Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/807c903d-e79f-3fe9-a549-5c8534d2b49d.roa
File: 807c903d-e79f-3fe9-a549-5c8534d2b49d.roa (raw, json)
Hash identifier: d4uz+8BrV8pZlVBuO/RgCWVMSUkX0jL0WMkkxwqXD+M=
Subject key identifier: 05:F2:B6:38:F9:52:6E:55:0C:56:98:0E:13:BC:AD:40:DC:75:BA:CA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401CB7EFE04526BCDE1B889580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/807c903d-e79f-3fe9-a549-5c8534d2b49d.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 34.192.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:b7:ef:e0:45:26:bc:de:1b:88:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=65cc0d65-bb67-4751-96ba-0713bab409f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:66:cf:40:03:78:4f:01:39:b6:24:a4:ae:46:
d2:73:09:73:32:a1:a6:61:1b:0b:44:89:12:0b:35:
3e:51:d5:10:36:1d:56:02:54:24:df:67:cd:39:57:
54:2b:f6:1a:01:c5:bc:92:af:85:ad:45:d9:99:7d:
6b:43:1f:6a:11:a5:f7:0e:fc:84:ca:14:e8:d6:46:
0f:9c:d2:04:a3:f5:e7:a8:dd:48:44:06:3b:3f:68:
b7:99:da:78:a3:f3:66:56:18:17:b6:10:4d:0f:eb:
af:20:15:df:75:e3:95:67:47:07:bd:0d:36:b3:6d:
22:02:ed:3a:fb:bd:b3:61:d4:6b:40:e5:0c:ad:c7:
ff:4e:68:fc:c9:cc:2c:bc:38:d2:5c:8d:4f:1d:ac:
65:95:41:b9:01:e5:61:f9:92:2e:ad:8a:50:25:6a:
d6:46:9a:be:b2:a4:b6:44:3f:e3:aa:d5:32:5e:cb:
73:23:fc:1d:1b:43:de:62:63:77:94:e5:7e:87:90:
fd:9e:e2:73:5c:bb:91:d0:fa:5b:32:83:43:40:25:
8e:ab:00:98:95:b6:e4:67:ef:e2:13:c9:ca:1f:55:
fb:f7:02:5c:f6:36:c7:09:22:83:09:6b:d6:94:49:
97:56:58:2d:21:bd:24:b9:d1:28:44:f8:dd:bb:94:
8c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F2:B6:38:F9:52:6E:55:0C:56:98:0E:13:BC:AD:40:DC:75:BA:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/807c903d-e79f-3fe9-a549-5c8534d2b49d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
34.192.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:e8:0c:21:6e:0e:ee:83:b9:5a:a0:53:be:47:74:28:89:83:
eb:67:bf:ed:a0:a1:ea:c6:cb:33:88:bc:8e:90:82:24:f8:d9:
2c:b0:ea:81:5d:1d:f5:8a:d2:df:a6:3a:f6:e3:65:31:24:76:
58:6f:85:aa:f6:47:10:3c:c2:e7:78:15:ef:5e:2c:de:7f:14:
a1:1b:e0:4e:be:ac:69:d0:d3:15:e4:5f:dc:b4:5c:35:96:c8:
63:c8:73:90:ce:74:69:ec:14:88:68:41:9b:53:e5:28:b5:eb:
67:b5:48:96:e8:e8:89:69:72:ad:d6:24:c3:99:87:6b:8c:57:
be:9a:a4:87:b5:96:f1:1e:dc:97:8a:56:0d:2c:1a:c7:ac:46:
94:1d:24:23:2c:1b:c6:71:51:8f:88:d2:d4:aa:47:01:ec:a6:
27:fa:65:12:0e:ce:64:31:54:74:9a:34:ec:7c:d8:b9:db:89:
ae:98:bb:b8:dd:42:bb:42:a9:cf:22:cb:66:cd:4d:43:49:61:
d7:68:d1:b3:84:cd:6c:93:81:13:6a:f9:18:ff:8e:12:3f:65:
ac:de:74:64:97:eb:6a:3f:52:f1:21:fb:2b:dd:08:d6:a4:39:
b6:88:92:93:8c:f4:8f:2b:a7:8c:d3:fa:df:bd:9f:ac:ea:ef:
53:18:de:b7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAct+/gRSa83huIlYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIwMjEyMDAwMFoXDTIzMDEwNzA1MDAwMFowLzEtMCsGA1UEAxMk
NjVjYzBkNjUtYmI2Ny00NzUxLTk2YmEtMDcxM2JhYjQwOWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmbPQAN4TwE5tiSkrkbScwlzMqGmYRsLRIkS
CzU+UdUQNh1WAlQk32fNOVdUK/YaAcW8kq+FrUXZmX1rQx9qEaX3DvyEyhTo1kYP
nNIEo/XnqN1IRAY7P2i3mdp4o/NmVhgXthBND+uvIBXfdeOVZ0cHvQ02s20iAu06
+72zYdRrQOUMrcf/Tmj8ycwsvDjSXI1PHaxllUG5AeVh+ZIurYpQJWrWRpq+sqS2
RD/jqtUyXstzI/wdG0PeYmN3lOV+h5D9nuJzXLuR0PpbMoNDQCWOqwCYlbbkZ+/i
E8nKH1X79wJc9jbHCSKDCWvWlEmXVlgtIb0kudEoRPjdu5SMCQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAXytjj5Um5VDFaYDhO8rUDcdbrKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvODA3YzkwM2QtZTc5Zi0z
ZmU5LWE1NDktNWM4NTM0ZDJiNDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMGIsAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAq+gMIW4O7oO5WqBTvkd0KImD62e/7aCh6sbLM4i8jpCCJPjZLLDqgV0d
9YrS36Y69uNlMSR2WG+FqvZHEDzC53gV714s3n8UoRvgTr6sadDTFeRf3LRcNZbI
Y8hzkM50aewUiGhBm1PlKLXrZ7VIlujoiWlyrdYkw5mHa4xXvpqkh7WW8R7cl4pW
DSwax6xGlB0kIywbxnFRj4jS1KpHAeymJ/plEg7OZDFUdJo07HzYuduJrpi7uN1C
u0KpzyLLZs1NQ0lh12jRs4TNbJOBE2r5GP+OEj9lrN50ZJfraj9S8SH7K90I1qQ5
toiSk4z0jyunjNP6372frOrvUxjetw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:06:16 2025 by rpki-client