Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4b91c7d6-6878-3ae6-be60-0c0a5cf3409d.roa
File: 4b91c7d6-6878-3ae6-be60-0c0a5cf3409d.roa (raw, json)
Hash identifier: rO5gsom4oiF4o3cUrRDx9cSd5N9E88W8Yy9cT2QxpQ8=
Subject key identifier: E8:1E:63:CF:88:02:EF:74:C5:94:54:C8:CB:FD:F4:1A:FB:BE:18:0C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D80F9112D7A6706A21BA37E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4b91c7d6-6878-3ae6-be60-0c0a5cf3409d.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 47.255.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:f9:11:2d:7a:67:06:a2:1b:a3:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=e8b89136-4f86-425f-be87-f2c1507cdcb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:12:60:0b:ec:9e:8e:34:73:8c:4a:5f:b9:
7f:95:04:b1:f7:ed:48:49:91:ae:2f:c0:a9:6b:58:
b9:7c:7f:31:97:6d:83:94:a4:5e:b7:55:16:fc:f7:
3d:1f:4a:72:d5:16:29:24:7e:66:ce:1e:80:83:39:
05:fe:c0:cc:b2:58:0a:2f:4f:bb:2e:c3:2d:e4:ff:
a1:b9:d7:56:c5:8e:52:01:35:2c:e3:c7:71:32:87:
e1:42:eb:16:80:9b:ff:02:fc:a6:6f:4b:c0:fa:a2:
dc:f9:7d:d5:ad:6a:6d:92:85:be:93:b1:c1:e8:75:
6b:7b:96:66:d7:c0:f3:e1:66:f8:d0:be:4e:61:d8:
74:75:9f:ce:f0:ad:e2:f6:f1:f0:7a:3a:b2:bc:a9:
2d:0b:33:71:60:74:48:b4:cf:45:32:1b:ef:f1:c3:
83:c8:c2:8f:75:7b:31:ad:75:35:5f:24:4a:93:f6:
6d:27:eb:d7:41:00:85:f1:cd:18:b8:e3:7a:23:d7:
3c:f2:1d:39:d7:14:87:bb:28:a5:7c:29:53:69:61:
2b:cb:c1:9e:21:84:34:70:c2:77:b7:14:65:fe:35:
98:a1:8e:77:21:fd:10:6b:76:98:29:42:96:4c:f9:
85:db:55:7c:22:30:38:76:f1:3e:1d:05:7d:d7:45:
a0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1E:63:CF:88:02:EF:74:C5:94:54:C8:CB:FD:F4:1A:FB:BE:18:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4b91c7d6-6878-3ae6-be60-0c0a5cf3409d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
47.255.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:08:20:4f:63:a4:65:8c:a1:86:53:ec:a1:9a:19:5f:56:3e:
a7:12:6f:91:3e:a5:95:de:cb:86:cd:25:38:18:c2:bf:b8:0d:
73:ab:65:d2:c5:dc:69:db:ab:a5:15:46:a2:b5:17:a3:67:88:
34:6b:b0:67:cc:f2:ba:66:ad:01:36:0b:ca:88:e5:ca:f8:00:
79:22:77:46:84:1b:fc:c9:01:74:36:02:e1:dc:43:d7:3a:1a:
cc:61:fb:83:aa:dd:7f:6a:33:ff:17:1f:c8:0b:8e:d5:0b:1c:
7a:e0:75:64:8f:79:b9:5f:7f:a5:e3:4e:eb:cc:27:1d:ab:86:
41:05:ba:c4:6b:93:57:5d:c5:b0:f7:61:03:b9:33:c4:00:06:
68:cb:45:bd:b1:8e:13:c0:37:66:ba:a4:24:ba:08:fd:08:fc:
4b:0f:a2:0b:0b:46:db:e7:a0:2a:3b:2c:05:c2:a8:b7:52:55:
f5:53:93:bf:31:fa:96:70:62:38:f0:3e:33:09:3b:13:c4:2e:
a8:e3:19:fa:e5:0f:19:9e:7c:df:92:6b:6b:3c:8a:b2:80:50:
0b:29:2f:9b:2c:9f:a5:0b:c4:65:ec:9e:bb:b5:a9:4a:5e:c0:
fb:35:ad:be:d6:bc:e2:31:99:13:92:b7:7a:14:59:e6:b0:36:
19:57:4d:1f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2A+REtemcGohujfgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQwODA0MDAwMFoXDTIyMDUxMzA0MDAwMFowLzEtMCsGA1UEAxMk
ZThiODkxMzYtNGY4Ni00MjVmLWJlODctZjJjMTUwN2NkY2I4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY0SYAvsno40c4xKX7l/lQSx9+1ISZGuL8Cp
a1i5fH8xl22DlKRet1UW/Pc9H0py1RYpJH5mzh6AgzkF/sDMslgKL0+7LsMt5P+h
uddWxY5SATUs48dxMofhQusWgJv/Avymb0vA+qLc+X3VrWptkoW+k7HB6HVre5Zm
18Dz4Wb40L5OYdh0dZ/O8K3i9vHwejqyvKktCzNxYHRItM9FMhvv8cODyMKPdXsx
rXU1XyRKk/ZtJ+vXQQCF8c0YuON6I9c88h051xSHuyilfClTaWEry8GeIYQ0cMJ3
txRl/jWYoY53If0Qa3aYKUKWTPmF21V8IjA4dvE+HQV910WgzwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOgeY8+IAu90xZRUyMv99Br7vhgMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNGI5MWM3ZDYtNjg3OC0z
YWU2LWJlNjAtMGMwYTVjZjM0MDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAL/8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYAggT2OkZYyhhlPsoZoZX1Y+pxJvkT6lld7Lhs0lOBjCv7gNc6tl0sXc
adurpRVGorUXo2eINGuwZ8zyumatATYLyojlyvgAeSJ3RoQb/MkBdDYC4dxD1zoa
zGH7g6rdf2oz/xcfyAuO1QsceuB1ZI95uV9/peNO68wnHauGQQW6xGuTV13FsPdh
A7kzxAAGaMtFvbGOE8A3ZrqkJLoI/Qj8Sw+iCwtG2+egKjssBcKot1JV9VOTvzH6
lnBiOPA+Mwk7E8QuqOMZ+uUPGZ5835JrazyKsoBQCykvmyyfpQvEZeyeu7WpSl7A
+zWtvta84jGZE5K3ehRZ5rA2GVdNHw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:42:13 2025 by rpki-client