Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ba81ba8-df8f-376a-adc5-c6dd2b80edc7.roa
File: 4ba81ba8-df8f-376a-adc5-c6dd2b80edc7.roa (raw, json)
Hash identifier: yfxlZAgJDJY2LnShg2TP+1WPHDhJKj7lEdBPpQ+nV2s=
Subject key identifier: 5E:C1:E9:AB:33:EC:18:D6:B0:24:24:54:3E:EA:82:68:C9:A8:9B:5F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E4E748533C8750B5C2181D880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ba81ba8-df8f-376a-adc5-c6dd2b80edc7.roa
Signing time: Sun 19 Jun 2022 12:00:00 +0000
ROA not before: Sun 19 Jun 2022 12:00:00 +0000
ROA not after: Mon 25 Jul 2022 04:00:00 +0000
asID: 7224
IP address blocks: 3.33.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:4e:74:85:33:c8:75:0b:5c:21:81:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 19 12:00:00 2022 GMT
Not After : Jul 25 04:00:00 2022 GMT
Subject: CN=cf4e8760-7da3-4327-a8fa-c665808be8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4c:68:dc:d7:4b:8a:aa:d0:15:a3:19:bf:39:
64:54:44:4c:84:17:b5:3e:42:96:63:1d:9e:77:b5:
a8:82:48:2b:69:96:c5:cc:8e:8f:4a:e0:68:0a:85:
a2:b6:2d:0a:82:33:82:e8:0e:cb:26:6a:fe:af:71:
99:f4:f3:a5:a6:cc:ca:f0:c1:fb:df:4a:4b:21:ba:
81:4c:d9:5b:50:61:c1:0e:64:13:bd:0f:a3:7a:ce:
77:a2:e6:0a:b9:19:7e:4b:71:75:f8:80:a7:27:fd:
02:7f:79:ae:b9:4b:27:06:5b:81:73:83:ca:bd:64:
0f:9d:1f:c4:70:cd:11:10:b8:bd:56:5c:1d:a3:cd:
54:46:d5:8a:25:ed:1e:92:8d:58:ef:26:d7:55:85:
80:d9:58:6a:ba:2f:cf:4c:e5:35:9a:c3:bd:2d:02:
63:e4:b9:27:72:29:9a:04:87:b6:04:1b:42:9a:b1:
84:02:59:05:d2:06:a6:27:df:b2:ae:68:5d:ca:7a:
d5:0f:f0:9a:7e:a3:5b:04:e1:7f:12:5c:5a:75:b9:
70:58:21:89:36:37:f8:e3:65:de:65:46:e5:84:da:
8a:e5:bf:4c:c4:12:d0:27:f9:56:a5:e2:4e:55:67:
43:0e:ff:f9:85:9b:b6:e1:fa:85:b6:cd:58:62:e2:
55:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C1:E9:AB:33:EC:18:D6:B0:24:24:54:3E:EA:82:68:C9:A8:9B:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ba81ba8-df8f-376a-adc5-c6dd2b80edc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.33.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:31:f8:9c:be:3f:33:ee:75:0a:bc:bf:2e:5f:bd:6b:d7:c6:
b1:af:7d:11:0e:a5:9e:a3:13:eb:11:fe:64:7c:e1:24:7a:c9:
32:3a:92:7b:d7:55:45:c0:3e:bc:d3:cd:b6:45:ce:3d:02:71:
9d:75:ec:b0:d2:52:8d:54:27:e1:6e:35:d6:7a:ea:ec:e9:0e:
8b:9f:0c:e7:35:4c:9a:d4:c7:1d:dd:be:68:5b:78:f6:84:d0:
94:4a:21:84:b2:f4:7f:3b:57:9a:a6:85:d8:1c:52:3b:08:26:
4f:dc:9a:e5:c8:47:ea:b3:a0:ed:a5:7a:44:2c:f1:82:84:85:
2b:17:99:fe:de:f5:13:f9:17:ab:a0:b2:64:e4:b7:a0:c8:bb:
2a:92:b4:87:94:71:af:21:e7:8c:13:be:25:ae:9a:c0:fe:2c:
80:bb:a8:76:d1:57:0c:a0:93:6c:11:9e:f2:93:21:a6:68:01:
13:77:da:c4:95:ae:7b:a9:5c:fe:07:2e:95:7f:10:66:ca:da:
5d:d4:6b:24:c9:46:f0:f9:af:1a:8b:3d:d0:c8:6c:80:2d:60:
a7:d2:3a:e8:4f:bb:36:10:3e:bb:33:ed:15:12:c5:88:12:cc:
1a:05:5f:d5:33:7b:6e:95:25:71:bd:9e:e3:6b:93:13:36:e6:
59:07:5c:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD5OdIUzyHULXCGB2IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYxOTEyMDAwMFoXDTIyMDcyNTA0MDAwMFowLzEtMCsGA1UEAxMk
Y2Y0ZTg3NjAtN2RhMy00MzI3LWE4ZmEtYzY2NTgwOGJlOGEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0xo3NdLiqrQFaMZvzlkVERMhBe1PkKWYx2e
d7WogkgraZbFzI6PSuBoCoWiti0KgjOC6A7LJmr+r3GZ9POlpszK8MH730pLIbqB
TNlbUGHBDmQTvQ+jes53ouYKuRl+S3F1+ICnJ/0Cf3muuUsnBluBc4PKvWQPnR/E
cM0RELi9Vlwdo81URtWKJe0eko1Y7ybXVYWA2Vhqui/PTOU1msO9LQJj5Lkncima
BIe2BBtCmrGEAlkF0gamJ9+yrmhdynrVD/CafqNbBOF/ElxadblwWCGJNjf442Xe
ZUblhNqK5b9MxBLQJ/lWpeJOVWdDDv/5hZu24fqFts1YYuJVeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF7B6asz7BjWsCQkVD7qgmjJqJtfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNGJhODFiYTgtZGY4Zi0z
NzZhLWFkYzUtYzZkZDJiODBlZGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEAyEwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEQx+Jy+PzPudQq8vy5fvWvXxrGvfREOpZ6jE+sR/mR84SR6yTI6knvX
VUXAPrzTzbZFzj0CcZ117LDSUo1UJ+FuNdZ66uzpDoufDOc1TJrUxx3dvmhbePaE
0JRKIYSy9H87V5qmhdgcUjsIJk/cmuXIR+qzoO2lekQs8YKEhSsXmf7e9RP5F6ug
smTkt6DIuyqStIeUca8h54wTviWumsD+LIC7qHbRVwygk2wRnvKTIaZoARN32sSV
rnupXP4HLpV/EGbK2l3UayTJRvD5rxqLPdDIbIAtYKfSOuhPuzYQPrsz7RUSxYgS
zBoFX9Uze26VJXG9nuNrkxM25lkHXB4=
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:31:30 2025 by rpki-client