Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/de2489ed-8c08-360b-8c24-15a3e3cb162a.roa
File: de2489ed-8c08-360b-8c24-15a3e3cb162a.roa (raw, json)
Hash identifier: v9oyZLDZNMzfp/4VJwGx6YznW3mRrxahf4KBtESsoCw=
Subject key identifier: 71:09:08:F1:FF:BF:81:97:45:90:B9:B8:94:E8:A3:1E:75:BB:09:C9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E3B59163D555BF0DE9620BC80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/de2489ed-8c08-360b-8c24-15a3e3cb162a.roa
Signing time: Mon 13 Jun 2022 12:00:00 +0000
ROA not before: Mon 13 Jun 2022 12:00:00 +0000
ROA not after: Tue 19 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 138.111.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:3b:59:16:3d:55:5b:f0:de:96:20:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 13 12:00:00 2022 GMT
Not After : Jul 19 04:00:00 2022 GMT
Subject: CN=f540483e-9647-4802-9c2c-012bf0ce392e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:85:f8:5e:bf:f1:44:e3:5c:2b:de:96:ee:21:
92:a2:4e:2a:90:61:9c:a2:34:84:b2:04:47:66:f7:
50:73:77:1f:b8:3e:8d:4f:e1:72:0c:9e:61:e0:77:
e3:04:c8:37:72:5a:f1:d7:aa:af:87:12:9a:43:5d:
81:02:87:24:50:f5:05:37:2e:4d:d8:78:75:0c:fc:
87:c3:69:ce:e2:55:d8:16:f4:8f:63:98:11:3a:c0:
ec:b7:d4:b4:68:77:99:5e:66:2d:ed:05:34:35:cb:
bb:33:60:ef:2a:b2:52:6c:ea:fd:19:fc:a5:5e:a8:
a2:c0:12:32:8e:e7:59:ac:dc:63:af:b6:54:ba:26:
c1:1d:87:8a:e0:4d:aa:c3:ed:87:fe:80:37:e8:8c:
2d:ba:6e:91:19:35:3a:4f:fd:f8:a7:77:a4:a7:dd:
b4:df:c0:d8:d3:8a:16:7b:4e:78:61:80:30:90:4b:
3e:46:b4:c7:37:93:1f:18:9b:ba:ef:03:83:95:d3:
bd:34:8d:e1:84:ca:b1:8b:75:be:e0:cf:bf:f2:cb:
54:15:d8:33:7c:af:0b:b9:6a:66:66:c5:db:4b:d6:
7f:f4:8e:38:78:aa:aa:84:33:64:ef:90:e9:62:ef:
bd:09:cb:ab:6c:98:ee:c6:ab:09:47:30:14:b9:9d:
a7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:09:08:F1:FF:BF:81:97:45:90:B9:B8:94:E8:A3:1E:75:BB:09:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/de2489ed-8c08-360b-8c24-15a3e3cb162a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
138.111.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:80:2c:78:02:05:2d:b9:67:af:79:e6:ce:8d:ff:41:a8:94:
87:68:d9:3d:36:35:7b:ff:bd:43:aa:d6:12:7b:84:98:7c:b5:
e8:25:2a:11:e8:d9:7c:7e:0f:ed:79:0f:db:94:ba:36:73:b6:
51:38:e3:b6:a6:af:35:7d:cb:f6:56:40:cc:40:e3:4d:cd:67:
25:96:af:fb:0f:02:46:d8:a6:b7:e2:ef:9b:fd:58:dd:78:6f:
1d:fb:dc:25:af:16:60:c2:e5:ac:cc:52:4c:8e:89:91:b6:5d:
5a:40:06:31:3b:e1:ba:d5:fc:24:fc:16:d2:73:05:8f:41:2f:
fc:29:5b:cb:e6:2c:f7:f2:1d:4c:35:45:4d:22:83:75:0e:c1:
00:bf:77:1f:7a:e8:e5:3d:3f:c5:f9:65:c6:8e:7f:ad:a3:20:
d0:20:fc:f9:cc:f1:84:74:0a:da:3c:11:f1:9f:40:2a:ae:03:
38:17:05:47:08:87:b1:07:64:fe:b4:a8:ec:a4:2d:81:8f:cd:
b0:62:2d:11:0d:75:93:01:12:0d:d7:9f:55:a6:04:86:51:37:
df:6a:73:6b:4a:ba:8d:da:0c:0e:26:bf:ec:8c:fe:d7:8a:6b:
7b:6d:71:3f:f4:8e:06:52:38:19:33:68:ed:83:65:56:69:9a:
81:c4:41:a5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD47WRY9VVvw3pYgvIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYxMzEyMDAwMFoXDTIyMDcxOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZjU0MDQ4M2UtOTY0Ny00ODAyLTljMmMtMDEyYmYwY2UzOTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoX4Xr/xRONcK96W7iGSok4qkGGcojSEsgRH
ZvdQc3cfuD6NT+FyDJ5h4HfjBMg3clrx16qvhxKaQ12BAockUPUFNy5N2Hh1DPyH
w2nO4lXYFvSPY5gROsDst9S0aHeZXmYt7QU0Ncu7M2DvKrJSbOr9GfylXqiiwBIy
judZrNxjr7ZUuibBHYeK4E2qw+2H/oA36Iwtum6RGTU6T/34p3ekp92038DY04oW
e054YYAwkEs+RrTHN5MfGJu67wODldO9NI3hhMqxi3W+4M+/8stUFdgzfK8LuWpm
ZsXbS9Z/9I44eKqqhDNk75DpYu+9CcurbJjuxqsJRzAUuZ2newIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHEJCPH/v4GXRZC5uJToox51uwnJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZGUyNDg5ZWQtOGMwOC0z
NjBiLThjMjQtMTVhM2UzY2IxNjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAim8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKYAseAIFLblnr3nmzo3/QaiUh2jZPTY1e/+9Q6rWEnuEmHy16CUqEejZ
fH4P7XkP25S6NnO2UTjjtqavNX3L9lZAzEDjTc1nJZav+w8CRtimt+Lvm/1Y3Xhv
HfvcJa8WYMLlrMxSTI6JkbZdWkAGMTvhutX8JPwW0nMFj0Ev/Clby+Ys9/IdTDVF
TSKDdQ7BAL93H3ro5T0/xfllxo5/raMg0CD8+czxhHQK2jwR8Z9AKq4DOBcFRwiH
sQdk/rSo7KQtgY/NsGItEQ11kwESDdefVaYEhlE332pza0q6jdoMDia/7Iz+14pr
e21xP/SOBlI4GTNo7YNlVmmagcRBpQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:07:27 2025 by rpki-client