Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0ba2a231-dd37-396e-8bca-bd356ebef909.roa
File: 0ba2a231-dd37-396e-8bca-bd356ebef909.roa (raw, json)
Hash identifier: FZ+BoOO+TLrQPC3nZQDgLZVoRJSSJ3195Y0i+RcTyg0=
Subject key identifier: 08:5E:BB:5E:A0:CF:5B:4B:FA:D5:F3:7B:DF:AF:0B:38:3B:A9:13:13
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F1D5CA920DCF704980CF79380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0ba2a231-dd37-396e-8bca-bd356ebef909.roa
Signing time: Fri 02 Sep 2022 12:00:00 +0000
ROA not before: Fri 02 Sep 2022 12:00:00 +0000
ROA not after: Sat 08 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 157.241.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:1d:5c:a9:20:dc:f7:04:98:0c:f7:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 2 12:00:00 2022 GMT
Not After : Oct 8 04:00:00 2022 GMT
Subject: CN=f91b6070-5a0f-486d-a5ac-6270abf6078e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:52:07:68:b0:03:6a:00:1e:1e:a8:07:90:ae:
a2:c7:66:0e:99:f0:c9:29:31:1f:a4:ec:f4:9b:be:
88:0e:88:9b:09:93:05:cb:8e:73:0b:3e:a3:c2:b3:
73:b1:ff:2a:f5:1d:09:4a:98:22:46:3b:d7:c9:46:
b5:cc:c2:5d:0e:b4:bd:34:0e:27:0f:f2:4f:eb:09:
ab:9f:cf:70:af:b8:8b:72:a8:4b:0e:12:82:e9:65:
a8:86:03:d9:de:2b:85:9c:ef:85:33:a9:96:76:e9:
33:3e:63:d4:8e:dc:91:27:42:6b:77:0e:05:4b:06:
87:6b:83:41:bd:77:7e:36:fd:48:5c:6d:dc:65:6c:
62:2a:00:e9:f3:89:8f:d0:b1:52:9f:72:2a:dd:b5:
d7:c8:1d:2d:3f:48:62:2a:09:1d:5c:d6:16:88:a7:
c1:fa:e7:36:08:98:b9:09:25:2d:02:1c:00:28:89:
0a:68:74:72:de:b8:16:d5:8c:c4:11:f8:5a:e9:44:
50:ab:71:1d:56:56:03:61:5e:03:53:f1:b4:0a:52:
2c:bf:fb:35:ec:c8:26:f1:e4:d2:3b:db:7a:03:87:
e4:36:b5:9f:0f:50:40:2b:02:1e:10:32:7e:32:09:
2b:92:68:00:a3:ee:0b:f0:23:14:ee:9f:38:97:93:
61:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5E:BB:5E:A0:CF:5B:4B:FA:D5:F3:7B:DF:AF:0B:38:3B:A9:13:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0ba2a231-dd37-396e-8bca-bd356ebef909.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
157.241.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:cc:2f:c6:f6:5d:d5:95:24:bb:99:e7:97:91:db:7c:3d:75:
72:28:d3:b1:a5:79:33:96:fe:c7:6e:99:4a:b8:2f:ca:74:e8:
ed:04:59:0e:fe:91:85:36:86:4d:35:dd:1d:94:82:3f:30:4f:
a9:f1:6f:05:ec:b0:81:d2:eb:04:78:3e:85:75:dc:ca:42:49:
b3:e8:98:99:8d:94:5f:9b:5e:46:2c:b2:07:94:8a:2f:cb:be:
18:ad:2f:cf:3a:22:f7:63:68:23:80:03:1c:c9:5e:de:e4:15:
d4:5c:7b:b5:9c:48:0b:98:91:c4:b3:ea:8f:16:9f:02:9f:15:
65:0f:33:54:5c:73:0b:b0:8d:5c:83:11:32:22:7b:d3:c0:26:
1d:7b:1e:b5:a5:83:e8:bb:7c:cf:16:20:d2:71:f2:43:92:11:
3e:cb:a5:57:2e:be:33:00:19:73:d0:78:a2:10:4e:ff:7f:02:
08:61:1a:f7:19:f7:a3:08:89:27:3a:24:8f:c5:a6:58:b9:13:
65:c0:33:b9:b8:f7:a8:ee:3e:77:c4:c2:9d:a8:dd:5e:36:a6:
fd:e8:c7:0a:07:ca:e4:f5:96:c5:fb:2d:b3:3c:4b:56:fe:3f:
d3:1e:af:96:fd:32:0e:05:20:c5:ef:40:39:db:eb:b6:4e:c2:
4e:e4:ae:a1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8dXKkg3PcEmAz3k4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkwMjEyMDAwMFoXDTIyMTAwODA0MDAwMFowLzEtMCsGA1UEAxMk
ZjkxYjYwNzAtNWEwZi00ODZkLWE1YWMtNjI3MGFiZjYwNzhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1IHaLADagAeHqgHkK6ix2YOmfDJKTEfpOz0
m76IDoibCZMFy45zCz6jwrNzsf8q9R0JSpgiRjvXyUa1zMJdDrS9NA4nD/JP6wmr
n89wr7iLcqhLDhKC6WWohgPZ3iuFnO+FM6mWdukzPmPUjtyRJ0Jrdw4FSwaHa4NB
vXd+Nv1IXG3cZWxiKgDp84mP0LFSn3Iq3bXXyB0tP0hiKgkdXNYWiKfB+uc2CJi5
CSUtAhwAKIkKaHRy3rgW1YzEEfha6URQq3EdVlYDYV4DU/G0ClIsv/s17Mgm8eTS
O9t6A4fkNrWfD1BAKwIeEDJ+MgkrkmgAo+4L8CMU7p84l5Nh3wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAheu16gz1tL+tXze9+vCzg7qRMTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMGJhMmEyMzEtZGQzNy0z
OTZlLThiY2EtYmQzNTZlYmVmOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnfEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAl8wvxvZd1ZUku5nnl5HbfD11cijTsaV5M5b+x26ZSrgvynTo7QRZDv6R
hTaGTTXdHZSCPzBPqfFvBeywgdLrBHg+hXXcykJJs+iYmY2UX5teRiyyB5SKL8u+
GK0vzzoi92NoI4ADHMle3uQV1Fx7tZxIC5iRxLPqjxafAp8VZQ8zVFxzC7CNXIMR
MiJ708AmHXsetaWD6Lt8zxYg0nHyQ5IRPsulVy6+MwAZc9B4ohBO/38CCGEa9xn3
owiJJzokj8WmWLkTZcAzubj3qO4+d8TCnajdXjam/ejHCgfK5PWWxfstszxLVv4/
0x6vlv0yDgUgxe9AOdvrtk7CTuSuoQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 18:00:15 2025 by rpki-client