Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f1797e44-7222-36d8-ba14-904bfe7c9d8e.roa
File: f1797e44-7222-36d8-ba14-904bfe7c9d8e.roa (raw, json)
Hash identifier: xY4HxvMAJr/v4vv3dLuGinAJjnaIl6/BuKbwQ7hK2C0=
Subject key identifier: 44:9A:66:1A:AE:0B:35:68:18:38:C7:ED:35:93:8B:77:20:84:57:34
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E8BC1714A8C6227C31F20D780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f1797e44-7222-36d8-ba14-904bfe7c9d8e.roa
Signing time: Mon 11 Jul 2022 12:00:00 +0000
ROA not before: Mon 11 Jul 2022 12:00:00 +0000
ROA not after: Tue 16 Aug 2022 04:00:00 +0000
asID: 6167
IP address blocks: 161.188.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:8b:c1:71:4a:8c:62:27:c3:1f:20:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 11 12:00:00 2022 GMT
Not After : Aug 16 04:00:00 2022 GMT
Subject: CN=12b0b277-e23b-40c4-aec8-1971d544eade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:98:44:e8:8b:35:69:f8:85:05:2d:8b:4d:26:
5d:20:eb:58:a0:1c:f7:ff:49:25:20:23:5e:0a:8a:
23:36:34:ea:c7:68:00:1d:1e:fe:23:80:a1:b3:a9:
b9:74:63:b0:5b:58:71:38:d4:7e:32:a8:2f:27:c5:
a8:61:34:b5:e9:2d:d3:17:99:95:1c:ec:cc:d1:d9:
dd:ea:aa:90:15:0f:a6:22:e1:68:ce:fd:a6:90:0c:
de:43:97:95:4f:0f:d2:e5:80:67:8d:7d:6d:01:54:
4c:47:5f:af:4e:8f:33:e7:bc:ed:2a:02:48:50:7a:
ac:b0:01:86:41:3a:03:26:48:04:ca:99:3e:4d:e6:
68:56:db:f1:a5:02:19:f9:57:0e:bb:4e:70:29:ac:
6d:25:29:80:03:e9:99:72:be:96:ed:ac:02:72:33:
30:dc:c3:77:2d:e3:0f:75:84:39:5e:29:57:ab:e2:
7a:65:ac:b7:ee:94:57:d0:6c:f6:18:20:de:7d:4b:
9a:60:a3:89:39:2c:50:46:e7:18:b6:89:55:ac:41:
f6:f9:63:f3:73:f0:d7:03:3a:52:13:4e:92:52:ba:
47:dc:3c:91:b6:20:d5:c7:06:63:7c:b1:42:1e:8a:
99:88:62:5e:af:1f:12:02:64:53:e1:fd:fb:c4:92:
4b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9A:66:1A:AE:0B:35:68:18:38:C7:ED:35:93:8B:77:20:84:57:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f1797e44-7222-36d8-ba14-904bfe7c9d8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:39:aa:13:0c:e2:95:d9:ef:81:56:54:90:80:df:bf:ae:24:
13:2b:75:11:33:5b:85:5f:2d:89:1f:4a:de:b3:ea:0c:ff:89:
bb:99:11:3b:76:fa:e5:b6:d8:c9:14:87:34:33:3c:1d:66:9c:
8b:94:75:b0:cc:7f:0d:53:a7:f5:f4:30:76:10:5c:98:4b:b9:
56:f1:83:44:45:e4:ef:ad:21:98:e1:d9:47:21:0a:c1:a8:ba:
40:b1:b3:96:97:e1:41:b7:68:f6:ec:b7:30:b3:c2:8f:8c:52:
17:cd:15:87:d3:7e:71:ec:18:12:10:1d:b6:3f:0c:29:4b:3a:
38:10:15:62:37:01:79:ea:c2:f3:28:5c:9f:4f:a2:92:9f:f9:
50:10:46:54:6d:4e:f9:46:58:be:68:72:02:1d:6c:2f:ba:e8:
e6:22:49:f1:d9:2f:26:75:32:8a:b9:f9:59:70:3b:73:c6:e1:
38:67:de:1c:1c:47:94:ad:5a:fc:8c:21:73:24:90:d6:ef:a6:
7e:ca:22:f0:8b:2c:f9:c3:f9:ee:1e:da:f6:a7:dc:52:4b:9e:
73:c5:92:c5:a7:23:28:55:66:81:9a:4c:c2:de:41:a5:7c:8b:
b3:c7:42:6f:47:1e:dc:f5:70:85:22:7c:5c:33:78:c7:5d:27:
9f:1c:f7:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD6LwXFKjGInwx8g14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcxMTEyMDAwMFoXDTIyMDgxNjA0MDAwMFowLzEtMCsGA1UEAxMk
MTJiMGIyNzctZTIzYi00MGM0LWFlYzgtMTk3MWQ1NDRlYWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAophE6Is1afiFBS2LTSZdIOtYoBz3/0klICNe
CoojNjTqx2gAHR7+I4Chs6m5dGOwW1hxONR+MqgvJ8WoYTS16S3TF5mVHOzM0dnd
6qqQFQ+mIuFozv2mkAzeQ5eVTw/S5YBnjX1tAVRMR1+vTo8z57ztKgJIUHqssAGG
QToDJkgEypk+TeZoVtvxpQIZ+VcOu05wKaxtJSmAA+mZcr6W7awCcjMw3MN3LeMP
dYQ5XilXq+J6Zay37pRX0Gz2GCDefUuaYKOJOSxQRucYtolVrEH2+WPzc/DXAzpS
E06SUrpH3DyRtiDVxwZjfLFCHoqZiGJerx8SAmRT4f37xJJL3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFESaZhquCzVoGDjH7TWTi3cghFc0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZjE3OTdlNDQtNzIyMi0z
NmQ4LWJhMTQtOTA0YmZlN2M5ZDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEobwgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFI5qhMM4pXZ74FWVJCA37+uJBMrdREzW4VfLYkfSt6z6gz/ibuZETt2
+uW22MkUhzQzPB1mnIuUdbDMfw1Tp/X0MHYQXJhLuVbxg0RF5O+tIZjh2UchCsGo
ukCxs5aX4UG3aPbstzCzwo+MUhfNFYfTfnHsGBIQHbY/DClLOjgQFWI3AXnqwvMo
XJ9PopKf+VAQRlRtTvlGWL5ocgIdbC+66OYiSfHZLyZ1Moq5+VlwO3PG4Thn3hwc
R5StWvyMIXMkkNbvpn7KIvCLLPnD+e4e2van3FJLnnPFksWnIyhVZoGaTMLeQaV8
i7PHQm9HHtz1cIUifFwzeMddJ58c954=
-----END CERTIFICATE-----
Generated at Tue Jun 17 02:45:14 2025 by rpki-client