Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/08286de3-9ecf-30b5-9620-fc97edf576db.roa
File: 08286de3-9ecf-30b5-9620-fc97edf576db.roa (raw, json)
Hash identifier: PpN076LE9cOzo0zp8S2oJ4wLFtkarUX8FKr9S+cILi8=
Subject key identifier: B6:51:65:08:48:08:0A:40:D5:69:28:87:B5:D5:D4:33:CC:FC:15:0C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F5AB8DD3C1D992D2A6DFFF580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/08286de3-9ecf-30b5-9620-fc97edf576db.roa
Signing time: Sat 24 Sep 2022 12:00:00 +0000
ROA not before: Sat 24 Sep 2022 12:00:00 +0000
ROA not after: Sun 30 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.176.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:5a:b8:dd:3c:1d:99:2d:2a:6d:ff:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 24 12:00:00 2022 GMT
Not After : Oct 30 04:00:00 2022 GMT
Subject: CN=1d638a34-c14f-4563-859c-d35eb777a78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:1d:fc:0f:85:a1:87:cb:d0:dd:db:d0:ed:
cc:ae:00:43:87:2e:9d:60:ac:19:f1:ea:d5:0b:c4:
92:0a:f1:c0:12:32:39:45:8e:c8:8a:8e:6b:c2:fb:
c0:e9:81:78:e6:18:d2:1a:3f:ee:29:e7:73:9e:0d:
f3:ff:f3:54:96:7b:60:58:c2:17:fe:7d:7d:7d:16:
04:56:fd:e2:96:fd:b1:60:ec:a5:85:6b:51:68:5e:
2e:c1:10:3f:70:41:d7:9e:40:56:7a:5a:2b:be:b6:
24:10:69:82:85:ea:52:0b:a7:2f:37:3a:7d:a4:4a:
d8:6a:6e:eb:bc:42:8d:ed:e1:ee:69:3b:e1:db:b3:
65:a0:71:39:97:e4:6c:c4:62:9f:52:4b:62:42:bf:
fb:9a:e5:43:3f:c2:f4:28:a5:c9:ab:e3:1d:87:8a:
07:96:a9:1d:ff:6d:e8:17:24:bf:3a:1f:fd:cf:06:
b1:28:4a:36:d4:20:90:02:97:84:34:cb:f4:09:79:
01:42:70:64:2f:79:20:4f:8d:30:aa:5a:96:e6:7b:
7d:e6:57:84:b4:8b:f6:6e:05:9f:e1:16:e6:7c:de:
23:83:65:54:5e:59:1d:e8:b9:36:e2:e5:4c:09:cc:
ec:e6:f5:57:96:a8:5c:7d:58:8b:bc:14:20:89:28:
df:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:51:65:08:48:08:0A:40:D5:69:28:87:B5:D5:D4:33:CC:FC:15:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/08286de3-9ecf-30b5-9620-fc97edf576db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.176.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:75:0b:72:7d:77:db:b1:56:ec:8b:74:70:54:4e:85:93:22:
5e:74:7b:9f:ea:e4:a3:9d:c9:a3:f8:b4:fd:29:71:50:de:18:
37:43:fd:32:d3:11:5b:c2:fa:98:18:cd:7a:ed:3d:d0:7a:35:
c0:78:81:1e:96:e0:cc:04:b0:60:b9:f5:7d:1e:4d:7a:dd:c4:
2c:4e:fa:e8:af:44:14:27:39:88:60:29:fd:d5:ab:d6:78:d5:
21:ee:4c:60:e5:1b:5a:e8:d6:98:eb:04:81:be:08:e2:f3:e1:
39:5f:95:ec:37:cc:e0:8f:16:8a:e8:d4:88:d1:74:8a:9a:86:
4d:22:6e:a3:3e:8c:df:2f:69:b8:c8:c1:06:1f:3b:2a:1d:b5:
10:7c:9b:55:9f:ea:46:c2:94:48:69:0c:92:3c:e4:9b:1a:48:
73:53:e3:e1:92:bf:84:46:f3:6b:25:2a:d7:67:d5:ec:00:cc:
d4:e1:bf:dc:61:e1:67:b3:c0:43:e9:4b:40:f0:fc:43:d4:44:
b6:55:28:5c:21:30:82:57:ed:09:e1:5c:04:67:4b:9a:4f:1d:
3c:ba:4b:7e:4c:46:01:b1:b2:66:e2:ee:6c:ee:f5:ae:bb:7b:
53:32:f9:b8:62:96:18:b1:a6:f5:49:46:b9:37:7b:14:a2:0b:
f5:80:08:76
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9auN08HZktKm3/9YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkyNDEyMDAwMFoXDTIyMTAzMDA0MDAwMFowLzEtMCsGA1UEAxMk
MWQ2MzhhMzQtYzE0Zi00NTYzLTg1OWMtZDM1ZWI3NzdhNzhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlcd/A+FoYfL0N3b0O3MrgBDhy6dYKwZ8erV
C8SSCvHAEjI5RY7Iio5rwvvA6YF45hjSGj/uKedzng3z//NUlntgWMIX/n19fRYE
Vv3ilv2xYOylhWtRaF4uwRA/cEHXnkBWelorvrYkEGmChepSC6cvNzp9pErYam7r
vEKN7eHuaTvh27NloHE5l+RsxGKfUktiQr/7muVDP8L0KKXJq+Mdh4oHlqkd/23o
FyS/Oh/9zwaxKEo21CCQApeENMv0CXkBQnBkL3kgT40wqlqW5nt95leEtIv2bgWf
4RbmfN4jg2VUXlkd6Lk24uVMCczs5vVXlqhcfViLvBQgiSjfAQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLZRZQhICApA1Wkoh7XV1DPM/BUMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMDgyODZkZTMtOWVjZi0z
MGI1LTk2MjAtZmM5N2VkZjU3NmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMENrAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAqXULcn1327FW7It0cFROhZMiXnR7n+rko53Jo/i0/SlxUN4YN0P9MtMR
W8L6mBjNeu090Ho1wHiBHpbgzASwYLn1fR5Net3ELE766K9EFCc5iGAp/dWr1njV
Ie5MYOUbWujWmOsEgb4I4vPhOV+V7DfM4I8WiujUiNF0ipqGTSJuoz6M3y9puMjB
Bh87Kh21EHybVZ/qRsKUSGkMkjzkmxpIc1Pj4ZK/hEbzayUq12fV7ADM1OG/3GHh
Z7PAQ+lLQPD8Q9REtlUoXCEwglftCeFcBGdLmk8dPLpLfkxGAbGyZuLubO71rrt7
UzL5uGKWGLGm9UlGuTd7FKIL9YAIdg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:56:31 2025 by rpki-client