Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a38d0fb4-f160-3083-99eb-e93da69ba431.roa
File: a38d0fb4-f160-3083-99eb-e93da69ba431.roa (raw, json)
Hash identifier: M+vbR1NedKbyASt59swVMJTKEH456SmpzUvJIFUQqnU=
Subject key identifier: F9:36:2B:BA:BD:A1:AC:BD:75:24:FC:46:57:38:AF:E1:C4:53:52:0A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6D5691DF29ECE19955733C00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a38d0fb4-f160-3083-99eb-e93da69ba431.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 161.180.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6d:56:91:df:29:ec:e1:99:55:73:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=42d1f6eb-7374-4e32-8832-fb687fa6025c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1f:c0:df:75:fa:b5:c0:ad:62:0e:c7:8d:84:
d9:e1:02:3c:58:12:fd:13:6b:07:30:95:61:c1:d3:
db:70:58:68:7b:75:1e:c6:a2:8f:79:31:1d:f8:e1:
00:f3:49:90:b3:a9:11:0e:ed:e6:5e:d8:99:72:d1:
9f:d2:bf:d4:05:c9:8a:8b:87:85:a0:ed:f3:50:cc:
05:43:03:70:73:2d:ed:3e:4e:94:b7:42:e9:b6:2d:
8f:61:d5:2f:4e:69:fa:03:fc:38:b5:88:e6:1f:3c:
69:c0:5b:d1:47:fb:bd:0d:28:e8:10:eb:4d:4b:1c:
58:20:91:42:f0:9e:b6:47:79:04:7f:bb:f9:8e:c3:
c0:a7:b2:ba:6b:8e:c3:55:a2:e8:e5:91:41:66:df:
d2:af:17:3e:6c:c6:dd:46:b3:66:8f:4f:33:57:b5:
8a:f4:44:b1:ca:5e:25:37:57:f4:54:e9:75:ba:e3:
46:0a:bd:4b:fe:07:0c:8b:65:f0:8d:4e:a2:85:92:
bf:8e:b6:a5:d2:2a:ff:64:ec:43:84:b9:82:10:98:
d7:ba:cd:78:69:ed:da:b2:74:f8:98:53:0b:b1:cc:
3f:66:7d:55:7b:88:08:8c:0f:a5:a6:48:e0:07:d2:
1d:d9:44:6e:ab:54:b8:bf:83:19:d9:65:4c:a6:6c:
2f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:36:2B:BA:BD:A1:AC:BD:75:24:FC:46:57:38:AF:E1:C4:53:52:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a38d0fb4-f160-3083-99eb-e93da69ba431.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.180.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:7f:94:b2:68:49:1b:09:ce:69:f5:10:60:9e:cc:eb:b9:56:
07:9c:c7:01:44:68:8d:47:ab:89:db:e0:5d:4f:27:36:6b:32:
0a:4f:a5:0d:a7:22:fc:b4:55:fe:c4:9a:b4:83:3a:bf:50:f1:
1d:89:f1:e0:cf:d6:e5:5e:5d:23:8e:c6:98:43:0e:79:5d:0d:
ea:5e:a7:3b:36:41:fe:91:b6:92:2f:a3:bd:9b:aa:75:e8:4a:
2c:5b:3e:55:0e:53:01:34:31:3b:d0:24:82:81:bd:69:79:a6:
7d:82:02:90:ad:3e:18:72:a8:14:d6:ea:ff:ef:3f:8f:45:d7:
31:8d:49:6a:aa:38:d1:40:24:bb:6a:55:39:cf:02:e2:01:7a:
50:05:c6:26:eb:f7:c4:89:1b:71:f3:c1:00:53:e0:b9:7d:aa:
27:7a:3b:9c:58:cf:e4:2a:98:1e:9a:a6:df:d6:10:4d:c8:7e:
9a:2e:24:e7:19:fb:e4:57:3b:f4:f7:11:5d:e4:a0:41:0b:e9:
1d:ee:de:cf:ea:4f:fb:1b:c0:f6:5b:b3:51:c0:82:0d:ff:e8:
3e:07:6f:30:c5:80:0a:f4:c5:59:ad:64:e4:58:d0:84:ca:94:
4b:87:28:e5:51:db:ff:35:d6:50:bc:0e:00:8d:6d:5c:c0:68:
45:4a:8e:99
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5tVpHfKezhmVVzPAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcwMTEyMDAwMFoXDTIyMDgwNjA0MDAwMFowLzEtMCsGA1UEAxMk
NDJkMWY2ZWItNzM3NC00ZTMyLTg4MzItZmI2ODdmYTYwMjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih/A33X6tcCtYg7HjYTZ4QI8WBL9E2sHMJVh
wdPbcFhoe3UexqKPeTEd+OEA80mQs6kRDu3mXtiZctGf0r/UBcmKi4eFoO3zUMwF
QwNwcy3tPk6Ut0Lpti2PYdUvTmn6A/w4tYjmHzxpwFvRR/u9DSjoEOtNSxxYIJFC
8J62R3kEf7v5jsPAp7K6a47DVaLo5ZFBZt/Srxc+bMbdRrNmj08zV7WK9ESxyl4l
N1f0VOl1uuNGCr1L/gcMi2XwjU6ihZK/jral0ir/ZOxDhLmCEJjXus14ae3asnT4
mFMLscw/Zn1Ve4gIjA+lpkjgB9Id2URuq1S4v4MZ2WVMpmwvLQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPk2K7q9oay9dST8Rlc4r+HEU1IKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYTM4ZDBmYjQtZjE2MC0z
MDgzLTk5ZWItZTkzZGE2OWJhNDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAobQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKX+UsmhJGwnOafUQYJ7M67lWB5zHAURojUeridvgXU8nNmsyCk+lDaci
/LRV/sSatIM6v1DxHYnx4M/W5V5dI47GmEMOeV0N6l6nOzZB/pG2ki+jvZuqdehK
LFs+VQ5TATQxO9AkgoG9aXmmfYICkK0+GHKoFNbq/+8/j0XXMY1Jaqo40UAku2pV
Oc8C4gF6UAXGJuv3xIkbcfPBAFPguX2qJ3o7nFjP5CqYHpqm39YQTch+mi4k5xn7
5Fc79PcRXeSgQQvpHe7ez+pP+xvA9luzUcCCDf/oPgdvMMWACvTFWa1k5FjQhMqU
S4co5VHb/zXWULwOAI1tXMBoRUqOmQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:58:39 2025 by rpki-client