Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b3d951e4-20e9-312a-8ec8-01b3588fafd5.roa
File: b3d951e4-20e9-312a-8ec8-01b3588fafd5.roa (raw, json)
Hash identifier: dsr/JYqM7V1Ruc0PMMM21g7WpmaN4l+MvY1oUJ3uUIg=
Subject key identifier: F3:64:AF:E5:55:4E:47:AE:30:0E:14:46:89:AB:28:6C:AB:B2:3F:3D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D59EAE7E5FED888475C9C8300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b3d951e4-20e9-312a-8ec8-01b3588fafd5.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.129.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:ea:e7:e5:fe:d8:88:47:5c:9c:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=f8b82ff2-6c4f-4fef-bc3d-af4e4b6d2ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:f1:fb:78:56:af:09:d9:e1:83:7d:8c:e6:
18:ee:70:d4:2c:da:c2:2e:33:26:c0:a2:dc:44:0a:
12:a9:f9:1a:44:1e:a9:e8:1c:6b:ff:5f:22:17:36:
fc:91:5f:31:4f:70:4f:7a:bf:7f:66:4a:49:c8:2e:
90:e7:ee:fa:fa:75:83:75:12:97:23:52:c9:1c:52:
b5:30:50:08:8a:bd:9e:55:f2:86:07:dd:42:a7:c4:
42:a8:ad:63:8d:90:82:97:af:61:d6:60:f6:6b:ff:
e4:d7:5d:d3:ec:9a:5e:c0:0b:f1:58:e3:55:20:7f:
da:80:a5:ef:60:2a:d0:a7:5e:89:36:5b:a8:74:67:
4b:ce:5d:d2:14:46:ca:6c:00:19:6a:07:47:b5:d5:
51:e3:97:30:f9:9f:f5:49:54:1d:49:fa:dc:4d:3a:
63:18:9d:8a:2a:9f:d8:ca:c0:49:07:e4:45:2f:80:
26:ca:85:c5:6e:eb:b1:71:cd:44:4d:b8:d7:09:36:
aa:e7:77:98:b4:b5:eb:c7:76:16:33:c8:d3:72:fb:
ee:9d:92:ec:13:7e:78:8a:3d:13:ab:b4:39:08:21:
3c:8f:f7:ec:28:cc:43:f5:7c:4a:99:eb:30:2e:eb:
21:56:2f:96:7a:ce:19:de:e4:38:0b:da:e8:2b:a0:
63:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:64:AF:E5:55:4E:47:AE:30:0E:14:46:89:AB:28:6C:AB:B2:3F:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b3d951e4-20e9-312a-8ec8-01b3588fafd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:bc:3f:b5:f2:29:17:a1:ae:9c:4d:24:9a:29:22:44:26:c9:
13:2f:c7:b8:e4:1b:9a:f6:c3:c7:5b:d3:6f:cc:fb:70:d2:14:
d3:45:a9:30:bf:4c:2e:e6:4b:0a:ce:91:76:14:d7:e9:24:a2:
5a:3f:10:7c:2c:ff:74:c8:87:d6:88:07:62:5c:77:2f:50:91:
d6:05:01:82:ad:4e:28:5e:44:07:a5:6b:e4:19:ad:56:3f:4c:
34:e3:f0:67:36:4a:c4:d3:a7:f4:22:76:97:78:ba:87:10:89:
b6:a4:09:c1:b1:7d:94:34:df:43:75:08:49:78:5e:35:87:9f:
9f:ba:d0:8e:78:3c:e7:41:16:60:e5:7b:8a:6b:f2:15:1b:16:
30:a7:34:a7:46:cd:1e:e6:dc:6f:af:05:d8:17:d3:e0:b2:ab:
65:d7:a5:97:7c:76:14:06:25:7e:66:94:7c:71:2d:40:c6:88:
98:69:1c:23:53:14:33:a0:c8:e0:63:18:33:b5:8e:df:8e:21:
e4:fb:16:68:6b:fa:bf:77:36:6d:18:38:16:f4:f2:7c:b6:b4:
5a:2d:5b:59:5c:a3:8d:27:59:2e:a5:cd:93:c4:1d:93:ac:41:
bc:da:5d:49:73:b8:b3:16:d5:0e:81:d9:c8:cd:eb:0f:b7:33:
b8:4c:b3:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1Z6ufl/tiIR1ycgwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMyNTA0MDAwMFoXDTIyMDQyOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZjhiODJmZjItNmM0Zi00ZmVmLWJjM2QtYWY0ZTRiNmQyZWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulXx+3hWrwnZ4YN9jOYY7nDULNrCLjMmwKLc
RAoSqfkaRB6p6Bxr/18iFzb8kV8xT3BPer9/ZkpJyC6Q5+76+nWDdRKXI1LJHFK1
MFAIir2eVfKGB91Cp8RCqK1jjZCCl69h1mD2a//k113T7JpewAvxWONVIH/agKXv
YCrQp16JNluodGdLzl3SFEbKbAAZagdHtdVR45cw+Z/1SVQdSfrcTTpjGJ2KKp/Y
ysBJB+RFL4AmyoXFbuuxcc1ETbjXCTaq53eYtLXrx3YWM8jTcvvunZLsE354ij0T
q7Q5CCE8j/fsKMxD9XxKmeswLushVi+Wes4Z3uQ4C9roK6BjYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPNkr+VVTkeuMA4URomrKGyrsj89MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYjNkOTUxZTQtMjBlOS0z
MTJhLThlYzgtMDFiMzU4OGZhZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHNIGAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC28P7XyKRehrpxNJJopIkQmyRMvx7jkG5r2w8db02/M+3DSFNNFqTC/
TC7mSwrOkXYU1+kkolo/EHws/3TIh9aIB2Jcdy9QkdYFAYKtTiheRAela+QZrVY/
TDTj8Gc2SsTTp/Qidpd4uocQibakCcGxfZQ030N1CEl4XjWHn5+60I54POdBFmDl
e4pr8hUbFjCnNKdGzR7m3G+vBdgX0+Cyq2XXpZd8dhQGJX5mlHxxLUDGiJhpHCNT
FDOgyOBjGDO1jt+OIeT7Fmhr+r93Nm0YOBb08ny2tFotW1lco40nWS6lzZPEHZOs
QbzaXUlzuLMW1Q6B2cjN6w+3M7hMs7s=
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:55 2025 by rpki-client