Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d7764c7-0069-342e-b99d-0de3f9bf2f9e.roa
File: 8d7764c7-0069-342e-b99d-0de3f9bf2f9e.roa (raw, json)
Hash identifier: 7rW4cwE1oeaM4B7gLKkMnfptVFVXoJWZ8ey79u/FLYw=
Subject key identifier: A2:5D:F5:1C:2D:0F:F7:EB:09:DF:C1:68:AF:25:1C:40:AB:1D:5C:16
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBB195205B002FEE8EC630280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d7764c7-0069-342e-b99d-0de3f9bf2f9e.roa
Signing time: Thu 28 Jul 2022 12:00:00 +0000
ROA not before: Thu 28 Jul 2022 12:00:00 +0000
ROA not after: Fri 02 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 153.49.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bb:19:52:05:b0:02:fe:e8:ec:63:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 28 12:00:00 2022 GMT
Not After : Sep 2 04:00:00 2022 GMT
Subject: CN=d6b1bdc6-268c-45b9-a63b-5c65f2c1b3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:11:70:30:b2:2c:2a:c7:c3:6e:69:54:a7:
8f:a6:cb:cc:11:8b:cf:52:3d:d1:14:d5:21:88:53:
af:60:40:4d:3c:cf:1e:1b:9e:94:40:de:44:a1:5a:
2f:2d:a8:31:aa:28:55:80:c1:e7:ac:d4:13:90:83:
b5:88:d4:21:64:43:a4:7b:6a:e0:bd:9a:f8:15:ab:
b3:f8:f7:bd:df:4d:3e:12:f0:ab:cc:03:ef:5a:6f:
98:28:0f:8e:09:37:47:fa:b4:41:58:0a:98:a9:a4:
e3:ce:5b:1b:40:25:34:f1:16:f7:10:81:f6:77:6b:
d8:51:88:d9:ba:32:ad:ac:ff:9e:73:3a:a1:12:82:
d1:89:e8:b8:19:e4:1d:55:83:c3:7b:d7:c7:32:ed:
bf:1c:a6:e2:77:37:43:7f:87:c3:f3:31:19:16:9f:
9b:b3:8b:b0:09:14:f5:d0:4e:8b:37:e5:15:4e:95:
98:f7:bc:8b:f5:0f:61:2e:d8:27:ea:4d:06:29:d5:
3d:b8:67:82:67:a3:f6:c7:b6:4b:3a:c1:fd:dc:56:
a5:f3:78:31:aa:e6:e3:aa:14:7c:82:49:94:96:fb:
26:dc:ab:4e:57:f8:cf:6c:a5:b0:ca:ae:c5:80:7f:
c6:20:e4:13:4e:0c:08:16:3f:f0:f8:e1:de:79:76:
61:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5D:F5:1C:2D:0F:F7:EB:09:DF:C1:68:AF:25:1C:40:AB:1D:5C:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8d7764c7-0069-342e-b99d-0de3f9bf2f9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
153.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:98:56:48:c5:15:2e:f9:dd:f7:06:bb:bb:ff:31:73:94:cb:
10:ce:6c:c0:ae:e2:c4:a0:b9:ab:f9:22:8b:ad:58:0c:4a:9d:
89:46:a4:39:42:18:0a:84:ba:c4:24:4b:d4:dd:d3:d3:8d:a7:
5b:90:2d:33:4c:c7:61:46:3b:2b:cb:7e:d3:84:6f:21:4a:d8:
97:f2:b3:f3:20:49:08:9d:96:e3:f6:73:22:71:e4:0b:ac:4f:
a8:5c:23:7d:9e:b4:08:ff:59:bd:a8:1c:5f:f4:07:27:e0:99:
72:de:34:25:d7:23:dd:b8:7e:9f:23:09:3d:4e:b5:6d:4d:dc:
90:59:99:a0:b5:1b:cb:b1:2e:7f:44:ee:16:1c:bd:ad:20:3c:
06:3d:07:9e:72:c6:f4:cb:63:64:d8:1e:a4:2b:b0:05:37:33:
67:97:b2:09:b4:47:e2:61:95:2d:df:7a:ff:ac:1a:e7:f2:66:
76:b5:ba:0c:ba:22:78:0d:3f:d2:32:b1:f9:00:80:1e:d7:94:
4d:74:52:8e:bb:61:a4:f5:59:f7:b5:3c:2b:b7:af:5f:8a:d1:
fa:dc:2d:1e:fb:6f:e8:2d:bf:a2:ed:39:e3:cb:3d:26:54:2b:
a9:0f:90:6a:c4:c0:06:da:64:23:fa:a0:b7:6e:d4:36:bb:9b:
a8:a7:54:08
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD67GVIFsAL+6OxjAoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcyODEyMDAwMFoXDTIyMDkwMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZDZiMWJkYzYtMjY4Yy00NWI5LWE2M2ItNWM2NWYyYzFiM2ZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQcRcDCyLCrHw25pVKePpsvMEYvPUj3RFNUh
iFOvYEBNPM8eG56UQN5EoVovLagxqihVgMHnrNQTkIO1iNQhZEOke2rgvZr4Fauz
+Pe9300+EvCrzAPvWm+YKA+OCTdH+rRBWAqYqaTjzlsbQCU08Rb3EIH2d2vYUYjZ
ujKtrP+eczqhEoLRiei4GeQdVYPDe9fHMu2/HKbidzdDf4fD8zEZFp+bs4uwCRT1
0E6LN+UVTpWY97yL9Q9hLtgn6k0GKdU9uGeCZ6P2x7ZLOsH93Fal83gxqubjqhR8
gkmUlvsm3KtOV/jPbKWwyq7FgH/GIOQTTgwIFj/w+OHeeXZhoQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKJd9RwtD/frCd/BaK8lHECrHVwWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOGQ3NzY0YzctMDA2OS0z
NDJlLWI5OWQtMGRlM2Y5YmYyZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmTEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPphWSMUVLvnd9wa7u/8xc5TLEM5swK7ixKC5q/kii61YDEqdiUakOUIY
CoS6xCRL1N3T042nW5AtM0zHYUY7K8t+04RvIUrYl/Kz8yBJCJ2W4/ZzInHkC6xP
qFwjfZ60CP9ZvagcX/QHJ+CZct40Jdcj3bh+nyMJPU61bU3ckFmZoLUby7Euf0Tu
Fhy9rSA8Bj0HnnLG9MtjZNgepCuwBTczZ5eyCbRH4mGVLd96/6wa5/JmdrW6DLoi
eA0/0jKx+QCAHteUTXRSjrthpPVZ97U8K7evX4rR+twtHvtv6C2/ou0548s9JlQr
qQ+QasTABtpkI/qgt27UNrubqKdUCA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:33:56 2025 by rpki-client