Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bb0afe6d-e34b-383c-8ebf-0f0ab1343b26.roa
File: bb0afe6d-e34b-383c-8ebf-0f0ab1343b26.roa (raw, json)
Hash identifier: iqegvdpmliQTnaAZyWBcMSvgkViwfPbb3HY6b27E9JY=
Subject key identifier: 49:15:E1:22:73:8D:81:9B:73:3C:E6:B4:7C:F4:22:79:6F:D1:E4:2A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FB205BAF09F2C9E332BFA03C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bb0afe6d-e34b-383c-8ebf-0f0ab1343b26.roa
Signing time: Tue 25 Oct 2022 12:00:00 +0000
ROA not before: Tue 25 Oct 2022 12:00:00 +0000
ROA not after: Wed 30 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 158.141.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:b2:05:ba:f0:9f:2c:9e:33:2b:fa:03:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 25 12:00:00 2022 GMT
Not After : Nov 30 05:00:00 2022 GMT
Subject: CN=881f740b-5f81-4dba-a48b-287e560c18ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:51:44:4d:2e:b8:b5:2c:56:f6:a9:98:f3:51:
ca:2f:87:57:a4:c2:1a:eb:ce:11:dc:d6:b4:f9:e7:
3a:c7:38:3d:85:a5:11:82:e5:b6:c5:78:42:bd:38:
5f:d1:f7:90:e1:32:6a:2a:33:ca:a0:ea:86:a5:7e:
59:16:93:0f:de:74:cd:be:5a:33:a4:c9:20:f0:18:
e5:5b:87:b8:23:20:38:22:76:96:21:60:db:84:89:
0b:11:db:ef:b6:a4:3e:81:82:71:e8:98:8b:fb:20:
d9:59:df:72:35:97:26:dc:11:26:2c:ef:fb:e6:8d:
e7:6c:17:28:f2:1a:1f:b8:39:70:5c:e5:d8:b1:8e:
fd:db:a9:2f:7b:97:3d:a3:af:ff:b2:47:a5:e3:06:
00:77:6f:86:18:d9:19:63:c9:52:df:e3:54:20:1d:
70:15:ef:ef:35:4f:7f:4a:ef:fb:31:f7:cb:2c:5e:
24:d6:90:d5:71:df:97:f2:2c:07:e9:09:df:ad:42:
33:31:31:a6:8b:52:10:5d:cb:dd:18:ae:dd:4a:b6:
c1:9f:29:f3:b1:1d:d4:34:f5:be:38:8b:15:95:e6:
ba:e2:2d:57:12:c7:59:e4:74:27:25:e1:13:22:be:
3c:6a:96:9e:ad:61:b7:c8:4b:5e:4c:e2:c1:4b:79:
4b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:15:E1:22:73:8D:81:9B:73:3C:E6:B4:7C:F4:22:79:6F:D1:E4:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bb0afe6d-e34b-383c-8ebf-0f0ab1343b26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
158.141.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:b7:c8:86:72:d7:d9:38:80:aa:b1:12:e1:24:8f:4a:32:c3:
2d:bc:a8:97:c2:49:4c:da:54:49:8c:d1:16:92:12:c2:97:a3:
88:42:0b:46:91:04:11:fb:c8:e8:17:57:62:20:46:17:2a:22:
57:e3:f5:f8:ed:76:e2:8b:bc:0e:23:ae:b9:ef:77:a9:98:f6:
25:51:da:79:0f:54:ba:a2:f8:f8:a7:1e:b8:b0:19:14:82:eb:
6e:b9:eb:bb:a5:b6:01:88:18:01:15:7a:52:22:58:d5:99:89:
6e:ec:7f:a8:2e:f3:45:66:34:a1:e5:5e:38:a0:f0:fd:90:81:
38:56:93:f2:08:5a:0e:42:7e:43:71:2a:fc:bc:1b:77:91:e9:
bf:04:b0:70:f4:f8:56:40:ac:fe:00:b9:db:c7:2f:46:10:e0:
e6:bb:62:72:f3:45:fd:f5:48:e0:ec:7b:43:80:27:c4:5e:6a:
c4:6c:45:8e:9f:27:71:42:e7:47:46:d9:98:09:b0:c3:38:10:
3d:b0:67:ba:55:f0:78:fe:63:73:57:86:4a:76:1e:4d:fc:63:
b7:3d:e0:0d:13:9c:cd:af:27:95:b7:6f:b9:a5:0f:ac:c9:9d:
66:3a:e3:e5:6a:16:52:f9:8f:a3:1e:0d:91:2a:53:0d:e1:56:
3f:1a:10:15
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+yBbrwnyyeMyv6A8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAyNTEyMDAwMFoXDTIyMTEzMDA1MDAwMFowLzEtMCsGA1UEAxMk
ODgxZjc0MGItNWY4MS00ZGJhLWE0OGItMjg3ZTU2MGMxOGNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1FETS64tSxW9qmY81HKL4dXpMIa684R3Na0
+ec6xzg9haURguW2xXhCvThf0feQ4TJqKjPKoOqGpX5ZFpMP3nTNvlozpMkg8Bjl
W4e4IyA4InaWIWDbhIkLEdvvtqQ+gYJx6JiL+yDZWd9yNZcm3BEmLO/75o3nbBco
8hofuDlwXOXYsY7926kve5c9o6//skel4wYAd2+GGNkZY8lS3+NUIB1wFe/vNU9/
Su/7MffLLF4k1pDVcd+X8iwH6QnfrUIzMTGmi1IQXcvdGK7dSrbBnynzsR3UNPW+
OIsVlea64i1XEsdZ5HQnJeETIr48apaerWG3yEteTOLBS3lLrQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEkV4SJzjYGbczzmtHz0Inlv0eQqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYmIwYWZlNmQtZTM0Yi0z
ODNjLThlYmYtMGYwYWIxMzQzYjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAno0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAvLfIhnLX2TiAqrES4SSPSjLDLbyol8JJTNpUSYzRFpISwpejiEILRpEE
EfvI6BdXYiBGFyoiV+P1+O124ou8DiOuue93qZj2JVHaeQ9UuqL4+KceuLAZFILr
brnru6W2AYgYARV6UiJY1ZmJbux/qC7zRWY0oeVeOKDw/ZCBOFaT8ghaDkJ+Q3Eq
/Lwbd5HpvwSwcPT4VkCs/gC528cvRhDg5rticvNF/fVI4Ox7Q4AnxF5qxGxFjp8n
cULnR0bZmAmwwzgQPbBnulXweP5jc1eGSnYeTfxjtz3gDROcza8nlbdvuaUPrMmd
Zjrj5WoWUvmPox4NkSpTDeFWPxoQFQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:33:53 2025 by rpki-client