Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34c7615c-9834-3c3c-a050-2a610ba4aa0e.roa
File: 34c7615c-9834-3c3c-a050-2a610ba4aa0e.roa (raw, json)
Hash identifier: v45tjQxaatt8GVsOg35ynuk9XATAsQAkl78JMjpNzTc=
Subject key identifier: 58:62:2B:2C:27:7D:90:8D:3E:9F:D7:54:B9:2D:C6:21:28:C0:9C:0C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CEF21F0DDD603C808FBF7D980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34c7615c-9834-3c3c-a050-2a610ba4aa0e.roa
Signing time: Tue 15 Feb 2022 05:00:00 +0000
ROA not before: Tue 15 Feb 2022 05:00:00 +0000
ROA not after: Tue 22 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 136.20.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:ef:21:f0:dd:d6:03:c8:08:fb:f7:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 15 05:00:00 2022 GMT
Not After : Mar 22 04:00:00 2022 GMT
Subject: CN=c0959f03-cf7c-474f-9ec7-6a161a90f8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8b:34:fd:e3:d7:b4:c2:b4:94:56:06:d7:16:
16:cf:95:eb:15:cd:14:56:74:2f:0a:78:ef:4c:d7:
f6:bc:32:58:ab:dc:b2:7f:b6:79:27:77:79:49:05:
e0:d5:21:8f:de:7d:7f:85:7b:d8:49:41:15:39:60:
c2:14:d8:68:8b:a9:1c:ec:93:09:1a:cf:0b:a0:45:
65:d1:fc:9c:0b:4f:5d:2f:6a:9a:07:97:d1:39:0c:
b2:7a:de:8a:e6:87:d7:f9:e0:a3:33:11:3d:c8:1f:
8d:b0:b1:5e:1e:66:38:0e:ea:b1:bd:53:1b:50:86:
cc:aa:73:fe:d8:04:7c:56:0d:09:de:a7:1f:93:72:
7f:42:3c:98:84:7e:55:43:ae:99:3f:05:76:dd:ba:
de:12:32:dd:42:4c:69:b6:a8:0e:21:1c:1b:70:69:
33:03:10:c4:5a:3c:e4:b7:95:0f:34:82:83:34:77:
a0:21:75:1f:b4:77:94:77:07:5d:b6:8b:dd:97:aa:
b6:d1:c3:6e:a7:54:9b:bd:38:40:61:46:aa:ba:ea:
23:db:ff:e4:cc:d1:f3:3b:f3:77:bc:4d:01:d6:9b:
84:37:f7:23:a3:03:0e:1f:e0:7b:e3:54:b7:78:16:
21:4e:8d:68:89:81:1d:37:27:92:99:46:38:ac:d7:
8a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:62:2B:2C:27:7D:90:8D:3E:9F:D7:54:B9:2D:C6:21:28:C0:9C:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34c7615c-9834-3c3c-a050-2a610ba4aa0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.20.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:a6:db:62:f2:37:93:57:19:2a:71:04:84:d7:13:0b:c3:2b:
e0:fc:85:ef:cf:cb:6c:9c:e6:91:8a:10:6d:e6:bb:7f:92:71:
e5:b9:c3:c9:af:44:14:a1:6f:d0:4b:fe:e6:9c:ca:c4:3b:bf:
ea:a9:5b:92:ad:8f:3a:b3:98:6b:27:d8:7c:1b:5f:fa:3b:c5:
45:41:a9:70:0a:6a:5d:e9:02:28:2e:a3:da:aa:3f:a4:9d:f0:
76:71:41:87:96:14:0b:ed:cf:6c:15:79:a4:a0:85:3a:f1:aa:
e8:87:83:c4:f6:91:7c:20:5e:7c:71:ff:23:4c:12:03:c3:6a:
67:77:f3:37:1e:60:82:19:ad:08:3a:4e:99:d2:a8:ac:48:d5:
05:0d:89:58:73:25:21:8b:ae:0a:ba:b1:c8:59:84:08:d8:c7:
a0:7a:02:e9:e0:88:42:04:e7:cf:ca:c5:c0:e3:e3:1c:ec:81:
3b:e7:b0:4d:32:1c:25:42:40:5f:0e:57:3e:c7:b9:d7:2e:a5:
9c:df:ec:ef:c4:81:56:fc:1e:e3:25:ce:b7:20:77:b3:1a:98:
bf:9b:82:e1:ba:91:4e:a5:75:b7:88:51:fa:b5:78:1d:64:23:
75:fc:48:fa:3a:bf:3a:a2:de:3d:e9:b5:a3:7a:54:1c:19:40:
12:bb:7e:7c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzvIfDd1gPICPv32YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIxNTA1MDAwMFoXDTIyMDMyMjA0MDAwMFowLzEtMCsGA1UEAxMk
YzA5NTlmMDMtY2Y3Yy00NzRmLTllYzctNmExNjFhOTBmOGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4s0/ePXtMK0lFYG1xYWz5XrFc0UVnQvCnjv
TNf2vDJYq9yyf7Z5J3d5SQXg1SGP3n1/hXvYSUEVOWDCFNhoi6kc7JMJGs8LoEVl
0fycC09dL2qaB5fROQyyet6K5ofX+eCjMxE9yB+NsLFeHmY4DuqxvVMbUIbMqnP+
2AR8Vg0J3qcfk3J/QjyYhH5VQ66ZPwV23breEjLdQkxptqgOIRwbcGkzAxDEWjzk
t5UPNIKDNHegIXUftHeUdwddtovdl6q20cNup1SbvThAYUaquuoj2//kzNHzO/N3
vE0B1puEN/cjowMOH+B741S3eBYhTo1oiYEdNyeSmUY4rNeK9QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFhiKywnfZCNPp/XVLktxiEowJwMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMzRjNzYxNWMtOTgzNC0z
YzNjLWEwNTAtMmE2MTBiYTRhYTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBiBQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKabbYvI3k1cZKnEEhNcTC8Mr4PyF78/LbJzmkYoQbea7f5Jx5bnDya9E
FKFv0Ev+5pzKxDu/6qlbkq2POrOYayfYfBtf+jvFRUGpcApqXekCKC6j2qo/pJ3w
dnFBh5YUC+3PbBV5pKCFOvGq6IeDxPaRfCBefHH/I0wSA8NqZ3fzNx5gghmtCDpO
mdKorEjVBQ2JWHMlIYuuCrqxyFmECNjHoHoC6eCIQgTnz8rFwOPjHOyBO+ewTTIc
JUJAXw5XPse51y6lnN/s78SBVvwe4yXOtyB3sxqYv5uC4bqRTqV1t4hR+rV4HWQj
dfxI+jq/OqLePem1o3pUHBlAErt+fA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:40:55 2025 by rpki-client