Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bff96213-3f7c-3447-af46-70abd55a9790.roa
File: bff96213-3f7c-3447-af46-70abd55a9790.roa (raw, json)
Hash identifier: qlI0+d2/GycstKbR6XYfsbcQYYSJwgy+8oQIStkZQ2M=
Subject key identifier: C7:86:18:30:EA:E7:65:04:14:D9:71:91:16:BA:75:81:96:B0:50:B5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE2DA5B9826A77218C987D7A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bff96213-3f7c-3447-af46-70abd55a9790.roa
Signing time: Fri 12 Aug 2022 12:00:00 +0000
ROA not before: Fri 12 Aug 2022 12:00:00 +0000
ROA not after: Sat 17 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 162.137.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e2:da:5b:98:26:a7:72:18:c9:87:d7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 12 12:00:00 2022 GMT
Not After : Sep 17 04:00:00 2022 GMT
Subject: CN=ffeae6b7-9171-4f83-ad44-1270d24d1733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:77:13:b4:82:ba:ad:66:02:cb:da:6f:b4:3e:
58:c9:91:28:71:fe:2c:af:7c:e5:49:8e:6e:81:c4:
8d:97:6b:20:98:c3:99:d6:dc:f5:0f:a8:b1:8e:75:
a3:30:4e:78:39:4c:e6:6e:88:be:bf:54:2c:45:50:
4c:f1:f6:f6:22:fb:25:65:47:5e:41:74:8b:a1:8c:
a5:90:50:51:12:7f:08:cd:8e:0f:6e:85:1b:9b:d5:
c4:b2:9a:4a:06:a4:69:fb:f6:0d:a8:78:22:45:a0:
ef:01:94:54:47:84:8f:c6:14:9e:67:70:e4:32:28:
05:a7:19:05:40:24:58:35:70:a2:fe:ce:93:f6:c8:
5e:27:6f:62:ad:22:d0:ed:35:da:aa:0b:0c:19:98:
b5:57:ae:cd:a3:08:d3:6a:6a:6e:63:eb:f0:8a:8d:
2f:2f:69:ac:76:21:b0:11:43:28:6e:c3:28:92:a5:
43:ec:30:a7:b0:12:13:56:be:16:d1:2d:c5:e8:5d:
35:6a:b6:4b:65:53:fa:dc:4c:8c:ca:27:fc:f1:40:
e6:21:8b:22:cd:10:31:a6:3a:46:07:76:7e:40:fa:
a5:e7:bb:c1:93:2f:93:21:fd:63:35:4e:92:f4:03:
f1:70:a2:74:59:73:8d:f5:83:07:f1:c0:c1:46:c4:
e0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:86:18:30:EA:E7:65:04:14:D9:71:91:16:BA:75:81:96:B0:50:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bff96213-3f7c-3447-af46-70abd55a9790.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
162.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:ec:78:ea:5a:4a:5e:c7:93:ae:80:fa:0c:6c:3c:f4:bb:c4:
84:6d:25:b5:5c:53:87:17:02:90:e5:a2:4e:7e:0a:35:f1:68:
59:0f:e3:76:df:ff:55:53:82:0c:07:34:26:f0:58:96:16:0e:
4e:33:69:0b:fc:e0:ac:a1:e3:25:71:64:2c:5c:2d:f4:35:ef:
ff:f6:ea:84:f4:d1:0f:45:ef:af:6a:23:86:3b:44:97:51:37:
17:7f:44:23:90:b5:50:ab:c7:fa:85:4e:0d:c7:1f:2d:d7:e0:
2b:4d:1e:e8:be:54:9b:b6:41:d3:a5:97:b7:59:ef:b1:de:be:
d8:f8:08:a9:a8:0a:c2:cb:94:1d:c1:11:7a:52:87:33:67:6d:
f5:06:08:62:ff:ae:3c:f5:4b:7b:9f:e9:b1:0f:0d:ea:9f:65:
89:c8:e4:2d:f0:1b:84:35:c0:75:8d:ef:cb:37:4b:92:be:51:
85:37:b5:b5:31:0b:2f:c6:93:e4:c4:46:43:5b:32:9b:31:bb:
f2:6c:b0:f1:4c:26:94:2d:b4:cd:e9:0c:b4:52:73:06:6b:ba:
b4:a7:62:35:ab:28:de:27:80:89:16:b0:0c:9c:e4:df:09:f8:
e4:b7:ee:89:4b:3b:d3:59:a0:74:1f:58:47:6b:a1:3e:0f:cf:
ab:d1:27:08
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD7i2luYJqdyGMmH16AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgxMjEyMDAwMFoXDTIyMDkxNzA0MDAwMFowLzEtMCsGA1UEAxMk
ZmZlYWU2YjctOTE3MS00ZjgzLWFkNDQtMTI3MGQyNGQxNzMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHcTtIK6rWYCy9pvtD5YyZEocf4sr3zlSY5u
gcSNl2sgmMOZ1tz1D6ixjnWjME54OUzmboi+v1QsRVBM8fb2IvslZUdeQXSLoYyl
kFBREn8IzY4PboUbm9XEsppKBqRp+/YNqHgiRaDvAZRUR4SPxhSeZ3DkMigFpxkF
QCRYNXCi/s6T9sheJ29irSLQ7TXaqgsMGZi1V67NowjTampuY+vwio0vL2msdiGw
EUMobsMokqVD7DCnsBITVr4W0S3F6F01arZLZVP63EyMyif88UDmIYsizRAxpjpG
B3Z+QPql57vBky+TIf1jNU6S9APxcKJ0WXON9YMH8cDBRsTgUQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMeGGDDq52UEFNlxkRa6dYGWsFC1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYmZmOTYyMTMtM2Y3Yy0z
NDQ3LWFmNDYtNzBhYmQ1NWE5NzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAookwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEADOx46lpKXseTroD6DGw89LvEhG0ltVxThxcCkOWiTn4KNfFoWQ/jdt//
VVOCDAc0JvBYlhYOTjNpC/zgrKHjJXFkLFwt9DXv//bqhPTRD0Xvr2ojhjtEl1E3
F39EI5C1UKvH+oVODccfLdfgK00e6L5Um7ZB06WXt1nvsd6+2PgIqagKwsuUHcER
elKHM2dt9QYIYv+uPPVLe5/psQ8N6p9licjkLfAbhDXAdY3vyzdLkr5RhTe1tTEL
L8aT5MRGQ1symzG78myw8UwmlC20zekMtFJzBmu6tKdiNaso3ieAiRawDJzk3wn4
5LfuiUs701mgdB9YR2uhPg/Pq9EnCA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:07:06 2025 by rpki-client