Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bd573b6d-b13e-30de-a5e1-a334341038e7.roa
File: bd573b6d-b13e-30de-a5e1-a334341038e7.roa (raw, json)
Hash identifier: 1XV4nyaXtaBBNpa2bOnUvqEwwc3Ebczk8u3eyqDvHtk=
Subject key identifier: 78:70:C3:B8:77:DB:D0:81:D0:9C:FA:85:83:5E:4E:A6:5F:3E:7A:B1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D338F7800FAD11D3B15B0F600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bd573b6d-b13e-30de-a5e1-a334341038e7.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 153.49.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:33:8f:78:00:fa:d1:1d:3b:15:b0:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=76f8fba9-8c0c-4b87-b017-c45016f202fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:4d:7a:55:f4:ec:e6:43:d3:95:a9:04:11:
09:00:44:0b:50:b8:9a:1a:a5:55:af:43:e5:ab:93:
eb:5c:f0:e2:06:31:9d:a4:5a:01:ef:5e:b5:87:51:
fb:aa:f9:6d:06:42:dc:a1:e2:9a:5c:15:2f:e1:af:
f3:1c:8e:ff:ff:ec:8f:57:b9:e7:f8:af:d7:40:8d:
41:a1:09:29:c9:a2:39:a2:f4:c5:cb:1d:32:30:84:
d3:01:96:e6:e6:c0:b5:a7:5b:49:4b:4e:a9:98:c1:
d7:c9:c3:ea:38:3a:ae:2e:3d:2a:80:66:b5:69:cb:
16:c9:bd:d3:41:57:df:41:4d:25:2e:13:f2:09:6e:
94:54:23:f3:29:e3:40:bf:4e:b4:7f:3b:aa:bf:3e:
48:60:27:e1:54:fd:87:79:65:6f:05:6f:10:38:33:
8d:d1:68:5f:1b:76:9d:05:52:05:8d:ea:7f:9f:a7:
09:e4:7c:d0:35:a7:a9:6a:ba:d6:48:4c:ba:58:57:
be:46:23:e8:a9:ed:7c:19:a5:90:89:4c:04:be:9d:
03:0e:ce:3a:50:1e:c7:8e:68:77:72:58:f5:74:da:
c9:21:9d:74:86:6f:c6:3b:7a:a0:a5:98:16:2e:ae:
e5:55:c4:2f:c3:be:f6:e4:4c:48:6e:70:59:cc:21:
b6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:70:C3:B8:77:DB:D0:81:D0:9C:FA:85:83:5E:4E:A6:5F:3E:7A:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bd573b6d-b13e-30de-a5e1-a334341038e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
153.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:79:7b:e9:86:cc:06:79:f4:ee:2d:0f:76:8e:57:d7:62:70:
60:8d:b8:25:2e:27:5d:86:c2:d3:1a:93:ca:96:6c:9a:6a:aa:
c4:74:80:68:ca:80:bb:6e:b5:3e:e1:d0:59:8e:b5:3a:c9:30:
0c:6d:49:a5:22:1f:fe:80:e8:22:d4:1b:18:1b:8c:bf:63:8e:
2c:65:ce:85:97:2f:a1:e6:ef:5b:9c:42:25:2b:60:ee:a6:ee:
d2:41:8b:4b:68:17:6b:ce:2c:a7:02:84:7c:a3:b1:be:5c:51:
da:72:be:6f:e0:c0:9b:b4:e9:c1:54:1d:49:1d:9f:74:22:ea:
0e:a1:f2:25:1c:5f:46:50:3c:12:63:c6:ec:04:1e:c2:ad:20:
2d:ee:41:5a:d8:cc:40:eb:42:d2:6b:d0:26:6d:71:b0:b8:6c:
a7:57:5b:3f:5b:64:15:22:ff:d2:5e:48:a2:c3:fd:ec:bb:4f:
ac:e6:5c:dd:7d:12:24:82:e3:02:60:dd:8d:38:0e:fd:11:96:
91:30:8c:d0:c4:ac:78:88:b5:bb:fb:6e:45:9a:fa:5c:78:4b:
48:1c:4f:c2:90:8b:92:0a:8f:20:1b:99:45:66:b2:e5:b2:01:
11:1e:11:3a:41:da:55:4b:5a:80:2f:2e:e2:80:09:f3:0a:fc:
10:f8:d5:45
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0zj3gA+tEdOxWw9gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
NzZmOGZiYTktOGMwYy00Yjg3LWIwMTctYzQ1MDE2ZjIwMmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+ZNelX07OZD05WpBBEJAEQLULiaGqVVr0Pl
q5PrXPDiBjGdpFoB7161h1H7qvltBkLcoeKaXBUv4a/zHI7//+yPV7nn+K/XQI1B
oQkpyaI5ovTFyx0yMITTAZbm5sC1p1tJS06pmMHXycPqODquLj0qgGa1acsWyb3T
QVffQU0lLhPyCW6UVCPzKeNAv060fzuqvz5IYCfhVP2HeWVvBW8QODON0WhfG3ad
BVIFjep/n6cJ5HzQNaeparrWSEy6WFe+RiPoqe18GaWQiUwEvp0DDs46UB7Hjmh3
clj1dNrJIZ10hm/GO3qgpZgWLq7lVcQvw7725ExIbnBZzCG2YwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHhww7h329CB0Jz6hYNeTqZfPnqxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYmQ1NzNiNmQtYjEzZS0z
MGRlLWE1ZTEtYTMzNDM0MTAzOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmTEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbXl76YbMBnn07i0Pdo5X12JwYI24JS4nXYbC0xqTypZsmmqqxHSAaMqA
u261PuHQWY61OskwDG1JpSIf/oDoItQbGBuMv2OOLGXOhZcvoebvW5xCJStg7qbu
0kGLS2gXa84spwKEfKOxvlxR2nK+b+DAm7TpwVQdSR2fdCLqDqHyJRxfRlA8EmPG
7AQewq0gLe5BWtjMQOtC0mvQJm1xsLhsp1dbP1tkFSL/0l5IosP97LtPrOZc3X0S
JILjAmDdjTgO/RGWkTCM0MSseIi1u/tuRZr6XHhLSBxPwpCLkgqPIBuZRWay5bIB
ER4ROkHaVUtagC8u4oAJ8wr8EPjVRQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:17:01 2025 by rpki-client