Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ee66a9f1-0666-3309-94c8-e54e527e0e0b.roa
File: ee66a9f1-0666-3309-94c8-e54e527e0e0b.roa (raw, json)
Hash identifier: 3Px12+qISg35tafDeNaZf/Xfje7GgPNawiVo/UYjcxU=
Subject key identifier: 75:BD:E0:D6:64:D2:CF:54:09:63:05:41:A6:F7:01:BA:E4:E3:0C:37
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF8856D88FF6841368023F3C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ee66a9f1-0666-3309-94c8-e54e527e0e0b.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 167.166.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f8:85:6d:88:ff:68:41:36:80:23:f3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=76845a34-9ba4-4d0e-9a06-c6560bc0a202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e6:57:a4:33:e8:81:8e:85:84:3c:e3:bf:d7:
8b:6d:d9:91:b0:39:4f:19:67:49:5f:b9:ea:f2:67:
4e:b8:b7:e1:f2:fc:3c:06:cc:6d:b3:55:4f:3e:75:
92:4e:b5:13:e4:a9:d6:10:66:e9:06:c1:9a:36:c7:
97:ae:ae:00:e7:3a:e2:e9:19:22:76:75:d7:d5:79:
43:6f:c6:bf:a5:1f:f7:17:4a:45:1c:dd:a8:49:9a:
8a:0b:2f:0c:6f:79:b5:c1:27:ac:17:f2:61:5d:d4:
f2:7b:79:8e:cf:76:a9:3e:c0:40:90:4e:02:2c:dd:
9e:95:cf:20:63:e7:56:4d:54:75:ef:22:f1:ce:24:
17:73:36:c0:91:ea:7f:a4:f9:72:11:70:5b:23:13:
25:e8:94:6c:72:d4:18:a9:4b:9c:8d:fe:ac:cb:81:
12:b5:b6:61:e2:32:25:52:e7:39:27:a1:d7:bf:f3:
9c:f5:05:0f:a1:4b:b4:dc:93:72:4a:dc:71:09:7c:
bd:d0:c1:b2:e4:dc:91:81:1d:8f:13:2e:64:93:f0:
1b:f8:13:40:84:b6:52:58:db:c5:d7:85:aa:17:f6:
b1:eb:5f:96:24:38:4b:73:9e:6f:bc:76:6a:9c:bc:
62:30:93:37:76:d6:00:a8:8e:2a:9b:9e:22:cd:3d:
b4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BD:E0:D6:64:D2:CF:54:09:63:05:41:A6:F7:01:BA:E4:E3:0C:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ee66a9f1-0666-3309-94c8-e54e527e0e0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
167.166.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:c9:bc:67:72:6b:76:97:22:85:71:5b:0c:e5:07:c9:45:22:
a1:76:6d:1f:92:e6:f5:2e:bd:c8:32:51:87:bd:73:bb:d7:ac:
3f:e2:dd:27:af:db:0d:f4:71:f5:36:07:9c:c3:84:cc:e5:9a:
f7:c3:b4:bf:16:a1:4f:88:22:c2:2e:7c:20:75:49:e2:c7:f6:
86:7d:7d:52:25:82:58:f2:c1:21:84:f9:c9:fe:0c:63:f7:78:
bc:43:e1:36:31:33:28:eb:9d:4e:4c:f9:cd:b3:20:e6:bb:f6:
a9:07:e5:47:9c:32:f4:29:bb:04:51:86:f2:0b:26:07:30:56:
a6:b1:ef:87:1f:b4:1d:a7:cb:45:27:51:8a:82:de:de:d9:ad:
05:4d:a6:8d:ba:5a:49:a9:ad:80:69:8e:9a:17:4b:fa:52:ee:
47:16:88:10:c2:00:a2:3c:d9:c8:22:44:01:c0:9f:54:c6:3d:
79:71:3a:b6:71:0f:54:20:32:5f:5f:b6:f7:f3:f1:eb:be:46:
31:98:a4:fd:aa:53:e6:77:e6:f9:b4:47:63:75:ae:f4:f3:4b:
c7:65:56:be:4f:d5:58:9a:89:58:cd:05:1f:ce:fc:c0:c5:74:
18:73:bc:15:35:27:cc:a7:fc:03:7c:54:b9:a5:d4:bd:d0:e9:
58:89:57:9c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD34hW2I/2hBNoAj88AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUyMDEyMDAwMFoXDTIyMDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
NzY4NDVhMzQtOWJhNC00ZDBlLTlhMDYtYzY1NjBiYzBhMjAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+ZXpDPogY6FhDzjv9eLbdmRsDlPGWdJX7nq
8mdOuLfh8vw8Bsxts1VPPnWSTrUT5KnWEGbpBsGaNseXrq4A5zri6RkidnXX1XlD
b8a/pR/3F0pFHN2oSZqKCy8Mb3m1wSesF/JhXdTye3mOz3apPsBAkE4CLN2elc8g
Y+dWTVR17yLxziQXczbAkep/pPlyEXBbIxMl6JRsctQYqUucjf6sy4EStbZh4jIl
Uuc5J6HXv/Oc9QUPoUu03JNyStxxCXy90MGy5NyRgR2PEy5kk/Ab+BNAhLZSWNvF
14WqF/ax61+WJDhLc55vvHZqnLxiMJM3dtYAqI4qm54izT20/wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHW94NZk0s9UCWMFQab3Abrk4ww3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZWU2NmE5ZjEtMDY2Ni0z
MzA5LTk0YzgtZTU0ZTUyN2UwZTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAp6YwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAUcm8Z3JrdpcihXFbDOUHyUUioXZtH5Lm9S69yDJRh71zu9esP+LdJ6/b
DfRx9TYHnMOEzOWa98O0vxahT4giwi58IHVJ4sf2hn19UiWCWPLBIYT5yf4MY/d4
vEPhNjEzKOudTkz5zbMg5rv2qQflR5wy9Cm7BFGG8gsmBzBWprHvhx+0HafLRSdR
ioLe3tmtBU2mjbpaSamtgGmOmhdL+lLuRxaIEMIAojzZyCJEAcCfVMY9eXE6tnEP
VCAyX1+29/Px675GMZik/apT5nfm+bRHY3Wu9PNLx2VWvk/VWJqJWM0FH878wMV0
GHO8FTUnzKf8A3xUuaXUvdDpWIlXnA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:11:56 2025 by rpki-client