Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0fb42bb1-fdbe-3651-a6c4-2520b80f07f5.roa
File: 0fb42bb1-fdbe-3651-a6c4-2520b80f07f5.roa (raw, json)
Hash identifier: NQXi1LlrVAm5ef76I/hgd7NQZHLYbNMnqfmYCU5kMEg=
Subject key identifier: 30:D4:C7:64:A2:60:55:AD:A1:25:A5:AF:C8:29:D2:4E:0A:C2:3E:C8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CA0E920E7C9F1057E3CA33DA0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0fb42bb1-fdbe-3651-a6c4-2520b80f07f5.roa
Signing time: Tue 18 Jan 2022 05:00:00 +0000
ROA not before: Tue 18 Jan 2022 05:00:00 +0000
ROA not after: Tue 22 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 136.140.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:a0:e9:20:e7:c9:f1:05:7e:3c:a3:3d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 18 05:00:00 2022 GMT
Not After : Feb 22 05:00:00 2022 GMT
Subject: CN=70118bcf-6028-4da8-93eb-227c4093012c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c1:e4:ee:d3:ff:28:13:f0:67:20:d5:ef:08:
84:3a:7d:45:c3:48:c2:dc:b0:95:aa:b9:3e:f2:89:
87:73:31:48:c4:fa:02:5a:12:b3:bf:4e:0c:02:58:
8d:cb:e3:dd:1d:ee:b9:3d:44:4d:8d:8c:85:3b:ce:
45:fd:09:e6:e2:d8:3b:d0:d7:6a:f7:2e:5b:13:5d:
09:d9:ed:c8:b5:7b:17:45:a1:a6:1e:4b:47:37:8a:
ba:7d:a2:8d:04:20:42:69:bf:df:e5:7e:de:5c:ce:
6f:35:75:6e:09:a7:ff:29:e0:d4:7c:5b:52:60:ff:
20:49:cc:01:6b:67:11:f5:e9:a9:8e:63:47:87:d2:
36:df:bb:24:a6:11:73:8d:1a:b9:98:23:50:9e:2e:
38:5e:12:bb:32:bd:19:4a:b3:ce:4c:22:f9:6c:d7:
63:4c:ec:21:dc:d7:eb:b2:e0:78:43:29:1e:ab:3d:
af:ab:99:2f:8f:2d:37:fb:74:65:b4:c6:47:4c:0e:
1d:27:6d:35:92:b2:c6:42:3d:f9:51:e1:de:0d:56:
19:95:89:4b:32:99:39:9b:e6:36:09:dd:29:13:ca:
36:e0:43:bc:10:2a:ea:68:10:11:38:59:4f:81:74:
60:32:ef:b3:2b:fa:cb:45:d3:ee:17:73:94:7d:c9:
4d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D4:C7:64:A2:60:55:AD:A1:25:A5:AF:C8:29:D2:4E:0A:C2:3E:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0fb42bb1-fdbe-3651-a6c4-2520b80f07f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.140.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:e3:af:a4:ae:5c:09:21:13:76:73:4d:a5:b7:b6:cc:f3:81:
4f:ba:06:4a:c4:58:36:71:0e:80:10:1a:d8:c2:c6:c5:2f:01:
2c:88:11:ae:f0:86:48:a9:4e:3f:98:a2:b9:5f:93:39:a9:89:
08:e7:e6:5b:86:bc:22:91:70:e4:50:97:08:94:63:df:f6:c4:
b1:d4:35:f0:8c:b9:98:1e:76:2a:7a:61:c2:07:5e:93:c5:ca:
39:43:04:bf:78:f2:ff:ab:0d:32:cb:69:3c:52:bb:c7:d4:d9:
36:df:82:ba:a6:b5:f6:31:c4:12:90:5e:b0:70:5c:25:be:45:
d7:c9:20:82:92:4f:2f:f5:59:0e:54:74:89:48:3a:b2:0c:67:
e9:6a:31:cd:a9:bd:f5:b6:44:eb:ac:c2:1f:fd:58:aa:4f:bf:
b8:8f:b5:dc:2c:9c:dc:3e:0d:7b:2c:10:c2:4c:f3:b4:75:42:
d8:5d:6c:92:f3:7a:08:7b:fc:f8:d6:9d:3c:0d:8a:d2:09:e1:
a2:2e:6a:28:e4:6d:59:0d:0e:93:45:ee:31:45:3d:e7:13:0e:
08:e3:a8:6c:27:0e:f0:02:7b:b5:05:73:27:20:fa:77:f5:47:
81:69:47:03:32:8b:28:e9:03:8f:b9:6c:63:da:8d:26:75:68:
33:c2:7c:98
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDyg6SDnyfEFfjyjPaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDExODA1MDAwMFoXDTIyMDIyMjA1MDAwMFowLzEtMCsGA1UEAxMk
NzAxMThiY2YtNjAyOC00ZGE4LTkzZWItMjI3YzQwOTMwMTJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsHk7tP/KBPwZyDV7wiEOn1Fw0jC3LCVqrk+
8omHczFIxPoCWhKzv04MAliNy+PdHe65PURNjYyFO85F/Qnm4tg70Ndq9y5bE10J
2e3ItXsXRaGmHktHN4q6faKNBCBCab/f5X7eXM5vNXVuCaf/KeDUfFtSYP8gScwB
a2cR9empjmNHh9I237skphFzjRq5mCNQni44XhK7Mr0ZSrPOTCL5bNdjTOwh3Nfr
suB4Qykeqz2vq5kvjy03+3RltMZHTA4dJ201krLGQj35UeHeDVYZlYlLMpk5m+Y2
Cd0pE8o24EO8ECrqaBAROFlPgXRgMu+zK/rLRdPuF3OUfclN5QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDDUx2SiYFWtoSWlr8gp0k4Kwj7IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMGZiNDJiYjEtZmRiZS0z
NjUxLWE2YzQtMjUyMGI4MGYwN2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiIwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAcuOvpK5cCSETdnNNpbe2zPOBT7oGSsRYNnEOgBAa2MLGxS8BLIgRrvCG
SKlOP5iiuV+TOamJCOfmW4a8IpFw5FCXCJRj3/bEsdQ18Iy5mB52Knphwgdek8XK
OUMEv3jy/6sNMstpPFK7x9TZNt+Cuqa19jHEEpBesHBcJb5F18kggpJPL/VZDlR0
iUg6sgxn6Woxzam99bZE66zCH/1Yqk+/uI+13Cyc3D4NeywQwkzztHVC2F1skvN6
CHv8+NadPA2K0gnhoi5qKORtWQ0Ok0XuMUU95xMOCOOobCcO8AJ7tQVzJyD6d/VH
gWlHAzKLKOkDj7lsY9qNJnVoM8J8mA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:26:06 2025 by rpki-client