Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b751faca-2e0e-3dc3-89e5-23205ab7060c.roa
File: b751faca-2e0e-3dc3-89e5-23205ab7060c.roa (raw, json)
Hash identifier: in7lXD7szfnMQOFAK1ZZ0ZhngumhbIrO+dTMFAMtiLE=
Subject key identifier: 88:76:EC:3F:71:DC:57:80:B3:62:77:99:75:DD:FE:18:5E:AF:8B:20
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F2FE3196402271670BA630F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b751faca-2e0e-3dc3-89e5-23205ab7060c.roa
Signing time: Thu 08 Sep 2022 12:00:00 +0000
ROA not before: Thu 08 Sep 2022 12:00:00 +0000
ROA not after: Fri 14 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 165.94.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2f:e3:19:64:02:27:16:70:ba:63:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 8 12:00:00 2022 GMT
Not After : Oct 14 04:00:00 2022 GMT
Subject: CN=4e2967eb-c9bb-4197-846b-2a2ce7b06dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:82:1a:e3:db:fd:1e:a0:21:a6:21:c2:26:f9:
6a:1f:ae:d6:86:7e:80:ad:4a:25:83:ad:1b:b4:e0:
49:e4:45:ea:bc:26:2b:9e:20:f2:ca:30:28:31:20:
6e:f2:f8:9d:71:b9:df:c2:10:98:b7:9e:6a:d4:a1:
78:2d:90:22:1b:f0:4b:5a:75:51:73:05:9c:c6:2b:
35:79:ac:aa:ba:c8:96:7f:47:8a:0d:c9:24:43:91:
61:76:ca:a4:a9:47:a2:17:70:aa:e3:5a:23:f1:45:
50:2d:50:70:c5:27:93:d3:64:d2:2b:56:e8:46:2c:
85:7b:49:56:63:5a:e1:43:a0:c8:95:6c:69:b1:3a:
fc:41:7a:a2:66:c5:47:f1:90:5c:b7:42:be:07:d0:
d3:b3:3f:be:11:75:20:6c:32:3c:b5:68:ce:f1:3a:
3c:1b:a5:53:0c:09:fd:4f:96:a6:6e:3d:7b:3f:62:
6d:20:3b:a8:bb:3a:8e:48:2f:f2:1e:69:7e:b0:9e:
66:22:2d:6e:9f:9b:ae:e0:00:ab:05:50:2f:c7:4c:
dc:fb:94:03:29:08:29:ca:db:fb:89:2e:57:0e:04:
85:f4:34:b4:8b:38:42:c1:d0:e4:4b:35:e1:9f:24:
05:bf:91:43:39:a4:2d:e1:c0:35:46:c9:66:7c:38:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:76:EC:3F:71:DC:57:80:B3:62:77:99:75:DD:FE:18:5E:AF:8B:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b751faca-2e0e-3dc3-89e5-23205ab7060c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
165.94.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:48:95:78:d7:fb:bf:90:98:eb:c1:cc:fd:ea:2c:25:92:1a:
36:71:a0:91:57:21:6c:16:86:70:ef:08:50:5e:98:69:1f:1c:
ba:3b:28:60:32:f0:08:8e:b7:e6:84:1f:9f:f8:62:47:6b:3b:
1c:c6:3a:98:1a:60:e9:f2:cc:0f:d9:19:0f:97:27:12:71:9a:
1d:f3:02:6c:db:71:61:3f:2b:8b:88:80:d1:9c:92:d6:57:6a:
38:3f:d4:b1:a8:4a:7f:41:10:ea:12:3a:98:aa:c5:a1:15:b9:
b6:97:c0:b5:1d:21:8b:37:4b:40:4f:58:b6:78:04:30:b9:66:
c6:e7:d2:4b:7d:40:9f:da:09:2f:24:2d:c4:a8:68:69:f6:28:
f8:d1:48:85:29:e3:fd:15:a4:67:3c:e8:19:e4:41:9f:ba:8a:
17:f1:c1:ec:d2:26:d1:b1:eb:c6:14:33:83:ac:a3:3f:9c:bb:
ef:90:d8:0b:3c:26:21:ea:fb:4c:c5:27:cb:b1:3d:dc:68:4c:
92:95:a1:b5:df:7b:a3:69:f1:6a:2c:69:12:ec:8f:ed:57:59:
f4:97:a9:bd:15:06:df:b1:a5:32:7c:51:62:ac:d7:00:38:d3:
cc:48:27:06:ab:06:fa:36:1b:cc:49:99:94:12:a7:50:6a:bb:
40:74:f4:e5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8v4xlkAicWcLpjD4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkwODEyMDAwMFoXDTIyMTAxNDA0MDAwMFowLzEtMCsGA1UEAxMk
NGUyOTY3ZWItYzliYi00MTk3LTg0NmItMmEyY2U3YjA2ZGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4Ia49v9HqAhpiHCJvlqH67Whn6ArUolg60b
tOBJ5EXqvCYrniDyyjAoMSBu8vidcbnfwhCYt55q1KF4LZAiG/BLWnVRcwWcxis1
eayqusiWf0eKDckkQ5FhdsqkqUeiF3Cq41oj8UVQLVBwxSeT02TSK1boRiyFe0lW
Y1rhQ6DIlWxpsTr8QXqiZsVH8ZBct0K+B9DTsz++EXUgbDI8tWjO8To8G6VTDAn9
T5ambj17P2JtIDuouzqOSC/yHml+sJ5mIi1un5uu4ACrBVAvx0zc+5QDKQgpytv7
iS5XDgSF9DS0izhCwdDkSzXhnyQFv5FDOaQt4cA1RslmfDhtsQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIh27D9x3FeAs2J3mXXd/hher4sgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYjc1MWZhY2EtMmUwZS0z
ZGMzLTg5ZTUtMjMyMDVhYjcwNjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApV4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAIEiVeNf7v5CY68HM/eosJZIaNnGgkVchbBaGcO8IUF6YaR8cujsoYDLw
CI635oQfn/hiR2s7HMY6mBpg6fLMD9kZD5cnEnGaHfMCbNtxYT8ri4iA0ZyS1ldq
OD/UsahKf0EQ6hI6mKrFoRW5tpfAtR0hizdLQE9YtngEMLlmxufSS31An9oJLyQt
xKhoafYo+NFIhSnj/RWkZzzoGeRBn7qKF/HB7NIm0bHrxhQzg6yjP5y775DYCzwm
Ier7TMUny7E93GhMkpWhtd97o2nxaixpEuyP7VdZ9JepvRUG37GlMnxRYqzXADjT
zEgnBqsG+jYbzEmZlBKnUGq7QHT05Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:50:11 2025 by rpki-client