Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d583391d-41fc-380b-b8bb-dbe3e858f3c0.roa
File: d583391d-41fc-380b-b8bb-dbe3e858f3c0.roa (raw, json)
Hash identifier: M90AdpEs2KM2UDlp2EMOoLlaJc6RA8zYx5kw2yw5fYE=
Subject key identifier: 8D:63:22:CA:E9:D2:E0:51:F6:F1:80:3E:76:13:58:3B:24:C0:F2:3F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DC8307846E30AB3CAEB01E680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d583391d-41fc-380b-b8bb-dbe3e858f3c0.roa
Signing time: Mon 02 May 2022 12:00:00 +0000
ROA not before: Mon 02 May 2022 12:00:00 +0000
ROA not after: Tue 07 Jun 2022 04:00:00 +0000
asID: 6167
IP address blocks: 161.188.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:c8:30:78:46:e3:0a:b3:ca:eb:01:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 2 12:00:00 2022 GMT
Not After : Jun 7 04:00:00 2022 GMT
Subject: CN=0ed08cf4-fb36-47b1-ac5c-8452a9b052bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:63:f8:b1:c3:97:90:32:85:ba:b0:3b:72:8e:
bb:88:6f:20:8a:1b:a0:2e:ad:cb:b7:c5:12:02:da:
85:d4:43:75:0d:73:a6:0d:46:15:67:23:e6:33:6d:
4a:67:f6:6a:64:ad:c6:bc:fe:0e:48:6c:b2:90:10:
53:f9:38:19:ee:45:4b:2a:4b:f8:96:a5:e5:e9:93:
7b:38:74:ad:52:a9:81:1d:48:45:17:34:e7:f1:49:
0c:fe:1c:2d:65:74:ab:10:ae:fa:b4:ba:45:8d:9f:
a7:e5:a0:b4:82:23:98:a9:ca:41:1f:02:79:43:da:
6b:8e:b1:ac:fc:91:f4:3d:f1:1c:22:4d:93:4f:89:
88:65:30:f0:3d:e1:62:08:ab:8a:98:41:5d:1d:14:
02:9b:ba:e6:d2:b1:1e:a0:07:3e:6a:51:d3:5d:c9:
8c:a0:c6:ee:d4:fb:00:6d:ef:3c:18:96:53:ec:9b:
5a:76:4b:77:85:09:5d:c9:24:b2:0a:52:be:b3:a1:
bb:1f:ee:3c:95:24:55:15:5e:aa:a1:84:c6:4e:54:
10:26:6f:3f:0c:82:8f:84:7a:2b:dc:d9:c5:9a:38:
37:6e:04:cc:ca:99:e0:be:c6:35:9a:0c:6d:44:0c:
48:bc:64:29:51:5b:56:7b:ed:ef:88:bf:90:d1:75:
4e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:63:22:CA:E9:D2:E0:51:F6:F1:80:3E:76:13:58:3B:24:C0:F2:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d583391d-41fc-380b-b8bb-dbe3e858f3c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:fa:da:2e:a0:2f:f2:85:c6:8f:d8:b6:c1:8a:78:dc:30:1d:
85:45:47:fd:4f:28:3d:2a:29:86:a7:09:ea:c1:87:76:69:30:
2e:50:34:7a:c3:90:14:b9:93:22:d7:fb:0c:95:4e:da:2e:ad:
22:b4:43:3b:36:85:82:29:39:4b:ba:72:ae:ce:53:b4:ca:5a:
8b:44:e5:42:06:b1:4c:a5:c0:0b:59:d2:d8:80:4d:96:83:01:
fd:8a:ef:68:42:31:f0:c3:f0:f1:48:49:16:4c:71:c4:f9:7d:
25:fa:99:7d:a2:d3:62:71:4e:79:48:f1:f2:76:d9:c1:de:a6:
54:72:48:01:7f:09:fd:5d:63:ed:b3:5e:23:4c:ea:3d:8e:d6:
fc:a0:a6:7d:bd:a6:6a:de:a5:91:3f:87:f9:dc:7f:2e:ef:f7:
34:0e:6f:7b:c0:6f:79:f3:54:44:3f:66:36:23:e8:73:63:f3:
71:81:13:ed:f0:2e:ec:81:27:6c:41:ef:c4:f7:e4:70:4a:5e:
bd:84:19:94:f4:be:5a:c6:c7:25:8c:7f:bd:28:b6:63:15:3b:
02:31:f9:af:ad:6f:a4:fd:d0:98:4e:7b:08:eb:a5:81:96:01:
15:3e:f7:c1:a8:37:46:85:28:fc:ff:7f:16:2f:2a:f0:6f:d9:
10:7d:fd:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3IMHhG4wqzyusB5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUwMjEyMDAwMFoXDTIyMDYwNzA0MDAwMFowLzEtMCsGA1UEAxMk
MGVkMDhjZjQtZmIzNi00N2IxLWFjNWMtODQ1MmE5YjA1MmJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWP4scOXkDKFurA7co67iG8gihugLq3Lt8US
AtqF1EN1DXOmDUYVZyPmM21KZ/ZqZK3GvP4OSGyykBBT+TgZ7kVLKkv4lqXl6ZN7
OHStUqmBHUhFFzTn8UkM/hwtZXSrEK76tLpFjZ+n5aC0giOYqcpBHwJ5Q9prjrGs
/JH0PfEcIk2TT4mIZTDwPeFiCKuKmEFdHRQCm7rm0rEeoAc+alHTXcmMoMbu1PsA
be88GJZT7Jtadkt3hQldySSyClK+s6G7H+48lSRVFV6qoYTGTlQQJm8/DIKPhHor
3NnFmjg3bgTMypngvsY1mgxtRAxIvGQpUVtWe+3viL+Q0XVOJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI1jIsrp0uBR9vGAPnYTWDskwPI/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDU4MzM5MWQtNDFmYy0z
ODBiLWI4YmItZGJlM2U4NThmM2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEobwgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEb62i6gL/KFxo/YtsGKeNwwHYVFR/1PKD0qKYanCerBh3ZpMC5QNHrD
kBS5kyLX+wyVTtourSK0Qzs2hYIpOUu6cq7OU7TKWotE5UIGsUylwAtZ0tiATZaD
Af2K72hCMfDD8PFISRZMccT5fSX6mX2i02JxTnlI8fJ22cHeplRySAF/Cf1dY+2z
XiNM6j2O1vygpn29pmrepZE/h/ncfy7v9zQOb3vAb3nzVEQ/ZjYj6HNj83GBE+3w
LuyBJ2xB78T35HBKXr2EGZT0vlrGxyWMf70otmMVOwIx+a+tb6T90JhOewjrpYGW
ARU+98GoN0aFKPz/fxYvKvBv2RB9/bg=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:10:10 2025 by rpki-client