Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9624b86a-3d56-3ff3-8734-5981ca5d43d0.roa
File: 9624b86a-3d56-3ff3-8734-5981ca5d43d0.roa (raw, json)
Hash identifier: 0xntsYGvQM01a6qan+b2WNmRtQMBB1NZzB3fTDfFWnQ=
Subject key identifier: 4D:F7:46:88:AF:55:25:68:DC:A6:A3:32:43:DA:0A:6E:30:3B:76:9F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FB205B4AB80D41DF5D13FDC80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9624b86a-3d56-3ff3-8734-5981ca5d43d0.roa
Signing time: Tue 25 Oct 2022 12:00:00 +0000
ROA not before: Tue 25 Oct 2022 12:00:00 +0000
ROA not after: Wed 30 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 158.141.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:b2:05:b4:ab:80:d4:1d:f5:d1:3f:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 25 12:00:00 2022 GMT
Not After : Nov 30 05:00:00 2022 GMT
Subject: CN=5340f247-fd90-4cb4-8c3c-6d48fa5ed846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:99:ba:a9:2c:2a:2d:64:d6:0a:b7:ac:65:9b:
39:89:44:39:ee:5b:f0:66:41:27:6a:d1:a6:65:55:
1a:b9:47:6c:64:e4:55:02:18:04:53:42:42:33:e8:
1c:29:ca:23:5c:d9:47:05:7f:f7:c3:73:68:4a:41:
e8:2e:80:89:20:30:10:5e:ba:d1:f8:e5:2d:0e:9f:
8f:be:6f:b6:cc:5f:db:ef:7d:27:5a:de:85:1e:cd:
4e:07:1c:ff:c0:31:a9:ff:4b:b9:17:1c:c5:d5:21:
0c:0a:e9:68:1c:02:31:7b:aa:22:92:ca:e7:97:87:
25:02:6d:44:d2:9d:1b:de:65:3f:c6:b9:39:f6:5b:
c3:78:d4:9f:46:68:85:e0:ca:ff:eb:89:4c:37:ba:
ad:1a:6e:b2:ac:1d:45:39:26:38:19:db:47:c3:7c:
93:a2:72:f1:df:7a:72:ab:bd:2f:6d:cc:93:32:eb:
4b:43:9d:0f:84:e5:e3:44:66:d1:83:20:5d:66:1c:
d0:53:01:29:f4:36:8b:b5:f6:1a:28:76:39:a8:55:
dd:d1:6f:f9:29:e3:db:a8:8d:e4:9f:49:11:1b:63:
5c:cd:e3:fb:9c:1a:3f:1b:13:a5:4a:cd:3f:36:0f:
87:b9:64:4f:58:0d:4a:ba:82:0e:6b:13:9f:b2:62:
d0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F7:46:88:AF:55:25:68:DC:A6:A3:32:43:DA:0A:6E:30:3B:76:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9624b86a-3d56-3ff3-8734-5981ca5d43d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
158.141.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:89:34:55:5f:93:8d:7e:c9:37:e9:59:31:62:3f:c9:d6:d6:
46:a1:84:db:78:ca:9f:82:a9:f9:47:5a:74:aa:6e:90:d7:92:
3d:3a:82:49:42:b6:df:e9:5f:45:91:92:8c:15:c4:68:ef:c3:
1b:77:22:8c:96:6b:b4:9b:51:d5:03:38:90:b1:ea:17:91:dc:
0c:4e:90:b6:2e:f3:db:8b:23:16:1f:de:00:90:0f:eb:48:a3:
96:8f:c3:aa:c5:31:08:86:93:57:85:72:0a:2d:2a:32:0f:e6:
da:dd:d3:26:e6:b6:0d:8f:6c:95:42:6e:41:58:6d:27:f6:c0:
59:fa:4f:01:fe:aa:70:70:12:dd:22:c6:13:ce:87:7a:5d:cb:
b0:3b:d8:5a:a1:27:59:76:58:29:69:ee:e5:50:a9:8e:60:61:
98:3f:b3:e9:88:28:80:8a:31:eb:f8:bb:d6:8d:91:33:b1:a9:
1e:45:c9:d5:84:73:ae:e7:d6:ab:e7:a3:13:67:ed:78:a4:32:
af:0e:75:bc:cd:73:2c:d5:cf:b5:af:be:90:ca:1b:70:91:fc:
d0:03:4d:6a:0a:b8:33:99:4c:a0:46:66:49:94:41:6e:94:dc:
7c:42:2e:e7:16:bc:61:dc:f9:56:70:43:16:0f:48:33:80:a4:
b3:94:eb:cf
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+yBbSrgNQd9dE/3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAyNTEyMDAwMFoXDTIyMTEzMDA1MDAwMFowLzEtMCsGA1UEAxMk
NTM0MGYyNDctZmQ5MC00Y2I0LThjM2MtNmQ0OGZhNWVkODQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZm6qSwqLWTWCresZZs5iUQ57lvwZkEnatGm
ZVUauUdsZORVAhgEU0JCM+gcKcojXNlHBX/3w3NoSkHoLoCJIDAQXrrR+OUtDp+P
vm+2zF/b730nWt6FHs1OBxz/wDGp/0u5FxzF1SEMCuloHAIxe6oiksrnl4clAm1E
0p0b3mU/xrk59lvDeNSfRmiF4Mr/64lMN7qtGm6yrB1FOSY4GdtHw3yTonLx33py
q70vbcyTMutLQ50PhOXjRGbRgyBdZhzQUwEp9DaLtfYaKHY5qFXd0W/5KePbqI3k
n0kRG2NczeP7nBo/GxOlSs0/Ng+HuWRPWA1KuoIOaxOfsmLQYQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFE33RoivVSVo3KajMkPaCm4wO3afMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOTYyNGI4NmEtM2Q1Ni0z
ZmYzLTg3MzQtNTk4MWNhNWQ0M2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAno0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAsok0VV+TjX7JN+lZMWI/ydbWRqGE23jKn4Kp+UdadKpukNeSPTqCSUK2
3+lfRZGSjBXEaO/DG3cijJZrtJtR1QM4kLHqF5HcDE6Qti7z24sjFh/eAJAP60ij
lo/DqsUxCIaTV4VyCi0qMg/m2t3TJua2DY9slUJuQVhtJ/bAWfpPAf6qcHAS3SLG
E86Hel3LsDvYWqEnWXZYKWnu5VCpjmBhmD+z6YgogIox6/i71o2RM7GpHkXJ1YRz
rufWq+ejE2fteKQyrw51vM1zLNXPta++kMobcJH80ANNagq4M5lMoEZmSZRBbpTc
fEIu5xa8Ydz5VnBDFg9IM4Cks5Trzw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:05:21 2025 by rpki-client