Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01de5bf4-cd0d-3865-821b-95400ddbb27a.roa
File: 01de5bf4-cd0d-3865-821b-95400ddbb27a.roa (raw, json)
Hash identifier: JJEWx8PKFu9wxZkhe862pm81mFXEy9a3gLpO3LEXQxQ=
Subject key identifier: 24:98:6C:C4:AF:6F:8B:41:4F:9F:B8:1B:D2:BF:77:B7:68:05:64:7D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840737EF419096848F70689F980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01de5bf4-cd0d-3865-821b-95400ddbb27a.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 130.101.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:73:7e:f4:19:09:68:48:f7:06:89:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=0f86f7c1-7c41-48ec-b72c-58638b36d52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1c:99:f9:9e:5d:3b:c5:71:1a:83:ec:b6:45:
10:2f:05:b4:b8:df:39:49:df:7d:ad:b1:9a:dd:98:
a0:5a:27:db:b2:cf:ec:95:f0:57:4d:bd:7a:2a:9f:
37:ea:d1:a2:bf:6c:61:1a:07:ef:48:c5:62:a4:4c:
c5:66:fa:ba:10:7e:ad:51:d6:55:1a:a8:34:f3:22:
99:dc:27:a9:0f:20:c9:ff:a3:b8:5a:18:fb:7d:f3:
e3:f4:37:18:2b:cf:56:de:61:f9:a1:1c:91:d2:61:
48:c6:5f:7c:9e:e0:63:9e:4b:8f:13:82:82:9e:d1:
c8:1c:65:fa:7f:ca:10:f6:fc:d2:9e:ab:73:a7:51:
c2:31:60:e7:b5:66:a5:82:79:7b:d2:f2:3c:94:ae:
d4:bf:2f:21:b5:c2:a9:4d:15:b7:d0:df:c2:ab:cf:
f1:01:74:54:56:8b:78:a7:a6:49:25:11:05:cb:bf:
c9:4d:7b:19:77:65:70:0c:3a:ea:78:92:e2:d3:39:
be:56:30:df:4a:1f:20:a3:22:5c:bb:fb:5c:07:2a:
13:b5:05:25:10:25:d1:5a:c3:df:0e:ad:95:d2:94:
70:45:fc:54:25:92:a4:e2:b4:e4:f4:47:15:a3:8e:
75:c7:a3:32:14:3a:30:57:cb:1e:c4:86:5a:d4:2b:
27:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:98:6C:C4:AF:6F:8B:41:4F:9F:B8:1B:D2:BF:77:B7:68:05:64:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01de5bf4-cd0d-3865-821b-95400ddbb27a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
130.101.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:91:63:df:b5:a7:2c:2b:6d:18:d2:96:2d:d1:87:d7:58:11:
40:92:9a:aa:62:4f:70:37:37:b0:b7:80:c0:7e:07:f8:7d:f2:
19:4f:8b:d8:7e:5e:20:44:a1:0c:ca:15:b2:c3:b3:28:15:5f:
09:49:73:2e:44:d0:ea:dd:31:83:ac:40:5e:46:5c:16:2a:d6:
60:be:15:2d:5e:8b:37:7b:56:55:dc:98:f4:88:dc:17:fb:4f:
85:39:00:52:fa:69:6f:fb:f3:15:ee:07:73:e4:22:01:f1:c1:
14:04:e6:4f:20:95:6f:8c:bd:38:11:8e:2f:7c:d0:fc:e7:86:
be:1d:5b:a3:8a:f7:8b:c7:ae:49:c8:d6:f6:22:29:5a:42:c6:
ff:3b:df:73:ed:31:a5:c1:50:44:b8:a3:09:04:f2:bf:7d:cc:
60:a2:c8:9c:08:ce:2d:c1:f9:0f:b9:ee:4c:c2:05:3c:6d:a6:
ee:a8:66:60:75:8c:5b:88:9f:12:46:a0:81:6e:38:cd:de:9d:
af:3a:86:5d:27:84:2a:ee:05:cf:f1:2e:af:20:30:c3:be:26:
6e:0a:2a:37:df:48:db:23:0b:87:e0:40:3c:68:ff:3f:9b:9b:
ed:c9:43:72:6b:0b:aa:a8:c9:1c:3d:97:96:98:cc:9d:93:90:
c2:f5:b4:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBzfvQZCWhI9waJ+YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEwMjEyMDAwMFoXDTIzMDIwNzA1MDAwMFowLzEtMCsGA1UEAxMk
MGY4NmY3YzEtN2M0MS00OGVjLWI3MmMtNTg2MzhiMzZkNTJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRyZ+Z5dO8VxGoPstkUQLwW0uN85Sd99rbGa
3ZigWifbss/slfBXTb16Kp836tGiv2xhGgfvSMVipEzFZvq6EH6tUdZVGqg08yKZ
3CepDyDJ/6O4Whj7ffPj9DcYK89W3mH5oRyR0mFIxl98nuBjnkuPE4KCntHIHGX6
f8oQ9vzSnqtzp1HCMWDntWalgnl70vI8lK7Uvy8htcKpTRW30N/Cq8/xAXRUVot4
p6ZJJREFy7/JTXsZd2VwDDrqeJLi0zm+VjDfSh8goyJcu/tcByoTtQUlECXRWsPf
Dq2V0pRwRfxUJZKk4rTk9EcVo451x6MyFDowV8sexIZa1CsndwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCSYbMSvb4tBT5+4G9K/d7doBWR9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMDFkZTViZjQtY2QwZC0z
ODY1LTgyMWItOTU0MDBkZGJiMjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHgmWAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALCRY9+1pywrbRjSli3Rh9dYEUCSmqpiT3A3N7C3gMB+B/h98hlPi9h+
XiBEoQzKFbLDsygVXwlJcy5E0OrdMYOsQF5GXBYq1mC+FS1eizd7VlXcmPSI3Bf7
T4U5AFL6aW/78xXuB3PkIgHxwRQE5k8glW+MvTgRji980Pznhr4dW6OK94vHrknI
1vYiKVpCxv8733PtMaXBUES4owkE8r99zGCiyJwIzi3B+Q+57kzCBTxtpu6oZmB1
jFuInxJGoIFuOM3ena86hl0nhCruBc/xLq8gMMO+Jm4KKjffSNsjC4fgQDxo/z+b
m+3JQ3JrC6qoyRw9l5aYzJ2TkML1tDg=
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:23:47 2025 by rpki-client