Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/18205bd7-e1d1-381e-abb8-33ae16d21863.roa
File: 18205bd7-e1d1-381e-abb8-33ae16d21863.roa (raw, json)
Hash identifier: Rg2L6GsKAL0sQyC4VzCgM2NER87KkKn4i6Vl/L5t8CU=
Subject key identifier: 69:86:D3:42:04:E9:FE:22:B3:CF:BF:08:65:D6:28:70:CE:01:CA:C1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DAB48B11477A55E65D16A62C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/18205bd7-e1d1-381e-abb8-33ae16d21863.roa
Signing time: Fri 22 Apr 2022 12:00:00 +0000
ROA not before: Fri 22 Apr 2022 12:00:00 +0000
ROA not after: Sat 28 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.192.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ab:48:b1:14:77:a5:5e:65:d1:6a:62:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 22 12:00:00 2022 GMT
Not After : May 28 04:00:00 2022 GMT
Subject: CN=9e1dbaea-cf05-42c5-9ab4-95765582a391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:25:ae:c0:e9:e6:c3:13:51:59:6f:e0:9a:e8:
ff:53:d2:ce:6d:ca:57:85:5c:33:49:49:a0:24:43:
8d:b4:ee:06:da:2a:c0:69:54:67:f2:c2:22:15:7d:
13:11:a9:8e:67:17:ee:66:71:77:0d:a5:60:62:46:
be:bb:18:77:7d:69:6e:6b:c0:84:07:99:15:5b:b7:
9f:30:0c:88:fe:ba:2c:86:e8:db:80:52:a8:9c:41:
81:34:a1:dc:a7:3a:ad:3b:ad:2f:5f:3b:4c:5c:58:
7b:8b:01:b3:2e:57:29:5a:09:a8:c7:c5:4c:11:6b:
63:0d:0c:87:6d:a1:65:41:46:11:a9:87:9e:fe:88:
db:dc:97:7f:74:ee:58:c5:cd:d2:f0:4a:28:26:e3:
15:87:12:18:58:3b:33:fb:03:45:09:06:d9:34:c8:
4a:3f:69:55:b3:83:77:98:60:44:ce:9f:aa:92:a1:
98:8d:cc:a1:0d:26:b5:ef:08:e0:5e:d9:5f:ec:58:
f5:cc:54:6e:68:ca:84:34:41:dd:b7:de:4b:d0:6f:
b1:19:fe:80:08:10:cb:98:ae:19:89:bc:1d:24:a0:
52:16:51:c9:ac:80:d4:b1:01:bf:fd:b0:7c:8f:e8:
46:db:70:37:1d:a1:4e:14:4d:f3:43:6e:1f:9c:80:
3a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:86:D3:42:04:E9:FE:22:B3:CF:BF:08:65:D6:28:70:CE:01:CA:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/18205bd7-e1d1-381e-abb8-33ae16d21863.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.192.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:72:d8:ca:55:c2:df:bf:47:ef:b9:13:da:a5:1e:4e:b0:0c:
b1:42:57:36:80:10:b8:ef:8d:1c:ca:7c:77:df:e2:a5:4a:b1:
e2:f5:63:14:35:77:6d:56:44:f1:8f:8f:73:c5:e4:61:9b:9a:
e3:40:fd:b0:2c:01:1b:3a:5d:ff:83:6a:bf:9b:0e:93:17:20:
af:18:0e:e5:8e:d4:e8:3e:1e:3c:73:d9:a1:40:17:42:34:22:
b5:f0:4c:aa:da:7e:94:fb:e1:2d:5b:8c:8c:23:62:02:13:62:
04:a3:4b:62:b1:25:37:85:c1:84:f4:77:2b:61:16:21:63:da:
aa:68:f2:c0:38:91:0e:be:54:6d:56:6b:c3:53:92:d8:af:7c:
5f:10:82:e4:4a:c5:92:0e:d4:e7:9c:ba:6e:92:92:1e:54:2a:
0a:16:1d:55:e5:47:38:a0:53:24:40:1f:a6:60:17:f2:ec:17:
a0:d9:f7:bc:48:02:87:e3:29:b9:24:27:f2:2c:ee:26:28:22:
86:d5:2a:d5:8f:d6:a8:48:2e:19:3e:21:f1:eb:69:b4:3f:c3:
c5:5b:b8:b1:9c:ab:68:9f:93:e2:7d:0d:c0:be:62:68:67:f6:
69:5b:a8:52:0f:52:52:6b:bb:1b:0c:1f:34:2e:ef:d2:9d:d9:
b1:bd:22:df
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2rSLEUd6VeZdFqYsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQyMjEyMDAwMFoXDTIyMDUyODA0MDAwMFowLzEtMCsGA1UEAxMk
OWUxZGJhZWEtY2YwNS00MmM1LTlhYjQtOTU3NjU1ODJhMzkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCWuwOnmwxNRWW/gmuj/U9LObcpXhVwzSUmg
JEONtO4G2irAaVRn8sIiFX0TEamOZxfuZnF3DaVgYka+uxh3fWlua8CEB5kVW7ef
MAyI/roshujbgFKonEGBNKHcpzqtO60vXztMXFh7iwGzLlcpWgmox8VMEWtjDQyH
baFlQUYRqYee/ojb3Jd/dO5Yxc3S8EooJuMVhxIYWDsz+wNFCQbZNMhKP2lVs4N3
mGBEzp+qkqGYjcyhDSa17wjgXtlf7Fj1zFRuaMqENEHdt95L0G+xGf6ACBDLmK4Z
ibwdJKBSFlHJrIDUsQG//bB8j+hG23A3HaFOFE3zQ24fnIA6kQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGmG00IE6f4is8+/CGXWKHDOAcrBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMTgyMDViZDctZTFkMS0z
ODFlLWFiYjgtMzNhZTE2ZDIxODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMENsAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZHLYylXC379H77kT2qUeTrAMsUJXNoAQuO+NHMp8d9/ipUqx4vVjFDV3
bVZE8Y+Pc8XkYZua40D9sCwBGzpd/4Nqv5sOkxcgrxgO5Y7U6D4ePHPZoUAXQjQi
tfBMqtp+lPvhLVuMjCNiAhNiBKNLYrElN4XBhPR3K2EWIWPaqmjywDiRDr5UbVZr
w1OS2K98XxCC5ErFkg7U55y6bpKSHlQqChYdVeVHOKBTJEAfpmAX8uwXoNn3vEgC
h+MpuSQn8izuJigihtUq1Y/WqEguGT4h8etptD/DxVu4sZyraJ+T4n0NwL5iaGf2
aVuoUg9SUmu7GwwfNC7v0p3Zsb0i3w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:16 2025 by rpki-client