Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07991fc1-5c25-3ff4-a9fb-747b7cbff2e7.roa
File: 07991fc1-5c25-3ff4-a9fb-747b7cbff2e7.roa (raw, json)
Hash identifier: 806hFEpWiUvQQfAY9GhGS6YEM57GtkJep5+YE1WkckY=
Subject key identifier: F0:04:EC:88:B8:F9:03:1F:E9:09:D7:7C:00:5C:9F:36:AC:D8:64:68
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584046034EEB66E45344542A0DA0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07991fc1-5c25-3ff4-a9fb-747b7cbff2e7.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 144.220.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:46:03:4e:eb:66:e4:53:44:54:2a:0d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=77d976f8-527b-41ce-85dc-4a5c1e8f9f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b6:32:1f:03:32:87:f0:83:de:f2:5a:c4:21:
2b:4b:9e:d8:a2:60:ce:7d:f3:3c:16:86:3b:19:00:
5e:e8:5a:25:9e:b4:f8:c6:bb:dd:ae:9a:6d:fe:fa:
d0:c6:66:82:47:98:16:01:d5:fb:61:0d:e6:58:7f:
4d:f9:68:68:dc:7c:da:d9:87:68:86:03:2c:42:ce:
b5:c1:65:e8:b4:87:f4:ee:79:27:2c:92:02:23:b3:
1f:76:75:ac:6c:e4:91:81:63:63:67:3d:16:17:25:
a0:d8:e3:f0:1d:9c:6e:e4:05:de:55:8f:04:f9:25:
ce:db:99:3d:33:ab:d0:bc:9a:46:d5:26:69:0a:be:
5f:7e:93:f0:f3:3d:49:32:97:88:15:17:cc:3b:da:
b0:78:d5:23:80:81:2d:1e:41:c2:bf:6c:10:05:c5:
91:e5:a4:4b:91:e8:8b:31:e2:42:9c:6f:d1:38:22:
f6:c5:6a:71:19:e4:57:d7:6e:5a:07:d0:9d:cd:2b:
db:b7:27:39:24:db:3d:b0:fd:32:1a:df:2b:59:14:
96:9c:f0:fa:d5:99:d5:f0:f0:d0:dc:62:9b:49:a6:
3a:52:07:62:d5:24:8d:29:d8:69:c8:1a:50:dc:d2:
a9:db:9c:be:48:f2:a4:fb:4e:03:7c:f5:dc:9f:ae:
2a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:04:EC:88:B8:F9:03:1F:E9:09:D7:7C:00:5C:9F:36:AC:D8:64:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07991fc1-5c25-3ff4-a9fb-747b7cbff2e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
144.220.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:5c:81:3f:a8:5f:41:40:13:06:30:63:c8:bd:b2:34:a1:c9:
67:aa:98:87:6b:e2:e2:ba:27:1f:42:95:5f:a2:e7:5d:0f:af:
5b:c4:d8:a5:1e:87:1e:31:9c:9c:d3:e8:a1:d0:8f:3a:62:57:
88:0e:c0:c4:cf:d8:d3:32:04:89:d0:bd:28:14:a4:a9:55:cd:
68:93:0c:0e:08:33:84:5d:b7:29:67:09:1d:e5:37:c7:09:00:
d0:30:a5:12:fa:97:6f:1b:cf:97:aa:6c:7d:c8:60:be:d8:c1:
a6:2e:89:4a:e9:a8:30:af:04:f4:9f:32:78:5d:50:92:11:aa:
6d:b7:54:f4:40:5b:17:39:dc:86:05:a0:54:64:63:41:fb:1f:
52:d3:67:99:3b:1c:b2:64:da:77:cc:6f:48:e2:2b:28:2a:3b:
22:de:69:41:4f:72:b0:de:85:7d:62:2b:85:ef:3a:da:97:42:
eb:05:ff:4b:27:d8:58:24:4f:c8:ef:bd:8d:c3:98:3d:44:b3:
a1:c8:20:99:82:ee:b5:f1:fe:06:13:aa:4c:f0:cb:9a:4d:3f:
b8:b5:f1:0c:89:c9:47:db:c6:19:8d:68:dd:a6:55:e6:2e:a8:
07:64:58:49:e0:52:a6:47:97:b1:6e:b0:e5:11:2a:29:f9:7a:
0f:38:94:d5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBGA07rZuRTRFQqDaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNzEyMDAwMFoXDTIzMDEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
NzdkOTc2ZjgtNTI3Yi00MWNlLTg1ZGMtNGE1YzFlOGY5Zjk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17YyHwMyh/CD3vJaxCErS57YomDOffM8FoY7
GQBe6FolnrT4xrvdrppt/vrQxmaCR5gWAdX7YQ3mWH9N+Who3Hza2YdohgMsQs61
wWXotIf07nknLJICI7MfdnWsbOSRgWNjZz0WFyWg2OPwHZxu5AXeVY8E+SXO25k9
M6vQvJpG1SZpCr5ffpPw8z1JMpeIFRfMO9qweNUjgIEtHkHCv2wQBcWR5aRLkeiL
MeJCnG/ROCL2xWpxGeRX125aB9CdzSvbtyc5JNs9sP0yGt8rWRSWnPD61ZnV8PDQ
3GKbSaY6Ugdi1SSNKdhpyBpQ3NKp25y+SPKk+04DfPXcn64qywIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPAE7Ii4+QMf6QnXfABcnzas2GRoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMDc5OTFmYzEtNWMyNS0z
ZmY0LWE5ZmItNzQ3YjdjYmZmMmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkNwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAM1yBP6hfQUATBjBjyL2yNKHJZ6qYh2vi4ronH0KVX6LnXQ+vW8TYpR6H
HjGcnNPoodCPOmJXiA7AxM/Y0zIEidC9KBSkqVXNaJMMDggzhF23KWcJHeU3xwkA
0DClEvqXbxvPl6psfchgvtjBpi6JSumoMK8E9J8yeF1QkhGqbbdU9EBbFznchgWg
VGRjQfsfUtNnmTscsmTad8xvSOIrKCo7It5pQU9ysN6FfWIrhe862pdC6wX/SyfY
WCRPyO+9jcOYPUSzocggmYLutfH+BhOqTPDLmk0/uLXxDInJR9vGGY1o3aZV5i6o
B2RYSeBSpkeXsW6w5REqKfl6DziU1Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:57:21 2025 by rpki-client