Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c598b315-276e-32d6-92f3-d5197e5adebd.roa
File: c598b315-276e-32d6-92f3-d5197e5adebd.roa (raw, json)
Hash identifier: R/UaiWsN6CvtMl40aQ7c8o3kmaPT0tCF31jMMlmzbfY=
Subject key identifier: EF:EC:76:B7:63:6A:F3:20:1C:6B:8D:93:55:46:29:C3:B9:0A:39:A2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CA0E85BB27B5C33FF2E747900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c598b315-276e-32d6-92f3-d5197e5adebd.roa
Signing time: Tue 18 Jan 2022 05:00:00 +0000
ROA not before: Tue 18 Jan 2022 05:00:00 +0000
ROA not after: Tue 22 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 165.208.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:a0:e8:5b:b2:7b:5c:33:ff:2e:74:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 18 05:00:00 2022 GMT
Not After : Feb 22 05:00:00 2022 GMT
Subject: CN=208cc8f8-aa22-4a43-b8e0-e0455fcd4477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8a:92:e1:da:bf:4d:e9:48:78:00:23:4b:94:
03:2a:1a:2f:91:8f:08:aa:c7:6f:ea:9b:29:73:a1:
6d:f0:e2:49:17:1a:5e:39:0e:8c:39:69:c0:f6:f9:
5a:f5:7b:89:2e:f0:c0:ba:20:2e:84:e7:9a:9a:6c:
f0:5a:65:30:20:a2:48:26:fd:5a:d1:68:f0:5f:1b:
49:cc:cf:66:0b:bf:fd:cd:80:c9:16:c8:be:43:8c:
47:68:a3:cb:43:89:60:9f:1a:c6:25:4f:51:67:ce:
88:14:6a:a6:87:6e:32:5d:11:0e:c1:61:11:bb:78:
4c:08:c4:95:d5:6e:6d:74:40:17:2e:31:93:e4:7b:
84:e9:f7:63:2e:13:b7:9e:21:f2:22:d8:13:ff:b7:
94:e9:4e:a7:31:ec:f6:a3:c3:57:5e:92:92:2e:8d:
b7:2c:a8:34:40:9a:6f:8c:1e:56:42:93:bd:d7:16:
aa:67:2a:93:56:51:3e:97:66:1b:d3:db:36:79:9b:
6b:fe:74:f2:d2:7a:03:b0:f3:37:93:d9:0c:d5:60:
3f:eb:07:59:af:ab:06:ba:15:70:84:f2:3c:bd:19:
be:2b:89:51:f3:49:c0:5d:27:78:61:3c:c9:94:be:
3f:8b:29:00:e7:ed:fc:90:b3:8b:6e:d6:26:d2:cf:
46:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EC:76:B7:63:6A:F3:20:1C:6B:8D:93:55:46:29:C3:B9:0A:39:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c598b315-276e-32d6-92f3-d5197e5adebd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.208.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:9e:87:47:d5:1f:c2:ae:1d:7a:7f:4f:ac:1e:ff:61:f9:48:
4c:2b:e8:c2:a7:57:e5:3d:40:cb:e2:00:92:08:c3:32:a3:3a:
8e:56:cf:a2:b6:00:37:44:65:9d:87:06:6f:fc:da:0e:7b:01:
31:3b:73:fc:a5:fe:21:8d:da:95:57:71:ed:82:27:33:66:1d:
68:8e:06:53:80:a5:ff:aa:9a:2d:35:c7:f6:b9:66:c2:92:ab:
2d:7a:af:38:7b:a7:64:48:36:1a:c2:4a:86:eb:02:e3:6b:26:
1b:9f:3c:6c:18:15:13:65:12:24:9b:07:49:f6:a9:e5:e7:70:
4b:2f:ab:e2:44:ab:00:4a:fe:5d:23:b6:ff:d0:e8:5a:1c:52:
d6:e1:91:85:68:e1:45:fb:7f:7a:d3:1f:24:da:10:a5:47:88:
6c:90:34:3f:12:b7:de:19:e2:0c:04:cd:6c:dd:3d:76:3d:c7:
85:d6:d7:30:55:28:2f:22:71:76:77:51:3a:06:da:ec:a8:f9:
bc:5f:bc:78:00:ad:36:18:d0:b1:c6:8a:8e:f9:39:a7:4f:62:
5f:29:9b:2c:ae:6f:55:68:03:63:de:96:83:03:da:8b:11:64:
85:fc:34:d4:4a:69:74:54:ae:61:65:96:7a:db:61:c0:52:f7:
c0:b6:60:67
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDyg6Fuye1wz/y50eQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDExODA1MDAwMFoXDTIyMDIyMjA1MDAwMFowLzEtMCsGA1UEAxMk
MjA4Y2M4ZjgtYWEyMi00YTQzLWI4ZTAtZTA0NTVmY2Q0NDc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIqS4dq/TelIeAAjS5QDKhovkY8Iqsdv6psp
c6Ft8OJJFxpeOQ6MOWnA9vla9XuJLvDAuiAuhOeammzwWmUwIKJIJv1a0WjwXxtJ
zM9mC7/9zYDJFsi+Q4xHaKPLQ4lgnxrGJU9RZ86IFGqmh24yXREOwWERu3hMCMSV
1W5tdEAXLjGT5HuE6fdjLhO3niHyItgT/7eU6U6nMez2o8NXXpKSLo23LKg0QJpv
jB5WQpO91xaqZyqTVlE+l2Yb09s2eZtr/nTy0noDsPM3k9kM1WA/6wdZr6sGuhVw
hPI8vRm+K4lR80nAXSd4YTzJlL4/iykA5+38kLOLbtYm0s9GoQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFO/sdrdjavMgHGuNk1VGKcO5CjmiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYzU5OGIzMTUtMjc2ZS0z
MmQ2LTkyZjMtZDUxOTdlNWFkZWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApdAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEApJ6HR9Ufwq4den9PrB7/YflITCvowqdX5T1Ay+IAkgjDMqM6jlbPorYA
N0RlnYcGb/zaDnsBMTtz/KX+IY3alVdx7YInM2YdaI4GU4Cl/6qaLTXH9rlmwpKr
LXqvOHunZEg2GsJKhusC42smG588bBgVE2USJJsHSfap5edwSy+r4kSrAEr+XSO2
/9DoWhxS1uGRhWjhRft/etMfJNoQpUeIbJA0PxK33hniDATNbN09dj3HhdbXMFUo
LyJxdndROgba7Kj5vF+8eACtNhjQscaKjvk5p09iXymbLK5vVWgDY96WgwPaixFk
hfw01EppdFSuYWWWetthwFL3wLZgZw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:17:58 2025 by rpki-client