Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2478f1f5-262a-3b41-bd78-27016ac3dfbb.roa
File: 2478f1f5-262a-3b41-bd78-27016ac3dfbb.roa (raw, json)
Hash identifier: N689UgJMGiewCnjxXFBgpV2/WHHR+wDKmkK+fnmTe0M=
Subject key identifier: F0:49:D1:D7:41:A3:9E:40:24:91:29:2F:76:0F:11:E8:1C:DB:B3:A0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D5999048A4BA81C50E983AE80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2478f1f5-262a-3b41-bd78-27016ac3dfbb.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 146.78.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:99:04:8a:4b:a8:1c:50:e9:83:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=53dd6cf3-5356-4e7f-bd44-32a7a87a7f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d3:f6:9c:95:03:5c:4a:bd:4b:9d:9b:a8:6c:
e8:83:83:70:fb:ac:d9:d6:4f:8b:1c:85:f9:44:23:
4a:03:b8:1e:10:3d:d7:66:81:b0:88:5a:8f:f4:27:
9d:6b:17:0f:f4:ba:ca:f0:66:35:3e:20:34:a2:fc:
f8:b0:9b:54:58:32:98:25:1d:12:66:af:4f:67:b0:
ca:2d:25:5b:9d:e1:9e:9f:71:53:55:47:20:df:96:
12:c4:33:12:05:4a:c0:1e:68:83:d3:76:64:76:70:
1b:b7:4c:b3:71:7c:27:b0:65:61:5b:1c:ed:98:91:
34:28:f2:96:f6:0d:a6:fb:ab:88:7c:75:a8:c7:6c:
c8:e6:e5:ad:69:8a:b2:19:d6:6a:36:c6:fd:00:f2:
c3:c2:2d:40:73:b7:b7:ad:2d:b8:cd:63:3e:3d:a1:
63:2c:e7:4a:3f:30:be:41:f3:99:af:d6:fb:1f:b7:
d6:57:3c:04:39:d9:ce:8f:c4:38:44:ce:29:90:dd:
29:a8:63:b2:ae:59:1d:25:f7:64:6f:d6:32:86:e4:
01:5c:fb:8b:f8:dc:9c:6b:49:62:f3:91:82:48:46:
6d:07:f2:3c:63:3e:3b:95:dd:b2:7e:b8:b3:b5:36:
d2:e7:5a:82:8d:5e:55:da:6f:c9:06:72:83:2a:69:
40:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:49:D1:D7:41:A3:9E:40:24:91:29:2F:76:0F:11:E8:1C:DB:B3:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2478f1f5-262a-3b41-bd78-27016ac3dfbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
146.78.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:a4:0c:b2:03:31:7e:30:5c:4b:41:0c:97:15:4f:c3:84:61:
ff:d6:d7:bd:72:d5:70:a7:8f:4c:57:04:77:b1:13:50:9a:29:
14:5b:89:0b:46:bb:26:66:a3:11:c2:47:14:31:30:6d:85:ff:
cb:41:72:8e:e3:bc:2f:f4:50:df:19:cc:39:4e:92:e9:ee:9f:
25:d3:82:22:16:47:30:35:8e:b6:50:0d:21:d9:d0:9f:30:33:
92:d6:06:59:56:e1:37:7b:e7:b5:7d:b1:77:6b:af:d3:0b:ee:
85:30:0d:37:6e:0a:79:ce:0e:c5:05:33:a4:74:32:e4:8f:b4:
f8:3b:1b:a2:d5:0e:ce:8f:63:6a:a6:2b:ed:a1:09:73:c3:e3:
1e:80:2d:92:24:ea:fb:86:b9:16:f0:82:21:a1:fd:bd:bb:5c:
87:1e:6b:3e:73:1f:7e:26:54:c9:93:78:10:64:0b:42:15:c7:
06:a8:10:d8:b2:2d:71:35:c5:ab:bc:83:6e:1b:7a:fc:42:39:
87:bf:f3:65:6e:76:3d:08:6d:d1:da:1c:1b:b7:8d:43:0e:9e:
b0:cb:01:12:25:8f:7b:33:17:4f:44:36:86:53:27:02:c1:c8:
aa:0b:10:ad:18:98:0c:40:f0:b3:25:46:5d:0f:a4:cf:d7:1c:
7b:39:af:1d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1ZmQSKS6gcUOmDroAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMyNTA0MDAwMFoXDTIyMDQyOTA0MDAwMFowLzEtMCsGA1UEAxMk
NTNkZDZjZjMtNTM1Ni00ZTdmLWJkNDQtMzJhN2E4N2E3ZjQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitP2nJUDXEq9S52bqGzog4Nw+6zZ1k+LHIX5
RCNKA7geED3XZoGwiFqP9CedaxcP9LrK8GY1PiA0ovz4sJtUWDKYJR0SZq9PZ7DK
LSVbneGen3FTVUcg35YSxDMSBUrAHmiD03ZkdnAbt0yzcXwnsGVhWxztmJE0KPKW
9g2m+6uIfHWox2zI5uWtaYqyGdZqNsb9APLDwi1Ac7e3rS24zWM+PaFjLOdKPzC+
QfOZr9b7H7fWVzwEOdnOj8Q4RM4pkN0pqGOyrlkdJfdkb9YyhuQBXPuL+Nyca0li
85GCSEZtB/I8Yz47ld2yfriztTbS51qCjV5V2m/JBnKDKmlAywIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPBJ0ddBo55AJJEpL3YPEegc27OgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMjQ3OGYxZjUtMjYyYS0z
YjQxLWJkNzgtMjcwMTZhYzNkZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkk4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAoqQMsgMxfjBcS0EMlxVPw4Rh/9bXvXLVcKePTFcEd7ETUJopFFuJC0a7
JmajEcJHFDEwbYX/y0FyjuO8L/RQ3xnMOU6S6e6fJdOCIhZHMDWOtlANIdnQnzAz
ktYGWVbhN3vntX2xd2uv0wvuhTANN24Kec4OxQUzpHQy5I+0+DsbotUOzo9jaqYr
7aEJc8PjHoAtkiTq+4a5FvCCIaH9vbtchx5rPnMffiZUyZN4EGQLQhXHBqgQ2LIt
cTXFq7yDbht6/EI5h7/zZW52PQht0docG7eNQw6esMsBEiWPezMXT0Q2hlMnAsHI
qgsQrRiYDEDwsyVGXQ+kz9ccezmvHQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:52:47 2025 by rpki-client