Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9f87dfd0-2371-3d24-bff9-2b1bf0787444.roa
File: 9f87dfd0-2371-3d24-bff9-2b1bf0787444.roa (raw, json)
Hash identifier: r1hdh4S35RrIqWvSUTYWtQBSudIbg5uDboolhL3NQg8=
Subject key identifier: 5D:DB:60:CC:0C:B2:4C:2A:F1:09:94:2F:E8:12:A2:42:EC:89:F6:F0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF718D06F8727C7F50A599500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9f87dfd0-2371-3d24-bff9-2b1bf0787444.roa
Signing time: Thu 19 May 2022 12:00:00 +0000
ROA not before: Thu 19 May 2022 12:00:00 +0000
ROA not after: Fri 24 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 152.137.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f7:18:d0:6f:87:27:c7:f5:0a:59:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 19 12:00:00 2022 GMT
Not After : Jun 24 04:00:00 2022 GMT
Subject: CN=dabe2968-9235-4479-98df-afd7a1440bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f5:3a:fb:cb:5a:0d:22:f6:93:3c:56:a9:4c:
31:b3:2d:a0:8b:dd:1d:a6:7a:0a:c6:b4:cd:58:8b:
d2:28:47:94:b5:cd:75:94:50:3c:c6:db:32:a7:d7:
99:d1:09:a8:86:ce:8b:42:6a:00:d8:e8:f7:25:ee:
85:e8:2f:82:c5:f1:57:f5:93:ad:93:b5:51:04:0b:
ff:39:70:d9:5d:e9:07:83:e7:c9:28:20:6a:ca:9c:
09:2c:3d:6b:7a:cc:8c:07:f9:86:ba:80:60:b0:7f:
df:9e:f2:ee:4f:d4:d2:dc:d1:5a:c6:70:98:ac:a7:
f9:ed:b6:11:ea:fb:47:ea:95:18:ec:17:02:57:cc:
9e:3e:50:43:6f:56:dd:a5:fe:a5:bd:51:77:7b:b6:
8f:2c:03:c9:85:e9:7e:9d:3e:b6:68:29:66:c0:9c:
c9:81:96:ec:2d:2d:2d:d7:36:c8:a6:da:43:11:56:
31:01:6e:aa:56:5d:be:3a:54:ec:aa:96:c9:a2:a8:
2a:f5:ce:10:9b:47:c0:a9:dd:c4:1e:cd:8b:9d:2f:
10:db:60:32:39:70:2c:93:b5:c7:12:18:45:b1:fc:
80:5a:6d:6b:7d:32:4a:f8:5c:77:f3:20:73:0b:bc:
42:a2:e4:08:bb:30:ae:e6:34:5b:57:72:02:a1:9b:
7c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DB:60:CC:0C:B2:4C:2A:F1:09:94:2F:E8:12:A2:42:EC:89:F6:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9f87dfd0-2371-3d24-bff9-2b1bf0787444.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
152.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:29:32:1f:08:36:6d:59:7f:08:37:f4:5d:a7:52:ad:4e:71:
8e:cf:1f:e0:1c:78:28:6e:bd:9a:b7:2a:f2:92:ce:ab:33:a7:
00:c9:1a:da:30:58:75:fb:b3:fb:e1:c7:b8:7e:9b:f6:b8:2c:
a9:e1:53:e8:f9:92:3b:89:fd:bc:72:c8:88:4d:4c:8a:c5:8a:
f5:07:b0:b4:53:49:fe:90:12:f6:bc:05:39:17:6b:9c:94:23:
24:90:d6:f0:33:eb:9f:5c:6d:5f:19:a7:63:15:18:25:5f:d9:
ed:be:ef:91:b4:bd:7a:b1:7c:b4:c8:f9:28:25:c4:97:ec:b9:
c7:6a:9f:fd:49:55:b7:ac:27:ad:fc:82:54:14:e2:e4:1f:d8:
99:8b:1b:bf:88:c8:78:2f:bc:e5:f8:5c:5f:e9:02:16:bd:d5:
5c:8d:22:50:b3:9b:b9:55:c4:e3:68:f6:0a:bd:c3:30:56:17:
82:38:90:81:62:f0:bd:7c:16:b4:70:da:82:04:c6:b1:0e:0f:
63:31:ee:c3:7a:db:a2:89:84:d7:b3:8e:a3:7f:ef:1a:84:79:
51:0b:52:e9:92:0d:ac:9a:e7:75:01:f0:0d:6e:30:01:47:b5:
5e:9f:1d:b4:08:ae:8f:b9:5c:3a:23:e5:ad:a4:c2:be:e7:ea:
e5:30:b0:c5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD33GNBvhyfH9QpZlQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUxOTEyMDAwMFoXDTIyMDYyNDA0MDAwMFowLzEtMCsGA1UEAxMk
ZGFiZTI5NjgtOTIzNS00NDc5LTk4ZGYtYWZkN2ExNDQwYmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/U6+8taDSL2kzxWqUwxsy2gi90dpnoKxrTN
WIvSKEeUtc11lFA8xtsyp9eZ0Qmohs6LQmoA2Oj3Je6F6C+CxfFX9ZOtk7VRBAv/
OXDZXekHg+fJKCBqypwJLD1resyMB/mGuoBgsH/fnvLuT9TS3NFaxnCYrKf57bYR
6vtH6pUY7BcCV8yePlBDb1bdpf6lvVF3e7aPLAPJhel+nT62aClmwJzJgZbsLS0t
1zbIptpDEVYxAW6qVl2+OlTsqpbJoqgq9c4Qm0fAqd3EHs2LnS8Q22AyOXAsk7XH
EhhFsfyAWm1rfTJK+Fx38yBzC7xCouQIuzCu5jRbV3ICoZt8FwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFF3bYMwMskwq8QmUL+gSokLsifbwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOWY4N2RmZDAtMjM3MS0z
ZDI0LWJmZjktMmIxYmYwNzg3NDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmIkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAASkyHwg2bVl/CDf0XadSrU5xjs8f4Bx4KG69mrcq8pLOqzOnAMka2jBY
dfuz++HHuH6b9rgsqeFT6PmSO4n9vHLIiE1MisWK9QewtFNJ/pAS9rwFORdrnJQj
JJDW8DPrn1xtXxmnYxUYJV/Z7b7vkbS9erF8tMj5KCXEl+y5x2qf/UlVt6wnrfyC
VBTi5B/YmYsbv4jIeC+85fhcX+kCFr3VXI0iULObuVXE42j2Cr3DMFYXgjiQgWLw
vXwWtHDaggTGsQ4PYzHuw3rboomE17OOo3/vGoR5UQtS6ZINrJrndQHwDW4wAUe1
Xp8dtAiuj7lcOiPlraTCvufq5TCwxQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:11:15 2025 by rpki-client