Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b38c03d7-5f56-3125-9fc3-a369a8f56a65.roa
File: b38c03d7-5f56-3125-9fc3-a369a8f56a65.roa (raw, json)
Hash identifier: s7QhmvwAm6z+8l346hzMDwtgg1jZvMzz8D0+hsHOX6M=
Subject key identifier: 48:41:0F:96:E5:A0:F9:85:35:BE:EC:A2:BB:F0:58:FB:8D:32:98:D6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CA4A111B7546833F27E157680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b38c03d7-5f56-3125-9fc3-a369a8f56a65.roa
Signing time: Wed 19 Jan 2022 05:00:00 +0000
ROA not before: Wed 19 Jan 2022 05:00:00 +0000
ROA not after: Wed 23 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 158.141.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:a4:a1:11:b7:54:68:33:f2:7e:15:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 19 05:00:00 2022 GMT
Not After : Feb 23 05:00:00 2022 GMT
Subject: CN=dff829c8-4cce-4080-9f6b-cf56a76f5131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9d:9c:c7:fe:9d:cb:9a:d0:7d:2d:95:13:55:
ba:a3:1f:2c:37:c9:bb:92:5f:ae:c7:fb:8b:b0:63:
c3:94:08:36:e9:d3:7b:bb:bc:fa:e8:0c:f0:53:b2:
5a:a7:70:aa:3b:ee:0e:49:0d:a6:c2:8d:cd:06:1e:
4e:09:88:23:87:07:83:8b:ad:e7:de:88:d2:66:c6:
92:54:55:8f:bd:e2:b5:c2:b8:84:97:4f:d8:a0:c2:
f0:55:f1:29:51:a4:4b:1e:f9:35:d5:55:7f:db:8f:
9e:6b:64:8a:eb:a0:82:e9:43:c7:bc:3b:b7:7e:cb:
dd:e6:ce:6d:34:21:20:17:3f:40:9e:dd:d1:00:30:
be:f0:86:9a:f1:3e:ac:ba:ae:20:5b:27:40:75:cf:
58:df:cf:c8:fe:09:95:e0:ac:40:82:bd:23:0f:b6:
6d:1d:b7:a9:67:a2:0d:fc:6a:b4:65:de:56:20:1e:
29:31:bf:a0:aa:ff:a6:d6:a7:d9:ef:72:af:fb:c8:
09:6c:16:20:90:7b:14:d2:79:d1:93:22:0e:f0:39:
a0:cb:a7:9b:93:24:e5:61:ca:cd:79:27:a5:98:47:
48:56:e7:b0:6c:ba:10:5d:79:9a:8c:d9:82:67:ec:
16:03:46:0c:59:fb:cf:5d:9e:26:7c:cf:92:4d:c0:
0b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:41:0F:96:E5:A0:F9:85:35:BE:EC:A2:BB:F0:58:FB:8D:32:98:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b38c03d7-5f56-3125-9fc3-a369a8f56a65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
158.141.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:46:ff:34:ff:c5:88:c8:0c:a4:b4:3e:81:67:2a:c2:a0:4a:
15:7d:e7:4c:b7:17:ac:65:50:ba:3d:c3:88:ff:08:37:27:c4:
2e:29:25:7c:33:4b:89:b3:18:3c:9c:61:df:16:c4:43:30:4c:
e5:86:9a:a6:d7:95:be:04:9a:b9:25:6a:30:ba:cf:6a:82:9d:
26:24:60:25:4a:2c:11:1a:8a:39:03:14:e2:73:0c:4b:98:59:
05:c0:2c:e3:5d:49:57:dc:47:b3:9a:07:27:1c:fc:24:12:26:
a4:b8:14:ea:cf:f6:ba:58:89:86:6d:b9:71:fb:f6:b3:01:d8:
84:a0:c9:e2:bd:86:d6:ff:33:6d:21:6e:e1:30:67:5c:d1:06:
4f:39:33:fa:e1:c7:e7:ab:51:c8:79:3c:dc:e5:50:73:9e:a3:
2a:9d:ef:d6:9d:35:a1:7d:0c:a0:46:8f:9a:01:53:22:84:0f:
ef:ca:32:be:71:fc:5e:4e:48:c4:0b:c8:8f:33:71:aa:22:9c:
35:9f:9f:17:6b:6f:d7:6c:8f:8f:42:76:cf:0d:10:9d:c2:fd:
f3:e9:a1:f4:d3:0a:0d:e8:cd:c6:c3:96:d5:ff:06:1d:a8:11:
35:5d:bc:85:cd:38:87:44:70:ff:83:6b:be:e3:37:11:79:d6:
d5:c0:ca:7c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDykoRG3VGgz8n4VdoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDExOTA1MDAwMFoXDTIyMDIyMzA1MDAwMFowLzEtMCsGA1UEAxMk
ZGZmODI5YzgtNGNjZS00MDgwLTlmNmItY2Y1NmE3NmY1MTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk52cx/6dy5rQfS2VE1W6ox8sN8m7kl+ux/uL
sGPDlAg26dN7u7z66AzwU7Jap3CqO+4OSQ2mwo3NBh5OCYgjhweDi63n3ojSZsaS
VFWPveK1wriEl0/YoMLwVfEpUaRLHvk11VV/24+ea2SK66CC6UPHvDu3fsvd5s5t
NCEgFz9Ant3RADC+8Iaa8T6suq4gWydAdc9Y38/I/gmV4KxAgr0jD7ZtHbepZ6IN
/Gq0Zd5WIB4pMb+gqv+m1qfZ73Kv+8gJbBYgkHsU0nnRkyIO8Dmgy6ebkyTlYcrN
eSelmEdIVuewbLoQXXmajNmCZ+wWA0YMWfvPXZ4mfM+STcALBwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEhBD5bloPmFNb7sorvwWPuNMpjWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYjM4YzAzZDctNWY1Ni0z
MTI1LTlmYzMtYTM2OWE4ZjU2YTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAno0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAdkb/NP/FiMgMpLQ+gWcqwqBKFX3nTLcXrGVQuj3DiP8INyfELiklfDNL
ibMYPJxh3xbEQzBM5YaapteVvgSauSVqMLrPaoKdJiRgJUosERqKOQMU4nMMS5hZ
BcAs411JV9xHs5oHJxz8JBImpLgU6s/2uliJhm25cfv2swHYhKDJ4r2G1v8zbSFu
4TBnXNEGTzkz+uHH56tRyHk83OVQc56jKp3v1p01oX0MoEaPmgFTIoQP78oyvnH8
Xk5IxAvIjzNxqiKcNZ+fF2tv12yPj0J2zw0QncL98+mh9NMKDejNxsOW1f8GHagR
NV28hc04h0Rw/4NrvuM3EXnW1cDKfA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:04:27 2025 by rpki-client