Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b3b6f91-61d6-3623-ae9a-3c9532c83453.roa
File: 8b3b6f91-61d6-3623-ae9a-3c9532c83453.roa (raw, json)
Hash identifier: c0CX22zsTxfsvrSEPCmndF3LwzDMUjl8A+Sc2GTAMAQ=
Subject key identifier: B8:B5:FA:C1:18:AC:7D:02:F4:C0:C8:F7:85:F3:BA:8B:1A:28:34:14
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA7DF73D3C5B838EEF39B8400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b3b6f91-61d6-3623-ae9a-3c9532c83453.roa
Signing time: Fri 21 Oct 2022 12:00:00 +0000
ROA not before: Fri 21 Oct 2022 12:00:00 +0000
ROA not after: Sat 26 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 54.64.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a7:df:73:d3:c5:b8:38:ee:f3:9b:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 12:00:00 2022 GMT
Not After : Nov 26 05:00:00 2022 GMT
Subject: CN=0f6a9749-7727-4425-bfe8-d8b991f6c74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:1b:2b:a6:fa:ad:96:44:6a:0f:e2:f0:73:
a5:be:b9:6c:b1:28:c6:a1:7d:92:e2:03:4a:e8:c0:
ac:5b:e0:b9:48:42:f2:b1:e5:81:c8:c6:ab:f9:a2:
26:8a:23:b4:5b:ee:6b:3d:ec:41:f2:f6:56:a6:07:
c2:23:70:01:b9:09:af:cb:2a:ba:80:b0:81:ba:02:
51:36:22:2a:0c:6d:36:e6:e1:14:45:46:cf:c5:94:
87:d8:ce:69:b4:d5:d5:53:7f:36:4e:49:78:79:c6:
af:2b:0c:16:55:5d:be:ef:53:f8:58:1c:d9:47:28:
cf:30:b6:ab:11:25:c0:8b:09:6d:d9:50:a2:aa:3f:
87:ce:8b:1b:83:77:54:66:a7:fd:49:42:83:a7:59:
43:67:72:84:ff:1d:33:13:dd:0b:dd:30:7e:d1:a5:
46:f3:97:ee:45:93:7c:db:a0:b5:90:b3:a1:2c:eb:
aa:5d:e7:72:f6:b2:85:c5:2b:f6:71:60:a5:97:cc:
04:5b:05:d7:1d:14:fb:84:6c:34:69:00:df:f9:f2:
21:07:89:21:ee:c8:06:e8:4c:e4:81:06:77:5c:65:
fb:d7:c7:64:bf:6b:b3:97:41:8e:03:ee:0d:85:45:
70:0e:67:6e:97:8d:47:6c:d5:97:c9:f5:47:a0:b7:
ec:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B5:FA:C1:18:AC:7D:02:F4:C0:C8:F7:85:F3:BA:8B:1A:28:34:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b3b6f91-61d6-3623-ae9a-3c9532c83453.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.64.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:aa:74:29:b0:16:2e:ed:f6:69:75:98:e7:5f:b3:e4:fa:34:
9b:9f:05:94:80:26:3d:59:51:9c:83:ec:a5:5f:a3:63:ef:7e:
65:46:fc:6b:ab:5b:0c:02:5c:80:79:bb:31:8a:2c:6e:6d:8a:
37:3b:40:fb:28:0f:34:26:30:ac:02:7c:1f:7f:0c:b8:65:b1:
26:6e:41:6f:44:3b:03:de:33:03:33:1b:93:b0:81:e9:2f:fc:
8f:af:6e:79:a6:c9:f4:cf:92:65:f6:6e:76:63:61:54:a4:e6:
c5:0a:32:8a:e3:34:46:1f:3b:18:a6:9e:bb:65:bd:65:6e:43:
1e:c4:8f:7d:7e:3e:0d:21:1c:9f:78:26:34:01:70:80:8c:29:
bc:79:0c:07:69:b1:8b:45:d5:a6:aa:93:c3:5a:56:c6:98:69:
68:b0:97:46:8d:be:a8:51:7d:93:62:f5:be:c5:5f:b6:16:79:
28:4d:17:18:8b:4d:48:5b:4b:e1:68:70:9f:3c:ef:b8:e8:c9:
dc:53:5c:3f:2e:26:6c:ca:59:0c:5a:6d:33:e0:8e:d7:4b:d3:
d3:57:6a:1a:c6:0c:b2:3d:4e:46:25:db:47:a9:5d:d7:dc:1d:
ef:59:dd:ce:db:6a:4b:72:b9:15:13:f1:71:6f:1e:7c:a7:00:
c5:8b:d2:a6
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+n33PTxbg47vObhAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAyMTEyMDAwMFoXDTIyMTEyNjA1MDAwMFowLzEtMCsGA1UEAxMk
MGY2YTk3NDktNzcyNy00NDI1LWJmZTgtZDhiOTkxZjZjNzRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoobK6b6rZZEag/i8HOlvrlssSjGoX2S4gNK
6MCsW+C5SELyseWByMar+aImiiO0W+5rPexB8vZWpgfCI3ABuQmvyyq6gLCBugJR
NiIqDG025uEURUbPxZSH2M5ptNXVU382Tkl4ecavKwwWVV2+71P4WBzZRyjPMLar
ESXAiwlt2VCiqj+Hzosbg3dUZqf9SUKDp1lDZ3KE/x0zE90L3TB+0aVG85fuRZN8
26C1kLOhLOuqXedy9rKFxSv2cWCll8wEWwXXHRT7hGw0aQDf+fIhB4kh7sgG6Ezk
gQZ3XGX718dkv2uzl0GOA+4NhUVwDmdul41HbNWXyfVHoLfsfQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLi1+sEYrH0C9MDI94XzuosaKDQUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOGIzYjZmOTEtNjFkNi0z
NjIzLWFlOWEtM2M5NTMyYzgzNDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDNkAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAT6p0KbAWLu32aXWY51+z5Po0m58FlIAmPVlRnIPspV+jY+9+ZUb8a6tb
DAJcgHm7MYosbm2KNztA+ygPNCYwrAJ8H38MuGWxJm5Bb0Q7A94zAzMbk7CB6S/8
j69ueabJ9M+SZfZudmNhVKTmxQoyiuM0Rh87GKaeu2W9ZW5DHsSPfX4+DSEcn3gm
NAFwgIwpvHkMB2mxi0XVpqqTw1pWxphpaLCXRo2+qFF9k2L1vsVfthZ5KE0XGItN
SFtL4WhwnzzvuOjJ3FNcPy4mbMpZDFptM+CO10vT01dqGsYMsj1ORiXbR6ld19wd
71ndzttqS3K5FRPxcW8efKcAxYvSpg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:05 2025 by rpki-client