Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eb3d1794-05f0-3a7c-9ad5-c6517e41222e.roa
File: eb3d1794-05f0-3a7c-9ad5-c6517e41222e.roa (raw, json)
Hash identifier: DOCl53DYwdGQWaSALT18m5olJdVqpz8Mezbm6znBrms=
Subject key identifier: 50:E8:5D:58:E5:87:D4:46:D4:D9:78:39:C2:39:D0:40:29:37:BA:09
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858407DAC5BDD0EE8FDA02B2823B0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eb3d1794-05f0-3a7c-9ad5-c6517e41222e.roa
Signing time: Fri 06 Jan 2023 12:00:00 +0000
ROA not before: Fri 06 Jan 2023 12:00:00 +0000
ROA not after: Sat 11 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 148.162.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:7d:ac:5b:dd:0e:e8:fd:a0:2b:28:23:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 6 12:00:00 2023 GMT
Not After : Feb 11 05:00:00 2023 GMT
Subject: CN=a5dcec3b-a02a-4998-8648-e05a87172ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b0:a2:40:f2:77:bd:4c:31:52:2c:b8:62:af:
19:d0:a3:b9:1e:9a:de:1b:37:dd:cc:0b:fb:da:77:
e8:cb:72:c9:96:c6:03:24:ca:8b:6c:4b:c4:b4:75:
09:c2:08:ad:9c:bd:de:70:8e:2f:aa:d3:da:25:fd:
87:12:01:c9:40:65:34:48:08:81:06:77:cf:b1:31:
5a:88:1e:11:16:61:58:a7:43:7d:3f:65:fe:e4:ab:
4c:d2:fa:8e:c9:df:3f:4c:e9:15:74:3c:51:ec:3f:
d4:b6:cc:d9:d7:f3:6c:d9:1d:7a:e7:8c:ea:dc:71:
b3:84:1b:4d:c2:57:27:78:d5:4c:a6:f4:c6:a2:4b:
2a:5e:3f:93:73:c0:2b:ec:e4:a1:5f:60:6e:03:10:
8b:df:36:3e:27:d5:7c:0d:aa:25:98:f9:6d:a3:83:
c7:9b:0d:0f:19:47:0d:a3:e1:05:61:95:89:5f:d8:
eb:14:ad:a7:ef:92:d1:d0:6d:ef:46:ef:d4:0c:60:
da:d9:54:a6:f5:9e:bb:11:59:cb:3e:ed:0e:42:d6:
75:3a:17:ba:3f:20:23:da:5b:4c:74:f5:e3:1e:ff:
f4:aa:78:cb:15:74:d0:23:54:ce:8f:f4:70:33:3e:
6d:f7:55:9b:ba:d6:39:6a:4c:0f:32:d2:e8:14:37:
57:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E8:5D:58:E5:87:D4:46:D4:D9:78:39:C2:39:D0:40:29:37:BA:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eb3d1794-05f0-3a7c-9ad5-c6517e41222e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
148.162.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:9c:03:05:8d:aa:75:c3:26:ab:43:7e:51:75:12:fc:e4:15:
6a:6f:51:e8:16:d7:2f:52:21:2a:97:38:9a:df:12:47:94:1e:
e3:88:32:4c:4f:96:e5:cf:5e:b5:a9:13:19:18:8f:e7:90:ca:
e4:9d:96:38:97:03:30:a8:12:53:36:f2:ac:a1:91:16:f3:19:
85:3b:29:65:86:33:0c:7a:25:6a:e2:f5:c1:d2:34:fd:d6:97:
a8:b5:06:17:10:24:36:f7:1c:d3:96:b6:5f:06:58:0d:4c:c0:
68:cc:89:e8:3c:2b:9f:e1:a6:a9:bb:1a:8b:89:4b:01:06:22:
b3:d9:d8:7f:b4:4f:4f:aa:5d:d2:6e:59:7d:24:18:05:87:0e:
90:50:74:f1:f9:96:6c:30:c2:08:b3:d4:76:46:f6:0d:78:71:
25:b7:26:f3:10:c4:4b:b9:5f:9f:d2:1f:30:85:ca:9f:99:b3:
67:9a:cc:10:82:2c:c9:5c:b1:39:55:ff:f0:c8:43:59:87:93:
95:3b:e5:bf:10:5d:4c:ab:87:20:0c:a5:d8:c4:02:b0:a4:90:
5b:15:2a:3d:cb:8d:db:49:48:11:20:f6:98:d8:35:ca:fc:7b:
57:ec:cf:0a:99:0f:15:e9:ce:4c:bc:27:fa:10:37:07:ee:99:
ca:1e:e3:46
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEB9rFvdDuj9oCsoI7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEwNjEyMDAwMFoXDTIzMDIxMTA1MDAwMFowLzEtMCsGA1UEAxMk
YTVkY2VjM2ItYTAyYS00OTk4LTg2NDgtZTA1YTg3MTcyZWExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirCiQPJ3vUwxUiy4Yq8Z0KO5HpreGzfdzAv7
2nfoy3LJlsYDJMqLbEvEtHUJwgitnL3ecI4vqtPaJf2HEgHJQGU0SAiBBnfPsTFa
iB4RFmFYp0N9P2X+5KtM0vqOyd8/TOkVdDxR7D/UtszZ1/Ns2R1654zq3HGzhBtN
wlcneNVMpvTGoksqXj+Tc8Ar7OShX2BuAxCL3zY+J9V8DaolmPlto4PHmw0PGUcN
o+EFYZWJX9jrFK2n75LR0G3vRu/UDGDa2VSm9Z67EVnLPu0OQtZ1Ohe6PyAj2ltM
dPXjHv/0qnjLFXTQI1TOj/RwMz5t91WbutY5akwPMtLoFDdXxQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFDoXVjlh9RG1Nl4OcI50EApN7oJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZWIzZDE3OTQtMDVmMC0z
YTdjLTlhZDUtYzY1MTdlNDEyMjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlKIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJZwDBY2qdcMmq0N+UXUS/OQVam9R6BbXL1IhKpc4mt8SR5Qe44gyTE+W
5c9etakTGRiP55DK5J2WOJcDMKgSUzbyrKGRFvMZhTspZYYzDHolauL1wdI0/daX
qLUGFxAkNvcc05a2XwZYDUzAaMyJ6Dwrn+Gmqbsai4lLAQYis9nYf7RPT6pd0m5Z
fSQYBYcOkFB08fmWbDDCCLPUdkb2DXhxJbcm8xDES7lfn9IfMIXKn5mzZ5rMEIIs
yVyxOVX/8MhDWYeTlTvlvxBdTKuHIAyl2MQCsKSQWxUqPcuN20lIESD2mNg1yvx7
V+zPCpkPFenOTLwn+hA3B+6Zyh7jRg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:06:58 2025 by rpki-client