Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e6b7bdfe-6776-305a-8255-6ade8f16b7ba.roa
File: e6b7bdfe-6776-305a-8255-6ade8f16b7ba.roa (raw, json)
Hash identifier: rbYjnJLdZPmc+xleWrhMQchiOxiVMcvrX4apM/fgOvc=
Subject key identifier: 44:D5:6A:A1:55:E3:4A:10:8E:7D:75:96:28:F4:8D:E5:86:EB:21:BF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FAF1D23874B6D83DB6C4A7050
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e6b7bdfe-6776-305a-8255-6ade8f16b7ba.roa
Signing time: Mon 24 Oct 2022 12:00:00 +0000
ROA not before: Mon 24 Oct 2022 12:00:00 +0000
ROA not after: Tue 29 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 128.188.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:af:1d:23:87:4b:6d:83:db:6c:4a:70:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 24 12:00:00 2022 GMT
Not After : Nov 29 05:00:00 2022 GMT
Subject: CN=ba4a35de-9436-49be-b504-63de73468e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:29:b2:33:24:0f:b1:09:74:5f:9c:31:d1:53:
15:90:2d:fe:10:05:88:f1:65:78:a7:0e:06:d7:a7:
84:de:df:51:ff:a4:14:ba:c8:bb:c4:92:03:3e:38:
19:ca:95:17:fc:ff:50:f0:77:8d:20:10:34:7e:c4:
68:d0:16:37:16:fb:98:59:6d:48:7c:d7:50:aa:1f:
b4:d8:34:fa:6f:29:34:31:e4:89:b4:36:f4:83:0e:
aa:aa:0f:da:ff:ed:ef:5a:6f:79:29:22:20:cc:e8:
95:77:03:77:2a:0d:6f:2d:ac:42:bc:fa:3b:e0:0f:
15:a2:62:34:58:15:83:46:99:b7:b2:02:26:80:39:
c1:aa:45:25:16:ac:fe:2d:f9:0e:0f:69:15:47:91:
a0:80:f1:ea:d5:f0:34:7f:78:6a:11:2b:fb:df:d2:
c4:37:d9:96:df:b1:b1:56:f3:11:c5:76:32:7f:24:
57:fd:8d:fe:70:1c:b9:2f:40:e5:ea:26:0f:ce:f4:
e4:f3:dc:ee:36:c8:e3:23:00:59:58:41:ba:3c:18:
9e:38:95:df:9d:79:40:7c:51:65:d3:a6:f3:75:58:
9f:45:13:ff:39:c1:bc:ed:6c:b7:53:4e:fb:fd:41:
c9:91:e6:e8:52:79:43:3a:a8:dd:67:d1:75:37:f8:
c9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D5:6A:A1:55:E3:4A:10:8E:7D:75:96:28:F4:8D:E5:86:EB:21:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e6b7bdfe-6776-305a-8255-6ade8f16b7ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
128.188.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:cc:11:d5:e8:05:35:64:9f:59:f6:0e:48:ec:f3:7c:c1:99:
2d:47:b1:7a:0f:f5:27:94:3c:2e:45:4f:42:ac:6d:d4:04:52:
33:79:5a:b0:24:75:10:04:de:09:ea:5f:ec:48:50:e3:17:9e:
ae:77:b1:4c:4b:5e:04:2d:b7:a5:34:84:94:9a:b2:cf:98:9d:
ef:c0:31:f3:f1:57:11:2d:5b:7a:02:59:80:e2:07:b4:20:58:
ad:15:43:61:dd:10:bd:85:23:87:14:a2:7a:27:38:7a:39:56:
8d:cf:dd:24:0f:c0:47:1a:7b:64:a7:10:dc:44:88:ec:d4:88:
32:b7:29:ec:38:aa:68:91:a2:d4:f4:45:b3:37:c4:2b:92:a7:
35:2f:20:93:5e:09:f1:01:5d:97:3d:e5:77:cb:b4:38:f7:df:
a7:bb:04:14:c9:35:e3:c5:0d:0d:90:5a:58:f4:ba:c8:c5:d1:
85:00:d5:92:6b:79:54:b5:9d:90:44:4a:5a:d4:4a:12:47:ea:
5b:f2:9c:17:d6:e9:7c:02:47:16:86:25:88:47:88:13:60:2c:
22:03:bd:b0:37:cd:77:16:ce:d5:31:4e:fb:01:bc:fc:be:d5:
b9:f0:70:14:bd:1c:67:22:8e:2b:c8:a2:67:ea:f0:db:cb:46:
29:2c:89:33
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+vHSOHS22D22xKcFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAyNDEyMDAwMFoXDTIyMTEyOTA1MDAwMFowLzEtMCsGA1UEAxMk
YmE0YTM1ZGUtOTQzNi00OWJlLWI1MDQtNjNkZTczNDY4ZTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgymyMyQPsQl0X5wx0VMVkC3+EAWI8WV4pw4G
16eE3t9R/6QUusi7xJIDPjgZypUX/P9Q8HeNIBA0fsRo0BY3FvuYWW1IfNdQqh+0
2DT6byk0MeSJtDb0gw6qqg/a/+3vWm95KSIgzOiVdwN3Kg1vLaxCvPo74A8VomI0
WBWDRpm3sgImgDnBqkUlFqz+LfkOD2kVR5GggPHq1fA0f3hqESv739LEN9mW37Gx
VvMRxXYyfyRX/Y3+cBy5L0Dl6iYPzvTk89zuNsjjIwBZWEG6PBieOJXfnXlAfFFl
06bzdVifRRP/OcG87Wy3U077/UHJkeboUnlDOqjdZ9F1N/jJvwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFETVaqFV40oQjn11lij0jeWG6yG/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZTZiN2JkZmUtNjc3Ni0z
MDVhLTgyNTUtNmFkZThmMTZiN2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgLwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAaswR1egFNWSfWfYOSOzzfMGZLUexeg/1J5Q8LkVPQqxt1ARSM3lasCR1
EATeCepf7EhQ4xeernexTEteBC23pTSElJqyz5id78Ax8/FXES1begJZgOIHtCBY
rRVDYd0QvYUjhxSieic4ejlWjc/dJA/ARxp7ZKcQ3ESI7NSIMrcp7DiqaJGi1PRF
szfEK5KnNS8gk14J8QFdlz3ld8u0OPffp7sEFMk148UNDZBaWPS6yMXRhQDVkmt5
VLWdkERKWtRKEkfqW/KcF9bpfAJHFoYliEeIE2AsIgO9sDfNdxbO1TFO+wG8/L7V
ufBwFL0cZyKOK8iiZ+rw28tGKSyJMw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:17:48 2025 by rpki-client