Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ffa884b7-2851-3189-8ed6-f1489c5da29d.roa
File: ffa884b7-2851-3189-8ed6-f1489c5da29d.roa (raw, json)
Hash identifier: yuHPS1Og3jnCgrqqSlrrVHNRUoiF67OR0BsTzUEuEjk=
Subject key identifier: 78:BE:51:AA:FF:BA:19:E7:A0:38:EF:9D:1F:95:00:23:B8:C1:EA:0E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D93951BDFE06C5375B3AB9348
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ffa884b7-2851-3189-8ed6-f1489c5da29d.roa
Signing time: Fri 15 Apr 2022 04:00:00 +0000
ROA not before: Fri 15 Apr 2022 04:00:00 +0000
ROA not after: Fri 20 May 2022 04:00:00 +0000
asID: 36263
IP address blocks: 161.188.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:93:95:1b:df:e0:6c:53:75:b3:ab:93:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 15 04:00:00 2022 GMT
Not After : May 20 04:00:00 2022 GMT
Subject: CN=2e59734b-5cb9-4deb-a94f-372d2d86f350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f2:d6:b7:99:bc:97:9d:c1:b0:dc:a9:0b:4d:
e2:78:1e:83:61:0e:a5:45:aa:0b:2d:9c:f0:dd:79:
aa:9e:03:93:2e:22:f2:85:0f:cd:ae:03:1e:ca:32:
4c:6e:4d:63:e9:59:e5:82:c7:0d:c8:c3:81:2a:22:
36:02:ff:35:f0:cb:7e:a5:0e:b7:d8:f5:dc:fd:bb:
4a:e0:3a:30:2f:f9:e8:ff:9c:fe:e7:b4:00:0b:48:
de:53:73:c8:41:a7:00:f1:37:08:77:b6:e7:6f:91:
a4:13:69:4e:6e:36:95:64:ba:a9:bc:63:a0:92:cb:
f1:1b:eb:7d:c0:40:6a:2e:35:8c:03:5a:8f:4d:f9:
f7:66:8e:47:fe:2c:82:d3:2e:c8:89:a3:98:0f:53:
36:01:b8:d2:8a:68:56:1b:55:eb:0d:30:61:84:e6:
e0:a6:09:42:e0:db:03:9e:da:a8:a3:f9:b4:63:55:
14:60:3e:6e:61:06:3d:c9:60:22:aa:b0:22:a2:f2:
e0:10:1f:fa:2a:70:c8:54:cb:af:36:1e:bb:78:7e:
95:a0:5b:57:b8:d7:59:ab:5f:17:f8:48:28:38:0e:
8e:66:5c:23:a3:db:1b:d3:b2:0c:86:34:d3:5e:e0:
80:45:30:04:a1:a0:c2:fa:9e:d0:60:d9:be:a7:61:
7f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BE:51:AA:FF:BA:19:E7:A0:38:EF:9D:1F:95:00:23:B8:C1:EA:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ffa884b7-2851-3189-8ed6-f1489c5da29d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:2d:81:f2:22:d4:6c:2a:ea:74:47:1e:26:e2:84:e1:17:ae:
43:f8:fa:5f:54:c7:90:d3:af:53:00:04:26:58:1f:82:0e:83:
9b:fc:73:c0:99:03:01:ff:e3:61:59:a2:77:d5:89:ea:a9:82:
90:18:a2:86:b7:ea:06:d9:0b:d1:30:59:46:45:ea:35:84:d9:
f9:34:de:a9:95:a7:87:36:cc:33:2c:68:7e:04:d8:c1:70:bf:
7f:01:90:0c:77:f6:4b:42:10:f3:db:6f:ef:cd:bc:e9:fa:d7:
7a:3e:6f:3b:fc:e5:4c:92:49:ab:92:b1:af:45:2c:5b:ea:58:
b5:95:19:84:49:da:a0:bc:0e:e2:87:5a:78:08:18:2b:73:46:
d6:5e:60:cd:d5:e5:8b:8c:18:5f:6b:02:91:47:47:a4:09:42:
a0:a4:7f:cd:77:13:0d:a0:5a:fd:e9:76:eb:01:05:7a:30:8a:
4e:79:f3:3f:12:70:71:fe:b1:d2:b8:0d:d2:30:30:9b:49:69:
b7:ac:a0:79:6c:4e:89:b0:9e:f1:f9:07:71:2a:87:ca:57:6a:
46:15:8f:af:73:f9:52:84:d6:e3:4c:34:af:3a:e3:b0:11:66:
9c:da:27:07:46:6b:ee:a7:c6:0c:99:6f:6d:98:19:d5:ff:9c:
2f:b2:4f:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD2TlRvf4GxTdbOrk0gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQxNTA0MDAwMFoXDTIyMDUyMDA0MDAwMFowLzEtMCsGA1UEAxMk
MmU1OTczNGItNWNiOS00ZGViLWE5NGYtMzcyZDJkODZmMzUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/LWt5m8l53BsNypC03ieB6DYQ6lRaoLLZzw
3XmqngOTLiLyhQ/NrgMeyjJMbk1j6VnlgscNyMOBKiI2Av818Mt+pQ632PXc/btK
4DowL/no/5z+57QAC0jeU3PIQacA8TcId7bnb5GkE2lObjaVZLqpvGOgksvxG+t9
wEBqLjWMA1qPTfn3Zo5H/iyC0y7IiaOYD1M2AbjSimhWG1XrDTBhhObgpglC4NsD
ntqoo/m0Y1UUYD5uYQY9yWAiqrAiovLgEB/6KnDIVMuvNh67eH6VoFtXuNdZq18X
+EgoOA6OZlwjo9sb07IMhjTTXuCARTAEoaDC+p7QYNm+p2F/FQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHi+Uar/uhnnoDjvnR+VACO4weoOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZmZhODg0YjctMjg1MS0z
MTg5LThlZDYtZjE0ODljNWRhMjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDobzYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG8tgfIi1Gwq6nRHHibihOEXrkP4+l9Ux5DTr1MABCZYH4IOg5v8c8CZ
AwH/42FZonfVieqpgpAYooa36gbZC9EwWUZF6jWE2fk03qmVp4c2zDMsaH4E2MFw
v38BkAx39ktCEPPbb+/NvOn613o+bzv85UySSauSsa9FLFvqWLWVGYRJ2qC8DuKH
WngIGCtzRtZeYM3V5YuMGF9rApFHR6QJQqCkf813Ew2gWv3pdusBBXowik558z8S
cHH+sdK4DdIwMJtJabesoHlsTomwnvH5B3Eqh8pXakYVj69z+VKE1uNMNK8647AR
ZpzaJwdGa+6nxgyZb22YGdX/nC+yTx0=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:46:05 2025 by rpki-client