Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1923af18-8ab6-3d2b-93d3-641eb9ddef04.roa
File: 1923af18-8ab6-3d2b-93d3-641eb9ddef04.roa (raw, json)
Hash identifier: jr96wqZhJXvAQoskarXwmuD261uFs1K2fnMDM2uLwUQ=
Subject key identifier: 24:A7:FF:0A:77:7F:F0:22:99:20:51:4E:16:3D:3A:15:84:C2:16:F4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584013ACD42E37606343D8C9F170
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1923af18-8ab6-3d2b-93d3-641eb9ddef04.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Wed 04 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 3.64.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:13:ac:d4:2e:37:60:63:43:d8:c9:f1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Jan 4 05:00:00 2023 GMT
Subject: CN=95b82a0a-1997-4fa4-be7f-92a41e94bda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:29:ff:65:17:53:e0:83:06:7c:d5:b7:a0:25:
22:6b:43:bf:7e:76:17:54:16:3d:f2:4e:b8:91:56:
4d:1e:77:02:84:09:86:24:d9:fa:92:d8:77:0c:af:
03:f0:cc:bc:22:85:ab:a0:fa:42:db:22:0f:42:8c:
67:2b:c4:d5:f8:5f:e4:02:f5:25:af:41:68:d3:2b:
20:38:94:89:00:d4:18:ef:d8:b9:e3:77:3d:5b:e6:
ee:e6:02:e8:02:d3:a7:65:99:69:70:66:93:af:93:
f1:dd:d9:8d:1b:31:fc:84:c6:16:3d:86:73:45:23:
8b:5a:1a:cd:7d:d5:88:2a:2b:8b:14:f6:ca:1c:c9:
2b:4b:b9:2e:f0:cb:95:5e:dd:7c:97:62:5f:7d:bb:
cd:19:a0:cd:38:c1:57:06:50:1c:60:30:e4:f1:7e:
f1:4c:4b:a5:ff:22:b3:9a:52:d8:f4:12:1e:ed:46:
8e:13:7e:f7:35:e1:7f:80:89:79:3c:ec:a6:9f:19:
2c:75:98:d7:7d:e7:95:77:0f:0f:d8:44:e7:43:22:
94:8a:66:73:57:26:92:49:03:08:bb:e6:6e:20:34:
bc:4b:74:3f:de:6d:01:bc:e3:61:e5:0f:00:bb:13:
87:1c:7a:81:77:6b:f3:da:c7:77:47:bf:25:49:b5:
9d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A7:FF:0A:77:7F:F0:22:99:20:51:4E:16:3D:3A:15:84:C2:16:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1923af18-8ab6-3d2b-93d3-641eb9ddef04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.64.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:7e:49:5b:57:0f:2b:10:5b:66:34:fb:dc:35:51:ec:cd:61:
0f:0a:de:db:23:1c:bc:9d:50:8a:61:9c:d8:4e:ea:43:1e:23:
a0:f1:50:f8:e9:6b:c1:98:9e:68:4a:41:09:35:99:72:5f:b7:
c3:ea:01:fd:c9:86:cd:db:d1:13:f0:2d:84:3c:15:6d:2a:0e:
96:46:3c:de:da:fc:17:a0:4a:d3:b3:a4:35:46:57:b8:e0:73:
80:1c:51:da:ef:bd:85:65:96:f1:15:be:f2:01:ac:04:05:fc:
39:64:2c:8f:e5:70:a7:c6:7a:f0:4f:a9:0c:f5:9c:d1:49:23:
e4:00:99:82:22:e7:1c:8d:44:24:0d:dd:4f:c2:d9:7a:10:d8:
94:f8:89:ac:45:42:9f:76:42:eb:a3:01:b5:00:0c:0e:4d:7d:
a8:98:c9:ee:6c:fa:31:ba:e8:32:1e:cb:f5:1b:bc:9c:e9:00:
ca:07:01:24:ce:cd:f7:8c:c8:8e:1e:48:28:d5:72:c0:60:86:
3f:2c:b8:1f:fc:7a:1c:78:d4:6c:ef:2f:9c:bc:ed:e6:7e:11:
8d:c6:07:2e:d7:f4:af:2c:f9:98:85:cb:1b:a4:27:9c:8c:ea:
c1:cd:f1:c9:0f:10:14:73:2b:af:fd:8b:d9:d9:79:9f:42:11:
65:32:74:f6
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEATrNQuN2BjQ9jJ8XAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEyOTEyMDAwMFoXDTIzMDEwNDA1MDAwMFowLzEtMCsGA1UEAxMk
OTViODJhMGEtMTk5Ny00ZmE0LWJlN2YtOTJhNDFlOTRiZGExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1in/ZRdT4IMGfNW3oCUia0O/fnYXVBY98k64
kVZNHncChAmGJNn6kth3DK8D8My8IoWroPpC2yIPQoxnK8TV+F/kAvUlr0Fo0ysg
OJSJANQY79i543c9W+bu5gLoAtOnZZlpcGaTr5Px3dmNGzH8hMYWPYZzRSOLWhrN
fdWIKiuLFPbKHMkrS7ku8MuVXt18l2JffbvNGaDNOMFXBlAcYDDk8X7xTEul/yKz
mlLY9BIe7UaOE373NeF/gIl5POymnxksdZjXfeeVdw8P2ETnQyKUimZzVyaSSQMI
u+ZuIDS8S3Q/3m0BvONh5Q8AuxOHHHqBd2vz2sd3R78lSbWdGwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCSn/wp3f/AimSBRThY9OhWEwhb0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMTkyM2FmMTgtOGFiNi0z
ZDJiLTkzZDMtNjQxZWI5ZGRlZjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMGA0AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJn5JW1cPKxBbZjT73DVR7M1hDwre2yMcvJ1QimGc2E7qQx4joPFQ+Olr
wZieaEpBCTWZcl+3w+oB/cmGzdvRE/AthDwVbSoOlkY83tr8F6BK07OkNUZXuOBz
gBxR2u+9hWWW8RW+8gGsBAX8OWQsj+Vwp8Z68E+pDPWc0Ukj5ACZgiLnHI1EJA3d
T8LZehDYlPiJrEVCn3ZC66MBtQAMDk19qJjJ7mz6MbroMh7L9Ru8nOkAygcBJM7N
94zIjh5IKNVywGCGPyy4H/x6HHjUbO8vnLzt5n4RjcYHLtf0ryz5mIXLG6QnnIzq
wc3xyQ8QFHMrr/2L2dl5n0IRZTJ09g==
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:49:02 2025 by rpki-client