Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/282eec79-93a2-3fd8-a00d-9162dfa5588f.roa
File: 282eec79-93a2-3fd8-a00d-9162dfa5588f.roa (raw, json)
Hash identifier: Kq6ZmWJc0q+IwK17L8MOjF3atzijaQ4RhQLix4/Dh6k=
Subject key identifier: C3:CB:50:4C:01:FD:0E:EA:7C:4F:BA:7F:D4:29:15:B2:B4:65:9C:D9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C8FE4B9D9E848F243FFB5F690
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/282eec79-93a2-3fd8-a00d-9162dfa5588f.roa
Signing time: Tue 11 Jan 2022 05:00:00 +0000
ROA not before: Tue 11 Jan 2022 05:00:00 +0000
ROA not after: Tue 15 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 152.155.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:8f:e4:b9:d9:e8:48:f2:43:ff:b5:f6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 11 05:00:00 2022 GMT
Not After : Feb 15 05:00:00 2022 GMT
Subject: CN=5d7ef853-1dbf-4723-ab87-1040816cabbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:06:74:5a:fa:c1:e0:7b:33:36:9e:3d:18:
f3:0b:ad:49:06:b0:3b:08:79:35:ed:2e:8b:14:3c:
21:66:3f:af:13:bd:48:3f:d9:a5:e3:74:e4:87:2b:
9f:0e:27:2a:76:db:f1:a1:d0:46:aa:d9:6b:e2:c6:
01:40:71:24:1b:dc:e4:3c:0e:65:72:b8:da:6b:50:
ef:10:53:e7:3e:79:c3:64:4a:64:42:3a:48:8d:7b:
6e:63:4c:1c:32:26:3e:26:ea:7d:be:d1:a2:64:d7:
62:4a:16:2d:61:6e:91:3c:6a:9f:9f:22:19:d9:46:
47:e4:38:c1:bd:52:26:eb:75:ff:d8:be:41:e4:23:
b9:99:9a:44:37:f8:7f:a6:3c:a6:67:03:d7:fe:63:
14:8a:ab:da:bb:1f:30:89:47:a2:0d:ff:df:16:89:
45:26:0b:85:64:e8:af:47:44:4c:de:5f:ec:b5:3d:
f0:18:3e:67:21:b6:49:ca:ad:1a:cc:19:c1:3f:f7:
97:6b:20:c3:b4:fc:1c:a2:06:0d:f0:a4:91:44:32:
81:e2:e2:08:e0:85:23:74:c3:38:0f:b3:fa:2a:d2:
bc:65:62:47:00:60:2c:52:cb:95:cb:21:51:4a:88:
54:e4:57:3a:ce:d5:b8:7a:c6:6e:ff:4c:98:d5:46:
af:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CB:50:4C:01:FD:0E:EA:7C:4F:BA:7F:D4:29:15:B2:B4:65:9C:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/282eec79-93a2-3fd8-a00d-9162dfa5588f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
152.155.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:23:4e:9c:16:df:ee:6b:56:d4:88:95:ed:64:b1:b5:42:56:
8a:f2:2a:6a:65:2f:18:40:68:5a:7d:51:a5:a8:2e:9a:f4:d7:
96:07:03:52:45:a9:cf:c5:27:b3:bc:bb:b1:27:74:0e:c9:1d:
35:43:95:8c:28:cf:3d:82:c4:ce:b2:ae:61:79:92:33:09:bf:
a3:72:26:2d:dc:a0:56:68:53:0d:63:c8:62:e1:0d:7d:b2:0c:
97:f0:d2:f5:e9:b8:30:30:32:7a:5d:ae:8d:33:3e:07:6d:79:
3a:ef:d9:0e:b5:da:3e:14:37:78:08:0e:75:6a:b1:6b:7d:45:
38:a3:eb:ce:21:32:bc:9f:06:e8:fa:6b:94:de:c2:32:38:6f:
84:58:1e:5a:d5:fd:0a:c4:f7:b7:66:6e:25:c3:e8:e8:ae:e0:
2e:fa:7f:2c:f2:70:e7:4e:2b:da:18:97:24:98:d5:6f:97:1e:
87:f6:ba:bb:6c:8e:84:a6:6d:0b:54:96:1a:e6:72:bd:3a:b9:
bc:8f:e0:db:5c:63:8e:3e:e4:91:dd:26:54:3a:30:4a:06:e4:
aa:70:5e:8c:da:43:4c:11:59:df:12:ba:77:a9:59:94:d2:8b:
58:66:37:0e:63:df:8a:d7:b9:30:4b:0a:6b:e6:28:9e:33:ff:
69:0f:84:16
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDyP5LnZ6EjyQ/+19pAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDExMTA1MDAwMFoXDTIyMDIxNTA1MDAwMFowLzEtMCsGA1UEAxMk
NWQ3ZWY4NTMtMWRiZi00NzIzLWFiODctMTA0MDgxNmNhYmJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC4GdFr6weB7MzaePRjzC61JBrA7CHk17S6L
FDwhZj+vE71IP9ml43TkhyufDicqdtvxodBGqtlr4sYBQHEkG9zkPA5lcrjaa1Dv
EFPnPnnDZEpkQjpIjXtuY0wcMiY+Jup9vtGiZNdiShYtYW6RPGqfnyIZ2UZH5DjB
vVIm63X/2L5B5CO5mZpEN/h/pjymZwPX/mMUiqvaux8wiUeiDf/fFolFJguFZOiv
R0RM3l/stT3wGD5nIbZJyq0azBnBP/eXayDDtPwcogYN8KSRRDKB4uII4IUjdMM4
D7P6KtK8ZWJHAGAsUsuVyyFRSohU5Fc6ztW4esZu/0yY1UavhQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMPLUEwB/Q7qfE+6f9QpFbK0ZZzZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMjgyZWVjNzktOTNhMi0z
ZmQ4LWEwMGQtOTE2MmRmYTU1ODhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmJswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbCNOnBbf7mtW1IiV7WSxtUJWivIqamUvGEBoWn1RpagumvTXlgcDUkWp
z8Uns7y7sSd0DskdNUOVjCjPPYLEzrKuYXmSMwm/o3ImLdygVmhTDWPIYuENfbIM
l/DS9em4MDAyel2ujTM+B215Ou/ZDrXaPhQ3eAgOdWqxa31FOKPrziEyvJ8G6Ppr
lN7CMjhvhFgeWtX9CsT3t2ZuJcPo6K7gLvp/LPJw504r2hiXJJjVb5ceh/a6u2yO
hKZtC1SWGuZyvTq5vI/g21xjjj7kkd0mVDowSgbkqnBejNpDTBFZ3xK6d6lZlNKL
WGY3DmPfite5MEsKa+YonjP/aQ+EFg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:31:53 2025 by rpki-client