Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5d615861-52a0-3f19-819c-2b981f385510.roa
File: 5d615861-52a0-3f19-819c-2b981f385510.roa (raw, json)
Hash identifier: EARzWJd6G6kQm3m69Bd4LceIKWeneS0vRdmXUqocbCk=
Subject key identifier: 16:E7:9F:2E:46:73:01:24:07:1F:62:56:9E:21:20:32:2D:5A:47:8B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401D72095A206189C75BB875C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5d615861-52a0-3f19-819c-2b981f385510.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 129.47.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1d:72:09:5a:20:61:89:c7:5b:b8:75:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=010079aa-52f3-41fd-a6bf-6ac32b3fc667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4d:4a:4e:96:2d:fd:60:b8:88:1f:17:ed:46:
66:9f:b4:8b:fc:9e:59:59:cb:5d:77:3c:42:6a:95:
b9:5d:53:00:aa:d7:70:1a:6f:bb:df:f8:a4:80:24:
c8:54:95:b3:b9:4f:bb:3e:c7:e8:5e:92:80:3d:98:
1b:df:63:13:49:bf:2b:74:b5:0d:f8:b3:7d:e0:d1:
80:d1:72:04:e6:8d:ba:4a:85:18:cc:bf:ad:8a:dd:
9a:9e:cc:11:4a:01:d3:65:e9:00:56:2f:6d:10:11:
ce:f3:3c:48:4e:3b:b9:3f:c1:01:fd:b8:37:41:3d:
20:ed:0e:01:d3:b2:ce:96:90:82:64:ab:8a:8e:33:
a1:9b:a9:71:5f:73:47:25:40:ca:6f:ae:e7:34:38:
0e:ab:a1:b1:91:77:d6:a5:98:c0:df:33:66:50:c9:
d5:26:26:c3:3d:8e:e1:8c:2c:d6:ca:56:8d:8e:b3:
e8:55:76:46:e1:5d:02:de:74:1e:2f:7d:90:06:6b:
14:9c:c3:5b:8f:44:0b:ae:77:63:2b:48:d7:44:b8:
d8:b0:5d:0f:66:9f:2d:26:7e:b5:c3:22:34:51:17:
b7:55:36:0d:47:b7:6c:05:11:bf:97:64:7a:ab:a2:
9c:ef:05:bb:b9:1e:70:ce:91:44:b7:2f:2d:79:7d:
f3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E7:9F:2E:46:73:01:24:07:1F:62:56:9E:21:20:32:2D:5A:47:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5d615861-52a0-3f19-819c-2b981f385510.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
129.47.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:17:64:43:3f:00:93:f3:2c:0b:c0:ac:3b:30:ae:56:51:2d:
e6:76:00:6f:18:61:1a:4a:a7:07:0c:64:e1:a2:55:58:5b:f2:
bb:9a:bb:79:c4:fb:de:b3:62:f2:15:9b:17:24:6b:3d:2d:f2:
da:bd:5e:d1:67:8c:ba:f7:e0:b9:b3:ac:31:71:f6:47:81:c6:
4f:68:da:71:ab:ba:9a:cf:98:90:f0:1a:4f:b9:9c:07:67:9c:
f5:0d:ad:51:00:08:36:59:c5:a7:fb:3d:06:93:d8:26:75:07:
ea:9b:1c:50:de:25:48:3d:71:a1:d5:4b:d2:4d:77:fc:c3:ed:
eb:0a:2e:3e:43:5e:88:65:d2:b0:83:58:a3:a6:84:88:90:91:
06:5e:20:ef:ee:10:c2:db:1a:55:21:54:cf:3b:66:2d:98:e7:
2d:75:15:a3:33:ba:7d:5f:b5:fa:7d:d4:55:be:87:8c:c2:64:
74:e7:f1:58:c7:fc:8c:22:60:8c:6c:f1:37:32:58:fa:c6:8b:
0b:c3:5e:2d:5c:20:33:c3:9e:4a:aa:ba:fb:56:db:55:87:b6:
44:68:11:bf:9b:e0:12:47:17:d9:37:bd:44:46:41:eb:50:aa:
0f:83:f0:02:32:56:67:bc:5c:fd:33:3f:56:8f:b7:a4:93:8c:
df:48:15:70
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAdcglaIGGJx1u4dcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIwMjEyMDAwMFoXDTIzMDEwNzA1MDAwMFowLzEtMCsGA1UEAxMk
MDEwMDc5YWEtNTJmMy00MWZkLWE2YmYtNmFjMzJiM2ZjNjY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp01KTpYt/WC4iB8X7UZmn7SL/J5ZWctddzxC
apW5XVMAqtdwGm+73/ikgCTIVJWzuU+7PsfoXpKAPZgb32MTSb8rdLUN+LN94NGA
0XIE5o26SoUYzL+tit2answRSgHTZekAVi9tEBHO8zxITju5P8EB/bg3QT0g7Q4B
07LOlpCCZKuKjjOhm6lxX3NHJUDKb67nNDgOq6GxkXfWpZjA3zNmUMnVJibDPY7h
jCzWylaNjrPoVXZG4V0C3nQeL32QBmsUnMNbj0QLrndjK0jXRLjYsF0PZp8tJn61
wyI0URe3VTYNR7dsBRG/l2R6q6Kc7wW7uR5wzpFEty8teX3zlwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBbnny5GcwEkBx9iVp4hIDItWkeLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNWQ2MTU4NjEtNTJhMC0z
ZjE5LTgxOWMtMmI5ODFmMzg1NTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgS8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAnRdkQz8Ak/MsC8CsOzCuVlEt5nYAbxhhGkqnBwxk4aJVWFvyu5q7ecT7
3rNi8hWbFyRrPS3y2r1e0WeMuvfgubOsMXH2R4HGT2jacau6ms+YkPAaT7mcB2ec
9Q2tUQAINlnFp/s9BpPYJnUH6pscUN4lSD1xodVL0k13/MPt6wouPkNeiGXSsINY
o6aEiJCRBl4g7+4QwtsaVSFUzztmLZjnLXUVozO6fV+1+n3UVb6HjMJkdOfxWMf8
jCJgjGzxNzJY+saLC8NeLVwgM8OeSqq6+1bbVYe2RGgRv5vgEkcX2Te9REZB61Cq
D4PwAjJWZ7xc/TM/Vo+3pJOM30gVcA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:05:09 2025 by rpki-client