Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/498da0c6-2be7-38b6-9c54-41a8f86ea01f.roa
File: 498da0c6-2be7-38b6-9c54-41a8f86ea01f.roa (raw, json)
Hash identifier: Yi5E4iYykpRGQeJBGHfdeVgGfCY5ZbOSkI9mgtkbYoM=
Subject key identifier: 5E:49:98:25:C5:8D:08:C9:C6:79:C5:B9:FB:A5:07:77:FA:28:78:78
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E209FA4BE76D309D36F5A0280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/498da0c6-2be7-38b6-9c54-41a8f86ea01f.roa
Signing time: Fri 03 Jun 2022 12:00:00 +0000
ROA not before: Fri 03 Jun 2022 12:00:00 +0000
ROA not after: Sat 09 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.192.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:20:9f:a4:be:76:d3:09:d3:6f:5a:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 3 12:00:00 2022 GMT
Not After : Jul 9 04:00:00 2022 GMT
Subject: CN=136e13a4-016a-4806-ad13-9184bb9b4ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6c:07:4c:c7:08:e7:78:cd:4a:41:28:24:af:
cb:28:50:48:dc:0f:a8:4a:6e:47:51:30:73:f6:91:
f2:94:96:34:df:5d:fd:b9:b2:83:2e:34:5f:31:a1:
ca:af:44:6a:83:65:8b:4d:35:cc:ae:ac:3d:81:98:
7c:f5:fd:be:ce:e0:c7:e5:4a:cd:4e:6a:df:d5:60:
27:96:0c:66:a0:7b:77:eb:e8:98:84:5f:4e:73:31:
12:63:c1:cc:15:39:bf:1b:1a:f1:f8:82:16:ac:32:
44:31:10:6d:b1:14:9f:12:ec:76:6f:50:5d:2e:14:
3c:71:d7:e6:5a:0b:6a:e1:c8:04:85:bd:c0:f9:d2:
c6:01:41:28:b8:76:ba:f3:fa:0a:05:2f:ce:98:58:
01:ab:d5:ae:31:5c:6a:c6:49:dc:dd:68:b7:4b:fb:
b8:2a:11:11:34:11:68:99:69:3e:9d:e1:25:32:fe:
49:3e:66:13:16:e8:a2:a5:a8:29:5f:fb:b4:e2:e8:
2a:a8:d0:57:66:3f:4a:32:51:81:00:f7:46:bc:dc:
41:98:64:07:c9:66:27:c4:5c:ae:23:0a:be:dc:1f:
49:6f:91:90:54:dc:e0:95:19:35:82:00:c0:df:ed:
51:71:c1:6b:a4:d1:ab:47:57:17:a0:ae:32:88:25:
d4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:49:98:25:C5:8D:08:C9:C6:79:C5:B9:FB:A5:07:77:FA:28:78:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/498da0c6-2be7-38b6-9c54-41a8f86ea01f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.192.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:82:d9:02:d5:e7:73:e3:63:75:3c:87:87:cf:75:72:f2:74:
9c:a1:54:03:3e:d0:f6:4c:55:b7:36:1f:f1:d9:2b:4b:46:70:
09:7f:f9:04:82:36:f0:6f:1c:e2:95:cf:fa:eb:1c:7f:e8:fd:
16:c9:5e:e2:e5:af:b1:b7:2f:40:87:21:f6:56:ea:84:05:dc:
77:b9:7f:75:58:6e:4e:01:e5:c2:ed:e4:a4:ef:ae:05:0b:6c:
2e:2e:64:db:d3:bf:be:8c:10:f6:bb:bb:8f:12:ae:30:67:92:
4e:9c:f7:91:3a:d7:1e:d5:7e:e7:38:ab:97:f4:56:89:84:29:
75:8d:5f:79:76:d6:29:48:4e:3d:a8:ea:5d:d4:75:f9:c5:81:
d1:a9:a0:b9:6a:89:da:3c:a7:50:e8:18:80:38:be:1d:76:50:
6d:51:01:99:63:10:e7:e5:d6:70:f5:01:2a:7a:bf:b8:93:b2:
83:fd:65:c5:c4:77:a6:fb:e7:86:62:50:08:bd:7a:64:08:f6:
28:76:9e:a7:76:68:2a:c8:73:0b:a1:11:b4:d6:8b:27:74:df:
ec:43:1e:eb:4e:48:91:c2:49:87:de:60:c2:b0:2e:5c:49:27:
e2:9b:f6:30:9e:30:16:f1:93:66:41:ff:67:68:e6:98:f3:8c:
a9:63:57:7a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4gn6S+dtMJ029aAoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYwMzEyMDAwMFoXDTIyMDcwOTA0MDAwMFowLzEtMCsGA1UEAxMk
MTM2ZTEzYTQtMDE2YS00ODA2LWFkMTMtOTE4NGJiOWI0ZmZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWwHTMcI53jNSkEoJK/LKFBI3A+oSm5HUTBz
9pHylJY03139ubKDLjRfMaHKr0Rqg2WLTTXMrqw9gZh89f2+zuDH5UrNTmrf1WAn
lgxmoHt36+iYhF9OczESY8HMFTm/Gxrx+IIWrDJEMRBtsRSfEux2b1BdLhQ8cdfm
Wgtq4cgEhb3A+dLGAUEouHa68/oKBS/OmFgBq9WuMVxqxknc3Wi3S/u4KhERNBFo
mWk+neElMv5JPmYTFuiipagpX/u04ugqqNBXZj9KMlGBAPdGvNxBmGQHyWYnxFyu
Iwq+3B9Jb5GQVNzglRk1ggDA3+1RccFrpNGrR1cXoK4yiCXU9QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFF5JmCXFjQjJxnnFufulB3f6KHh4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNDk4ZGEwYzYtMmJlNy0z
OGI2LTljNTQtNDFhOGY4NmVhMDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMENsAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEABYLZAtXnc+NjdTyHh891cvJ0nKFUAz7Q9kxVtzYf8dkrS0ZwCX/5BII2
8G8c4pXP+uscf+j9Fsle4uWvsbcvQIch9lbqhAXcd7l/dVhuTgHlwu3kpO+uBQts
Li5k29O/vowQ9ru7jxKuMGeSTpz3kTrXHtV+5zirl/RWiYQpdY1feXbWKUhOPajq
XdR1+cWB0amguWqJ2jynUOgYgDi+HXZQbVEBmWMQ5+XWcPUBKnq/uJOyg/1lxcR3
pvvnhmJQCL16ZAj2KHaep3ZoKshzC6ERtNaLJ3Tf7EMe605IkcJJh95gwrAuXEkn
4pv2MJ4wFvGTZkH/Z2jmmPOMqWNXeg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 11:54:24 2025 by rpki-client