Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/18fae17b-1e1a-3c3b-a6c7-2239db28a9e7.roa
File: 18fae17b-1e1a-3c3b-a6c7-2239db28a9e7.roa (raw, json)
Hash identifier: oEtwi4VA4Pfg8BYJ8/r39KvxBP++M3q6qesDI2+kuf4=
Subject key identifier: BC:89:2D:8C:AA:27:92:6A:A9:98:37:5C:C4:DD:34:09:3B:25:21:4E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584047170AC64167472625D62500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/18fae17b-1e1a-3c3b-a6c7-2239db28a9e7.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 54.220.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:47:17:0a:c6:41:67:47:26:25:d6:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=711300ae-d3fe-4f0c-93e8-5bacd28f838a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d4:0f:2c:75:9d:20:c2:09:34:31:a6:e8:48:
86:4a:fd:e6:d0:57:83:af:b8:58:b1:ca:9e:62:7b:
c7:6e:38:45:49:c6:a1:9a:77:29:90:09:52:49:be:
2f:b0:f3:d2:be:d4:89:f6:7b:6c:d4:98:24:6c:42:
fb:3e:3c:74:75:18:11:19:5a:55:72:bd:91:c0:8c:
66:16:42:28:af:16:dd:80:06:3c:52:13:a7:9c:9c:
47:52:f0:5d:fb:72:7d:5e:21:9e:8e:1c:24:c0:67:
74:e2:c8:cc:dc:c7:bd:bb:3c:7e:fc:41:c4:53:be:
c1:4f:ba:ec:f9:c9:76:f6:f5:45:be:b2:7e:53:13:
40:af:ed:98:e2:47:ad:dd:bd:2c:2d:1f:ed:8d:f2:
9e:4f:b9:c5:6d:18:ff:ad:c7:f8:d3:fc:97:23:74:
0e:74:5a:aa:7b:d0:13:64:7e:d3:68:44:15:be:78:
6b:24:ec:88:69:58:ff:27:21:20:50:29:f7:3a:3f:
f4:78:63:6e:85:14:94:35:ee:9c:e1:df:6e:c3:57:
00:a1:02:f4:43:af:e1:30:ac:ea:cd:07:8e:ba:99:
08:4d:74:5e:c0:48:0f:c1:80:55:ec:6e:bc:e7:32:
be:1d:fa:70:ca:d9:4c:ac:37:b1:c4:5d:6d:c4:8f:
7e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:89:2D:8C:AA:27:92:6A:A9:98:37:5C:C4:DD:34:09:3B:25:21:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/18fae17b-1e1a-3c3b-a6c7-2239db28a9e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.220.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:82:49:03:f9:8e:8f:e2:83:3e:7c:79:10:85:28:e8:e3:54:
91:b6:27:f4:e5:a5:4b:47:e8:cc:e4:82:c6:d2:e3:b3:8c:94:
ac:c8:60:25:6a:a8:17:94:cf:f0:57:9a:be:a7:dc:70:c6:6e:
3e:24:53:fc:a4:de:53:02:05:a9:eb:85:47:d0:6f:fb:de:f0:
f4:7c:5f:e5:b9:00:38:09:a5:fc:b4:2a:46:8c:7a:3b:2b:63:
ce:38:ea:55:33:cd:88:ac:0e:3e:d2:f5:2e:3b:fa:c0:6d:24:
b5:78:2e:9d:3f:81:fa:1d:33:b5:35:d8:83:28:3c:8a:25:ee:
35:a7:ff:ba:fb:a9:9e:9c:06:7c:d6:6f:17:49:82:1b:41:ab:
70:c5:81:49:b4:1c:89:62:e4:28:c1:d5:0e:72:d4:54:f7:fc:
bf:c0:83:8f:ae:22:df:a7:d8:07:9d:1c:a6:d9:c2:92:55:ac:
e5:a6:ab:fd:21:0a:c3:a1:f4:2d:32:a6:9c:2c:6a:8d:fb:f9:
3f:a5:05:03:c8:9a:79:36:9c:9d:ef:f2:d0:cc:eb:d6:31:ff:
d0:30:3a:e7:54:d2:cf:fc:93:df:0c:90:14:03:d1:3b:b7:8b:
ef:37:e4:b0:1c:7c:60:8e:3e:88:1f:62:6d:72:f6:37:f1:94:
4f:35:ac:33
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBHFwrGQWdHJiXWJQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNzEyMDAwMFoXDTIzMDEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
NzExMzAwYWUtZDNmZS00ZjBjLTkzZTgtNWJhY2QyOGY4MzhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9QPLHWdIMIJNDGm6EiGSv3m0FeDr7hYscqe
YnvHbjhFScahmncpkAlSSb4vsPPSvtSJ9nts1JgkbEL7Pjx0dRgRGVpVcr2RwIxm
FkIorxbdgAY8UhOnnJxHUvBd+3J9XiGejhwkwGd04sjM3Me9uzx+/EHEU77BT7rs
+cl29vVFvrJ+UxNAr+2Y4ket3b0sLR/tjfKeT7nFbRj/rcf40/yXI3QOdFqqe9AT
ZH7TaEQVvnhrJOyIaVj/JyEgUCn3Oj/0eGNuhRSUNe6c4d9uw1cAoQL0Q6/hMKzq
zQeOupkITXRewEgPwYBV7G685zK+HfpwytlMrDexxF1txI9+TQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLyJLYyqJ5JqqZg3XMTdNAk7JSFOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMThmYWUxN2ItMWUxYS0z
YzNiLWE2YzctMjIzOWRiMjhhOWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBNtwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgoJJA/mOj+KDPnx5EIUo6ONUkbYn9OWlS0fozOSCxtLjs4yUrMhgJWqo
F5TP8FeavqfccMZuPiRT/KTeUwIFqeuFR9Bv+97w9Hxf5bkAOAml/LQqRox6Oytj
zjjqVTPNiKwOPtL1Ljv6wG0ktXgunT+B+h0ztTXYgyg8iiXuNaf/uvupnpwGfNZv
F0mCG0GrcMWBSbQciWLkKMHVDnLUVPf8v8CDj64i36fYB50cptnCklWs5aar/SEK
w6H0LTKmnCxqjfv5P6UFA8iaeTacne/y0Mzr1jH/0DA651TSz/yT3wyQFAPRO7eL
7zfksBx8YI4+iB9ibXL2N/GUTzWsMw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 21:20:37 2025 by rpki-client