Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8fc6f324-88e5-3d44-84dc-f7c2017ba0eb.roa
File: 8fc6f324-88e5-3d44-84dc-f7c2017ba0eb.roa (raw, json)
Hash identifier: y5SRvkv1afVzLDd9Ldiw1rle8O+kCUpF9WLBxtTYOyw=
Subject key identifier: 76:03:EF:93:21:71:50:D5:0E:73:5B:9F:85:55:7A:86:EC:50:E0:C1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CA4A10971D8DF55E5FA21C2C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8fc6f324-88e5-3d44-84dc-f7c2017ba0eb.roa
Signing time: Wed 19 Jan 2022 05:00:00 +0000
ROA not before: Wed 19 Jan 2022 05:00:00 +0000
ROA not after: Wed 23 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 158.141.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:a4:a1:09:71:d8:df:55:e5:fa:21:c2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 19 05:00:00 2022 GMT
Not After : Feb 23 05:00:00 2022 GMT
Subject: CN=0b54d1d1-8409-4feb-8db6-a1b36caebf47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:82:9c:12:79:4d:5f:32:f3:cc:fa:b1:57:5e:
48:eb:0a:e2:2b:52:01:cd:a6:2b:8f:7c:98:1b:44:
84:6b:c7:9c:b0:ea:64:60:84:90:a7:ad:cf:0d:81:
f1:a4:75:03:c2:ca:f6:c4:64:99:3d:c5:0c:80:2d:
28:ac:25:81:52:40:9a:96:f4:3f:af:5d:1e:43:17:
5b:c2:e9:de:12:46:5c:8c:c6:37:a9:3c:91:1e:cd:
70:a4:fd:b8:b3:7c:2e:0b:93:73:29:c1:a4:a7:40:
41:75:41:3b:33:56:b0:c9:37:c5:b8:10:e0:5a:37:
28:a7:47:69:c0:bf:6b:cd:82:50:b1:a8:96:d5:20:
9c:90:4e:c0:34:bf:e4:d4:8a:03:a0:a3:64:b5:98:
c2:44:25:4b:ac:12:a2:77:2f:c8:ef:ef:11:94:fe:
8f:0e:28:4c:b4:26:6d:9e:72:a8:66:4e:37:8f:09:
3a:a6:a6:1c:d8:4b:e7:6e:3f:bf:3b:58:2d:dd:c3:
50:a2:85:24:9a:3d:ac:b0:24:3b:88:59:5a:0e:7d:
fa:13:64:cb:c2:a1:ef:71:c3:15:5b:3b:f0:01:f9:
60:2e:80:a1:8a:01:65:d2:06:32:44:ef:3d:a3:e3:
c2:72:39:34:ee:53:ba:45:99:f6:22:36:8b:24:de:
10:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:03:EF:93:21:71:50:D5:0E:73:5B:9F:85:55:7A:86:EC:50:E0:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8fc6f324-88e5-3d44-84dc-f7c2017ba0eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
158.141.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:83:cb:f9:06:0c:4e:6f:b7:24:c3:a9:d4:7b:1b:5c:3d:c4:
39:5a:55:84:ab:5b:76:bd:eb:a3:78:ce:71:f2:92:fd:d9:9e:
42:ab:c4:ac:98:5f:4d:53:96:15:c0:79:05:b9:1e:10:ca:92:
8f:91:9d:fe:47:52:ed:a5:b6:c4:a0:a6:ae:56:7b:67:bd:3c:
ee:29:f4:01:b2:c1:cd:37:2f:cb:9c:99:e4:25:2e:9b:54:fc:
d9:03:07:34:c4:66:9d:eb:41:95:24:a0:c2:39:63:30:6d:44:
26:8e:c6:d9:8f:ea:32:23:11:b8:2c:26:c1:41:0f:90:8f:c8:
0d:7a:37:29:60:58:6c:ba:4c:7b:15:bd:3e:b7:8b:43:69:f8:
c7:9a:aa:81:e2:55:e9:29:a0:3e:98:ef:d6:5b:dc:b9:d8:04:
0f:4d:79:ac:99:ae:4a:0a:14:af:41:c8:64:91:f1:8f:10:17:
b4:cc:59:ed:ff:b1:a3:74:3e:e9:e9:3e:45:bd:c5:80:9f:38:
df:77:8a:b5:e4:dc:25:21:93:ec:f3:c2:f2:49:28:c6:d3:78:
34:e3:96:24:d5:77:c7:cb:82:93:63:9c:58:a7:04:ec:8c:1e:
62:e7:bc:74:f8:63:8b:64:69:f6:08:72:23:77:da:cf:0b:6f:
c0:b6:85:9e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDykoQlx2N9V5fohwsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDExOTA1MDAwMFoXDTIyMDIyMzA1MDAwMFowLzEtMCsGA1UEAxMk
MGI1NGQxZDEtODQwOS00ZmViLThkYjYtYTFiMzZjYWViZjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4KcEnlNXzLzzPqxV15I6wriK1IBzaYrj3yY
G0SEa8ecsOpkYISQp63PDYHxpHUDwsr2xGSZPcUMgC0orCWBUkCalvQ/r10eQxdb
wuneEkZcjMY3qTyRHs1wpP24s3wuC5NzKcGkp0BBdUE7M1awyTfFuBDgWjcop0dp
wL9rzYJQsaiW1SCckE7ANL/k1IoDoKNktZjCRCVLrBKidy/I7+8RlP6PDihMtCZt
nnKoZk43jwk6pqYc2Evnbj+/O1gt3cNQooUkmj2ssCQ7iFlaDn36E2TLwqHvccMV
WzvwAflgLoChigFl0gYyRO89o+PCcjk07lO6RZn2IjaLJN4Q/wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHYD75MhcVDVDnNbn4VVeobsUODBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOGZjNmYzMjQtODhlNS0z
ZDQ0LTg0ZGMtZjdjMjAxN2JhMGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAno0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAooPL+QYMTm+3JMOp1HsbXD3EOVpVhKtbdr3ro3jOcfKS/dmeQqvErJhf
TVOWFcB5BbkeEMqSj5Gd/kdS7aW2xKCmrlZ7Z7087in0AbLBzTcvy5yZ5CUum1T8
2QMHNMRmnetBlSSgwjljMG1EJo7G2Y/qMiMRuCwmwUEPkI/IDXo3KWBYbLpMexW9
PreLQ2n4x5qqgeJV6SmgPpjv1lvcudgED015rJmuSgoUr0HIZJHxjxAXtMxZ7f+x
o3Q+6ek+Rb3FgJ8433eKteTcJSGT7PPC8kkoxtN4NOOWJNV3x8uCk2OcWKcE7Iwe
Yue8dPhji2Rp9ghyI3fazwtvwLaFng==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:04:59 2025 by rpki-client