87:0f:e3:
07:e5:07:bb:c9:69:c5:e9:ef:5d:d7:f3:6b:ad:fc:
aa:30:ce:cc:6a:63:7b:98:0d:20:09:24:99:cd:21:
da:3d:f8:04:ed:1f:e7:90:69:07:61:2d:57:8b:a8:
8c:d5:26:de:a8:44:00:ae:24:50:8e:f3:cd:d2:26:
7a:c8:61:36:01:f7:ad:ad:2d:07:d4:ed:4b:9e:6b:
f0:f8:96:36:bf:3a:02:f2:22:06:33:21:1d:d7:6b:
3c:6d:03:07:6a:ce:04:67:7f:53:91:28:1f:9d:f8:
bf:98:2f:fa:8f:6b:e3:db:3f:de:00:64:91:31:d7:
64:3d:99:e7:d3:44:3e:a9:55:76:9d:42:bf:d5:f0:
e1:e7:cd:6f:f6:11:5f:fc:ce:a3:34:76:32:ca:83:
bf:da:60:cd:c4:c8:3f:8b:c3:9d:0c:3a:ea:1c:43:
83:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:45:29:1A:45:33:EC:C5:68:A1:B5:49:6B:7B:17:A3:F1:50:5E:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7e378dd3-f417-315b-b77b-3a30d943095d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
152.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:53:f6:c6:62:a0:78:df:2e:56:bb:16:6b:fb:59:d9:d5:3c:
6d:eb:d2:55:41:02:56:b3:5b:e3:fa:0c:54:3f:ca:8c:33:e8:
39:5e:a2:45:7d:a1:67:fd:05:33:98:04:c9:04:e1:cd:ef:18:
79:5b:d5:c2:9f:4b:c1:63:3f:a4:45:40:2d:36:25:8f:e8:be:
17:52:35:55:91:21:ef:8c:f6:61:1e:f5:0b:64:98:38:b2:17:
49:59:7d:09:10:84:d1:a9:e4:98:aa:56:c5:cd:b7:40:d5:36:
02:70:de:78:89:f7:07:ee:d6:43:94:8d:31:74:19:db:23:e7:
1a:9a:7d:9c:59:95:3b:46:b6:e0:43:5e:b0:02:89:c0:f6:83:
20:c1:3f:36:3e:3d:18:94:eb:42:65:f2:f4:cc:57:4a:51:f2:
3e:41:bd:61:8e:68:04:1f:7c:fb:01:88:bc:8e:20:ca:02:bd:
4c:17:2d:84:a2:7d:5f:7d:72:c3:37:80:8a:0a:2f:a5:33:3f:
58:48:cc:df:8b:97:40:92:72:5e:3e:ee:f6:69:46:da:b9:0e:
9d:5d:33:c3:76:1d:9b:fd:0c:08:28:0f:7c:d2:a0:75:c1:c1:
ed:d9:82:a9:12:f3:b1:45:15:fe:0c:e2:7e:53:55:b2:ab:a2:
85:58:80:d4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBDC/RcT2wMZqTdTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNjEyMDAwMFoXDTIzMDEyMTA1MDAwMFowLzEtMCsGA1UEAxMk
OGRlNTNjMjUtZDY1Ny00YTY5LTkwNDQtZjhlMDEzMmM3ZDcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqs9fh8TahH2btZ4VAGqRauuBay0P1ZWi/H6
PAJy3ncytnumY4fZze9Y+x4q5at4PdzKut9/c9Rndi1LWIMhsVsJwtUYe7AlGati
iSgLzvGj37K3UoWHD+MH5Qe7yWnF6e9d1/NrrfyqMM7MamN7mA0gCSSZzSHaPfgE
7R/nkGkHYS1Xi6iM1SbeqEQAriRQjvPN0iZ6yGE2AfetrS0H1O1Lnmvw+JY2vzoC
8iIGMyEd12s8bQMHas4EZ39TkSgfnfi/mC/6j2vj2z/eAGSRMddkPZnn00Q+qVV2
nUK/1fDh581v9hFf/M6jNHYyyoO/2mDNxMg/i8OdDDrqHEOD/QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFD5FKRpFM+zFaKG1SWt7F6PxUF4sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvN2UzNzhkZDMtZjQxNy0z
MTViLWI3N2ItM2EzMGQ5NDMwOTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmIkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAVFP2xmKgeN8uVrsWa/tZ2dU8bevSVUECVrNb4/oMVD/KjDPoOV6iRX2h
Z/0FM5gEyQThze8YeVvVwp9LwWM/pEVALTYlj+i+F1I1VZEh74z2YR71C2SYOLIX
SVl9CRCE0ankmKpWxc23QNU2AnDeeIn3B+7WQ5SNMXQZ2yPnGpp9nFmVO0a24ENe
sAKJwPaDIME/Nj49GJTrQmXy9MxXSlHyPkG9YY5oBB98+wGIvI4gygK9TBcthKJ9
X31ywzeAigovpTM/WEjM34uXQJJyXj7u9mlG2rkOnV0zw3Ydm/0MCCgPfNKgdcHB
7dmCqRLzsUUV/gziflNVsquihViA1A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:22:00 2025 by rpki-client