Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd240775-0f84-3266-af06-18ea73a25a4a.roa
File: fd240775-0f84-3266-af06-18ea73a25a4a.roa (raw, json)
Hash identifier: hmfWu6C744wZIWmPqtxFVMEzwlwEMeXWrYxfHG6FXZI=
Subject key identifier: CE:EA:FF:DE:47:AF:28:78:0C:EF:D1:0A:AA:64:94:FC:3B:58:4C:3C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE54DB4DB5910DE577AD00800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd240775-0f84-3266-af06-18ea73a25a4a.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 152.137.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e5:4d:b4:db:59:10:de:57:7a:d0:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=c6511cb1-1754-4cb2-91d0-bc543a094681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f2:17:0d:63:51:67:85:16:3c:cf:21:f7:bc:
c9:94:e3:61:73:8f:59:81:a9:4b:90:b7:54:7c:2e:
92:ca:5c:0d:a4:50:a8:56:c5:8d:7a:09:d7:64:16:
f0:74:e8:42:29:9c:ac:89:19:20:d1:75:d7:ad:df:
97:e8:86:0e:75:ba:fd:56:1f:89:30:eb:a5:dc:bd:
78:90:6f:b8:d2:11:43:86:40:0e:f9:17:8b:9e:5f:
37:85:e4:88:96:7f:c4:b5:f9:09:d6:89:76:8c:30:
51:59:90:b3:49:4c:2d:90:95:22:97:2a:ac:af:2a:
4b:89:c0:e2:c8:cd:b2:4a:08:73:f1:4a:40:e2:f2:
c3:05:13:40:8a:be:14:be:3b:2f:cd:34:74:5b:d3:
a0:38:3a:7c:42:fc:6e:85:48:96:90:9d:52:ad:f6:
30:9e:32:a5:67:aa:2d:2b:e8:85:fb:b6:57:1b:f0:
ba:d2:51:87:bf:40:21:c0:68:ab:ec:51:c2:88:d0:
52:1a:6e:12:47:a4:4b:7d:fb:4b:84:e2:82:54:83:
20:b0:15:f2:94:4b:42:65:46:45:81:24:01:72:57:
49:6c:37:02:d8:86:ba:b9:df:a7:4a:40:21:c7:9a:
88:d7:55:1a:9e:ce:87:40:4b:56:5b:6c:88:b9:fc:
5f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EA:FF:DE:47:AF:28:78:0C:EF:D1:0A:AA:64:94:FC:3B:58:4C:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd240775-0f84-3266-af06-18ea73a25a4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
152.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:6c:fc:43:56:c7:1d:96:e2:a1:f7:10:e8:31:98:3e:11:fc:
7d:ad:f2:f9:20:d5:10:34:32:25:2e:68:02:cd:50:0e:7b:ef:
33:9f:0e:e2:b4:aa:53:2f:8e:3b:c7:94:4c:c3:23:94:d0:a7:
e3:09:c9:73:12:f6:70:ce:cc:0f:0f:c8:19:d5:66:fd:21:7e:
71:0a:56:ed:13:20:5f:3e:a0:71:61:65:2a:5c:2e:b3:00:4e:
ee:c0:56:2e:7c:2f:66:86:a9:16:4f:b7:98:d6:d2:17:95:a2:
f5:d6:0d:8c:ce:70:51:4d:40:72:c7:b4:21:4e:15:26:f0:05:
8d:c4:cd:70:e0:3a:16:78:86:cb:c5:bb:85:d1:bf:47:f7:96:
f5:d0:37:bd:19:a8:1f:dd:a8:0c:70:f6:ae:5e:8a:15:7a:13:
25:a3:01:c1:41:5c:f0:17:51:dd:35:c6:1f:30:f3:61:bd:06:
d2:26:b8:34:46:f1:03:f1:3b:cf:49:07:60:57:fa:b1:83:9e:
97:2b:80:d0:88:a9:ab:3a:b5:31:67:71:5a:ee:c2:1f:87:d1:
4b:e2:38:d5:c5:73:8d:f0:1c:d6:0a:cd:9c:59:9c:29:91:57:
03:39:d5:50:ea:23:56:92:72:b3:6b:4b:da:1c:d4:fc:8d:83:
b1:ba:47:dd
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzlTbTbWRDeV3rQCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIxMTA1MDAwMFoXDTIyMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
YzY1MTFjYjEtMTc1NC00Y2IyLTkxZDAtYmM1NDNhMDk0NjgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvIXDWNRZ4UWPM8h97zJlONhc49ZgalLkLdU
fC6SylwNpFCoVsWNegnXZBbwdOhCKZysiRkg0XXXrd+X6IYOdbr9Vh+JMOul3L14
kG+40hFDhkAO+ReLnl83heSIln/EtfkJ1ol2jDBRWZCzSUwtkJUilyqsrypLicDi
yM2ySghz8UpA4vLDBRNAir4UvjsvzTR0W9OgODp8QvxuhUiWkJ1SrfYwnjKlZ6ot
K+iF+7ZXG/C60lGHv0AhwGir7FHCiNBSGm4SR6RLfftLhOKCVIMgsBXylEtCZUZF
gSQBcldJbDcC2Ia6ud+nSkAhx5qI11Uans6HQEtWW2yIufxf9QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFM7q/95Hryh4DO/RCqpklPw7WEw8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZmQyNDA3NzUtMGY4NC0z
MjY2LWFmMDYtMThlYTczYTI1YTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmIkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAjmz8Q1bHHZbiofcQ6DGYPhH8fa3y+SDVEDQyJS5oAs1QDnvvM58O4rSq
Uy+OO8eUTMMjlNCn4wnJcxL2cM7MDw/IGdVm/SF+cQpW7RMgXz6gcWFlKlwuswBO
7sBWLnwvZoapFk+3mNbSF5Wi9dYNjM5wUU1Acse0IU4VJvAFjcTNcOA6FniGy8W7
hdG/R/eW9dA3vRmoH92oDHD2rl6KFXoTJaMBwUFc8BdR3TXGHzDzYb0G0ia4NEbx
A/E7z0kHYFf6sYOelyuA0Iipqzq1MWdxWu7CH4fRS+I41cVzjfAc1grNnFmcKZFX
AznVUOojVpJys2tL2hzU/I2DsbpH3Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:37 2025 by rpki-client