Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d24fc229-2d3c-3691-8eb1-da88939fd51b.roa
File: d24fc229-2d3c-3691-8eb1-da88939fd51b.roa (raw, json)
Hash identifier: LpJp1PfidMiej62SwW7lp7r3goYmfkvsYFWgM/tyZFY=
Subject key identifier: 17:FC:5D:F9:9D:B9:31:FE:16:FE:4F:A7:2E:DE:01:F0:48:EA:1C:B3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401423FA49313DBCD73425F5E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d24fc229-2d3c-3691-8eb1-da88939fd51b.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Wed 04 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 161.188.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:14:23:fa:49:31:3d:bc:d7:34:25:f5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Jan 4 05:00:00 2023 GMT
Subject: CN=3033a03f-d3ad-4bcd-9d90-d3c0889a0c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c5:97:3e:be:7e:06:5c:f5:b9:89:2e:88:6f:
8c:5f:17:59:26:3b:f6:8c:a5:cd:53:a8:fd:ab:c8:
91:03:96:aa:bd:0c:91:97:80:66:23:66:2d:f9:e8:
ee:9d:a5:86:ca:30:6b:b2:29:6c:ff:1d:ba:e3:f8:
d8:bd:d7:0f:f1:a3:d5:44:59:37:69:f9:19:6d:9d:
d5:09:5d:1d:dc:c9:17:16:d0:d9:5a:59:86:af:b7:
fb:2e:17:dd:a5:33:f2:c9:5e:75:69:48:3f:ba:aa:
e6:57:61:f1:50:5a:ed:6c:92:b6:c5:b6:93:2b:0d:
e4:c4:a2:ed:7e:58:ba:e4:2a:c5:a9:df:21:d2:62:
94:e9:41:0b:d1:ca:31:54:20:35:4a:cb:0c:70:0a:
4e:fa:d7:d1:23:22:e8:99:cc:1a:c3:63:ce:f1:91:
85:7b:d4:ae:69:4e:f3:22:88:c3:c0:e8:43:88:a4:
34:6e:94:c7:02:1a:22:93:c6:4b:bd:e2:1b:51:cf:
18:6a:8f:0c:0a:53:e1:93:69:f4:98:90:57:64:1d:
26:16:23:8a:d5:07:39:c3:56:6b:79:30:4d:1e:4c:
ce:a4:e8:0a:bf:57:7b:67:20:5d:d2:f2:db:f0:6e:
c7:79:a6:05:13:d4:5c:4b:e7:29:a9:28:35:85:3d:
7e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FC:5D:F9:9D:B9:31:FE:16:FE:4F:A7:2E:DE:01:F0:48:EA:1C:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d24fc229-2d3c-3691-8eb1-da88939fd51b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:7b:a6:df:97:ec:22:8f:f0:34:9a:65:c0:57:75:b1:d8:e9:
a4:91:b5:c8:e5:02:eb:98:6b:47:87:18:08:43:3d:5d:b6:06:
5b:44:40:05:25:84:5b:95:a4:92:5d:89:92:c2:8d:c3:85:33:
be:5a:19:ed:c2:a2:90:66:5d:49:5d:a3:04:34:e1:06:8d:b1:
4f:db:77:29:1f:43:57:26:83:e8:b1:54:50:46:18:bb:26:64:
01:e3:d8:59:2f:d8:18:df:10:17:62:ff:d7:3a:c6:c7:b7:e0:
59:5d:45:d8:b0:7d:18:3b:56:5a:2b:46:00:54:67:cb:bd:a1:
77:05:22:1f:47:f0:0f:ba:ed:f5:81:00:d6:46:c6:7d:0d:54:
e3:45:23:cc:f1:76:ef:75:1a:e7:69:34:5e:c1:6b:8f:bd:67:
0d:d3:69:94:e3:76:9e:bb:54:2e:5a:d9:61:3d:43:13:c4:f6:
f8:24:3c:3a:2b:64:f3:9d:12:bc:74:db:f7:e0:d9:6d:ad:8f:
d3:0c:e0:35:3a:33:1d:5b:04:bd:65:e3:c3:f1:4c:84:09:82:
4c:53:f8:d2:a3:c9:a4:af:8b:ec:92:45:59:d8:ab:18:a1:82:
45:36:4c:0b:ab:8b:0d:d9:cc:96:a9:36:ee:d1:db:42:65:77:
4e:83:7f:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEAUI/pJMT281zQl9eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEyOTEyMDAwMFoXDTIzMDEwNDA1MDAwMFowLzEtMCsGA1UEAxMk
MzAzM2EwM2YtZDNhZC00YmNkLTlkOTAtZDNjMDg4OWEwYzdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8WXPr5+Blz1uYkuiG+MXxdZJjv2jKXNU6j9
q8iRA5aqvQyRl4BmI2Yt+ejunaWGyjBrsils/x264/jYvdcP8aPVRFk3afkZbZ3V
CV0d3MkXFtDZWlmGr7f7LhfdpTPyyV51aUg/uqrmV2HxUFrtbJK2xbaTKw3kxKLt
fli65CrFqd8h0mKU6UEL0coxVCA1SssMcApO+tfRIyLomcwaw2PO8ZGFe9SuaU7z
IojDwOhDiKQ0bpTHAhoik8ZLveIbUc8Yao8MClPhk2n0mJBXZB0mFiOK1Qc5w1Zr
eTBNHkzOpOgKv1d7ZyBd0vLb8G7HeaYFE9RcS+cpqSg1hT1+lQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBf8XfmduTH+Fv5Ppy7eAfBI6hyzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDI0ZmMyMjktMmQzYy0z
NjkxLThlYjEtZGE4ODkzOWZkNTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGobyAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIl7pt+X7CKP8DSaZcBXdbHY6aSRtcjlAuuYa0eHGAhDPV22BltEQAUl
hFuVpJJdiZLCjcOFM75aGe3CopBmXUldowQ04QaNsU/bdykfQ1cmg+ixVFBGGLsm
ZAHj2Fkv2BjfEBdi/9c6xse34FldRdiwfRg7VlorRgBUZ8u9oXcFIh9H8A+67fWB
ANZGxn0NVONFI8zxdu91GudpNF7Ba4+9Zw3TaZTjdp67VC5a2WE9QxPE9vgkPDor
ZPOdErx02/fg2W2tj9MM4DU6Mx1bBL1l48PxTIQJgkxT+NKjyaSvi+ySRVnYqxih
gkU2TAuriw3ZzJapNu7R20Jld06Df2o=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:17:55 2025 by rpki-client