Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/88a6253c-02fb-33f0-9de9-6a5d176f9f7d.roa
File: 88a6253c-02fb-33f0-9de9-6a5d176f9f7d.roa (raw, json)
Hash identifier: nnE9HyolMgg3jtr7X4o3hyGYIAUWaChX3yhy9vo7pjE=
Subject key identifier: 65:FF:80:51:7B:97:30:00:5D:13:8B:8A:63:A8:B1:08:8A:DA:AD:D7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7FE34C8426F9371429A488A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/88a6253c-02fb-33f0-9de9-6a5d176f9f7d.roa
Signing time: Fri 07 Oct 2022 12:00:00 +0000
ROA not before: Fri 07 Oct 2022 12:00:00 +0000
ROA not after: Sat 12 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 167.149.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7f:e3:4c:84:26:f9:37:14:29:a4:88:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 7 12:00:00 2022 GMT
Not After : Nov 12 05:00:00 2022 GMT
Subject: CN=d7885868-c975-4da0-89f4-6a458d03ab2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:15:77:d8:6f:0d:96:a8:62:31:ba:63:95:
fe:95:d0:d4:88:a0:cc:3c:d2:9f:3d:59:82:e9:f8:
1a:40:7d:79:27:0d:d2:ea:ce:cf:80:9a:cd:00:48:
bb:3b:86:9e:af:14:2d:6b:d5:0a:92:ab:e9:5e:fb:
b9:51:0c:c0:d7:05:a9:6a:dc:e0:b1:a3:fd:85:68:
fd:b6:2b:36:81:6a:ce:74:92:35:3c:d8:1d:c0:3e:
54:46:d5:c9:8a:0f:0c:13:c1:2c:62:f8:b7:e6:d8:
b3:31:9e:be:36:59:83:d1:f5:42:5f:70:cc:27:57:
0d:8a:09:30:cb:74:e8:11:d5:66:70:6e:2e:0d:0f:
a9:b2:ec:df:91:c7:1d:2f:5d:81:24:ed:b1:5b:31:
74:ef:44:a9:09:dd:13:3f:e1:59:d5:5c:2a:7b:b9:
21:a6:e2:16:90:8f:69:6b:eb:ba:2e:2a:f4:35:bb:
e2:da:41:c6:8b:84:b3:c0:0b:06:12:4f:4b:4a:25:
5b:00:09:33:9e:86:72:b7:fc:b9:5d:4f:cf:32:90:
f6:ff:aa:0d:d6:e1:e9:0d:30:bf:c3:24:4b:09:76:
f2:88:30:ea:ba:d2:97:f0:b1:27:7b:82:1c:64:53:
7f:75:20:23:7e:33:2d:ca:6f:9e:49:d2:27:3c:ac:
1d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FF:80:51:7B:97:30:00:5D:13:8B:8A:63:A8:B1:08:8A:DA:AD:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/88a6253c-02fb-33f0-9de9-6a5d176f9f7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
167.149.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:22:5b:52:15:82:c8:db:4e:3a:c0:ba:96:59:b4:77:c7:67:
ad:a9:7b:b5:ef:54:3d:c3:5a:c6:db:9b:08:04:7f:29:36:52:
b9:05:67:4a:60:bd:bf:9d:11:59:a1:41:d9:f6:31:39:16:bb:
56:0b:b9:11:3f:5c:76:cc:7f:c9:e9:7f:fd:cd:9d:98:cc:6f:
37:85:88:93:67:ea:50:aa:fb:66:68:c6:2b:5c:33:e3:2b:75:
c7:81:17:bf:bc:84:01:4f:62:02:11:a4:be:9d:6e:86:ea:f4:
3b:62:8f:5e:4c:00:17:e7:0a:14:43:e4:71:eb:23:24:1a:4a:
13:de:cf:fd:d0:f0:24:f2:fa:7d:65:5c:b5:b1:cc:71:8c:d7:
f9:96:bd:7b:6e:a0:9b:82:a5:6a:ad:51:69:82:97:ef:b9:62:
3f:6b:d6:08:53:00:7e:9a:10:1d:bc:68:a7:58:78:e4:5c:53:
e0:35:2d:48:20:49:9d:1c:b2:30:7e:c3:72:7d:20:5b:25:11:
9a:91:3a:da:7f:c4:ec:5e:71:70:5b:64:51:e0:9a:16:e0:29:
5f:38:9b:60:db:a9:ad:0b:d8:d4:be:52:89:53:e9:be:d1:b5:
48:e0:09:24:18:dc:1d:5f:bc:da:4a:cd:31:9d:26:71:1d:ea:
28:b8:99:07
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9/40yEJvk3FCmkiKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAwNzEyMDAwMFoXDTIyMTExMjA1MDAwMFowLzEtMCsGA1UEAxMk
ZDc4ODU4NjgtYzk3NS00ZGEwLTg5ZjQtNmE0NThkMDNhYjJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRAVd9hvDZaoYjG6Y5X+ldDUiKDMPNKfPVmC
6fgaQH15Jw3S6s7PgJrNAEi7O4aerxQta9UKkqvpXvu5UQzA1wWpatzgsaP9hWj9
tis2gWrOdJI1PNgdwD5URtXJig8ME8EsYvi35tizMZ6+NlmD0fVCX3DMJ1cNigkw
y3ToEdVmcG4uDQ+psuzfkccdL12BJO2xWzF070SpCd0TP+FZ1Vwqe7khpuIWkI9p
a+u6Lir0Nbvi2kHGi4SzwAsGEk9LSiVbAAkznoZyt/y5XU/PMpD2/6oN1uHpDTC/
wyRLCXbyiDDqutKX8LEne4IcZFN/dSAjfjMtym+eSdInPKwdlQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGX/gFF7lzAAXROLimOosQiK2q3XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvODhhNjI1M2MtMDJmYi0z
M2YwLTlkZTktNmE1ZDE3NmY5ZjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAp5UwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZCJbUhWCyNtOOsC6llm0d8dnral7te9UPcNaxtubCAR/KTZSuQVnSmC9
v50RWaFB2fYxORa7Vgu5ET9cdsx/yel//c2dmMxvN4WIk2fqUKr7ZmjGK1wz4yt1
x4EXv7yEAU9iAhGkvp1uhur0O2KPXkwAF+cKFEPkcesjJBpKE97P/dDwJPL6fWVc
tbHMcYzX+Za9e26gm4Klaq1RaYKX77liP2vWCFMAfpoQHbxop1h45FxT4DUtSCBJ
nRyyMH7Dcn0gWyURmpE62n/E7F5xcFtkUeCaFuApXzibYNuprQvY1L5SiVPpvtG1
SOAJJBjcHV+82krNMZ0mcR3qKLiZBw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 22:22:24 2025 by rpki-client