Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/580d2218-ffc9-3af6-9a7a-7c4de084b5d8.roa
File: 580d2218-ffc9-3af6-9a7a-7c4de084b5d8.roa (raw, json)
Hash identifier: 6k3SgGmCyTqGt0cRPu76aQ7rE/kNbw1xSSXK2W2S410=
Subject key identifier: BD:73:42:EA:5A:A6:D8:04:02:A5:3F:F4:8A:72:AE:B8:27:F0:B8:A3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B9A96BA3FB1C3A18012FAC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/580d2218-ffc9-3af6-9a7a-7c4de084b5d8.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 34.192.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:9a:96:ba:3f:b1:c3:a1:80:12:fa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=219009f4-c714-45ba-bbeb-db9df31dffce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:01:84:04:a3:b6:eb:cb:3b:26:c3:b6:30:
a5:cd:88:9a:8a:4a:13:34:a0:d1:00:cc:20:fd:f0:
a8:7c:19:46:0c:c1:ef:58:28:6c:89:05:54:a6:1c:
21:78:3f:30:08:31:d5:64:d1:87:36:16:a7:e1:35:
59:25:ec:db:ac:05:3b:25:9b:ba:c8:95:1f:b4:d5:
a0:03:8f:5d:c4:9a:0a:16:b0:3d:3d:18:34:08:d6:
0d:72:d6:4f:ad:e7:2b:1b:a5:70:e7:e9:05:b6:64:
7e:f9:4b:b7:ea:be:4c:4e:51:ad:42:6a:06:5b:79:
ca:f6:53:07:ae:38:37:95:8c:cd:b8:4d:d8:2e:42:
62:57:ac:1b:75:07:07:01:8c:35:c8:9a:08:02:5c:
bd:fb:ba:b1:09:62:9f:7f:57:7e:89:69:98:70:1f:
48:2a:e3:1a:82:b8:16:ac:aa:f1:4c:14:8d:c3:37:
c0:3a:2d:95:6f:75:64:42:d8:23:d5:ea:7c:69:02:
d2:d6:97:85:b8:44:14:89:e4:08:01:c0:41:85:c5:
8c:fa:80:5e:6a:40:5e:cd:97:e5:25:40:3c:99:6f:
40:c9:09:e4:53:dc:ba:ac:6d:d6:02:4d:f5:97:e3:
1a:ce:3f:ff:bd:85:24:72:50:fc:9b:8c:ac:b9:e3:
de:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:73:42:EA:5A:A6:D8:04:02:A5:3F:F4:8A:72:AE:B8:27:F0:B8:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/580d2218-ffc9-3af6-9a7a-7c4de084b5d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
34.192.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:22:a6:b6:83:18:d9:7c:12:aa:06:f0:4c:eb:ad:e2:1b:cc:
73:6d:e4:5e:64:ae:1d:3b:22:eb:d1:60:89:8d:b6:b4:f4:26:
a4:6d:8a:b5:7d:5f:a5:7d:cb:6c:5c:9b:5d:c1:62:c8:12:15:
14:ec:92:03:dc:03:99:30:83:04:ca:9e:d2:14:ca:ca:8e:dc:
6b:90:dc:89:b6:3c:98:ba:7f:e6:b9:1a:a7:be:4f:f5:19:eb:
c5:80:fa:50:f6:f1:b0:bd:14:8c:2a:c5:a8:21:18:f5:f5:e8:
56:6b:56:78:3b:e8:71:fc:9a:56:9c:43:6c:03:90:7f:73:41:
bf:7a:82:56:6b:58:bf:e0:38:bd:b7:dc:5f:1b:fc:02:7e:26:
1a:b3:14:d3:57:d8:f9:33:98:19:96:0a:4c:58:76:b0:63:80:
9a:e6:07:19:b0:07:26:0c:38:14:7d:57:ac:18:0d:ea:94:db:
7b:ba:d8:9e:06:40:75:a6:fb:ed:2b:b3:a7:ba:d4:9e:c8:55:
af:6f:bd:28:e5:0d:46:4d:98:b0:3b:eb:9a:9d:e6:be:21:d1:
53:c0:f2:47:24:f2:a1:79:53:51:42:16:2b:bc:09:09:62:84:
6e:11:82:8f:ef:26:6f:88:b1:3d:8c:e1:f1:4a:20:f1:db:3d:
5a:9a:38:e5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0Lmpa6P7HDoYAS+sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIyNTA1MDAwMFoXDTIyMDQwMTA0MDAwMFowLzEtMCsGA1UEAxMk
MjE5MDA5ZjQtYzcxNC00NWJhLWJiZWItZGI5ZGYzMWRmZmNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0cBhASjtuvLOybDtjClzYiaikoTNKDRAMwg
/fCofBlGDMHvWChsiQVUphwheD8wCDHVZNGHNhan4TVZJezbrAU7JZu6yJUftNWg
A49dxJoKFrA9PRg0CNYNctZPrecrG6Vw5+kFtmR++Uu36r5MTlGtQmoGW3nK9lMH
rjg3lYzNuE3YLkJiV6wbdQcHAYw1yJoIAly9+7qxCWKff1d+iWmYcB9IKuMagrgW
rKrxTBSNwzfAOi2Vb3VkQtgj1ep8aQLS1peFuEQUieQIAcBBhcWM+oBeakBezZfl
JUA8mW9AyQnkU9y6rG3WAk31l+Mazj//vYUkclD8m4ysuePeBwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFL1zQupaptgEAqU/9Ipyrrgn8LijMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNTgwZDIyMTgtZmZjOS0z
YWY2LTlhN2EtN2M0ZGUwODRiNWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMGIsAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmiKmtoMY2XwSqgbwTOut4hvMc23kXmSuHTsi69FgiY22tPQmpG2KtX1f
pX3LbFybXcFiyBIVFOySA9wDmTCDBMqe0hTKyo7ca5DcibY8mLp/5rkap75P9Rnr
xYD6UPbxsL0UjCrFqCEY9fXoVmtWeDvocfyaVpxDbAOQf3NBv3qCVmtYv+A4vbfc
Xxv8An4mGrMU01fY+TOYGZYKTFh2sGOAmuYHGbAHJgw4FH1XrBgN6pTbe7rYngZA
dab77Suzp7rUnshVr2+9KOUNRk2YsDvrmp3mviHRU8DyRyTyoXlTUUIWK7wJCWKE
bhGCj+8mb4ixPYzh8Uog8ds9Wpo45Q==
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:07:27 2025 by rpki-client