Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b762dd3a-54f1-3a31-be68-d28a0ca72349.roa
File: b762dd3a-54f1-3a31-be68-d28a0ca72349.roa (raw, json)
Hash identifier: RmxytVavLzDCBCZcAwGuMb5xLqZ7bGnRzDZH62Vd4iQ=
Subject key identifier: 37:A3:11:81:AF:E2:58:70:EE:C6:01:1B:C7:15:E0:CF:3F:DF:9D:53
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E1D91EFFF282A6C1EF8347080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b762dd3a-54f1-3a31-be68-d28a0ca72349.roa
Signing time: Thu 02 Jun 2022 12:00:00 +0000
ROA not before: Thu 02 Jun 2022 12:00:00 +0000
ROA not after: Fri 08 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.160.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1d:91:ef:ff:28:2a:6c:1e:f8:34:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 2 12:00:00 2022 GMT
Not After : Jul 8 04:00:00 2022 GMT
Subject: CN=c7bbdc82-b333-46d1-ba7a-5c2d4399ae39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e0:b9:36:aa:ad:21:a4:b9:e3:e1:80:d7:c3:
24:c6:44:7d:54:b1:7c:53:3a:76:b4:56:61:9d:f6:
4f:47:6f:56:8e:9d:a9:44:66:cc:94:e6:8f:02:ff:
7a:f0:79:99:78:5a:15:11:da:9f:03:b3:a8:8c:3e:
3b:48:33:57:e2:a5:c5:9a:cd:c6:96:0d:a5:9f:cc:
56:b8:71:59:b8:56:ce:a8:aa:48:f8:3d:80:a1:1f:
97:56:a2:bc:d9:ee:5d:a5:65:f4:04:e6:d4:3f:2d:
20:b8:29:e6:d2:f4:46:14:1d:f3:f7:8d:2c:ae:04:
15:d2:0a:c9:2d:e2:9d:a0:5d:e3:c7:07:a7:7f:62:
7e:f9:f0:8e:80:88:44:13:51:7f:5e:89:45:58:e7:
09:08:c1:69:88:88:26:83:38:2e:6a:9b:da:d2:be:
91:ad:a5:dd:4e:ca:d9:fa:65:2c:ac:27:a0:15:9d:
c1:6d:70:f7:f9:d4:6c:99:18:6e:81:86:e3:d4:73:
77:b6:01:0b:c0:ba:89:87:0a:e5:91:8d:a4:38:bd:
92:ef:89:70:6a:2c:63:71:ce:ca:83:b0:95:eb:cb:
4c:9e:f7:cc:25:0a:ac:bd:ea:b0:95:86:9b:3f:5a:
a6:bd:bc:c4:cf:a0:59:4c:9f:68:fa:19:18:a6:37:
5e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A3:11:81:AF:E2:58:70:EE:C6:01:1B:C7:15:E0:CF:3F:DF:9D:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b762dd3a-54f1-3a31-be68-d28a0ca72349.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.160.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:ac:cc:ac:3b:b4:12:23:29:2b:d1:bc:5e:1d:2d:20:7f:76:
36:8b:5e:14:96:0d:8e:3f:f2:ec:eb:87:66:6a:86:00:0e:84:
5d:ad:47:25:55:0c:60:ba:a7:e5:a7:b1:20:f4:97:eb:a6:62:
1c:59:f7:8f:f4:55:67:5b:29:af:3a:94:0b:1b:b9:64:d2:89:
13:01:98:42:93:5c:fc:05:6f:7c:05:f2:26:58:96:29:78:82:
35:cf:96:6f:93:64:d4:70:ad:35:04:21:f7:9a:0c:07:2a:e2:
8f:30:7c:85:e7:95:2c:82:30:a8:ec:c6:54:d1:5e:5a:03:3d:
6b:c4:55:ab:97:fc:04:ff:e4:cf:3e:d5:96:8b:74:eb:d4:ca:
23:59:09:f6:c4:bb:53:7c:6d:9c:96:b9:57:8d:61:a8:b7:28:
f3:1a:60:06:39:23:1a:f8:f7:9f:0f:6b:08:c2:67:77:2d:1d:
2f:08:07:e1:7a:89:82:7b:f9:8f:fb:c5:a4:fa:8f:83:18:a9:
be:6a:ad:1f:26:92:94:1a:0a:17:e5:81:96:2d:8e:ea:ec:25:
e0:a2:51:25:90:de:f6:ce:8b:c2:ee:9e:a4:67:83:eb:18:fb:
0d:00:6b:dd:7a:94:8c:38:ca:7e:7f:a4:ff:c0:29:3b:33:af:
23:c7:cb:9f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4dke//KCpsHvg0cIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYwMjEyMDAwMFoXDTIyMDcwODA0MDAwMFowLzEtMCsGA1UEAxMk
YzdiYmRjODItYjMzMy00NmQxLWJhN2EtNWMyZDQzOTlhZTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuC5NqqtIaS54+GA18MkxkR9VLF8Uzp2tFZh
nfZPR29Wjp2pRGbMlOaPAv968HmZeFoVEdqfA7OojD47SDNX4qXFms3Glg2ln8xW
uHFZuFbOqKpI+D2AoR+XVqK82e5dpWX0BObUPy0guCnm0vRGFB3z940srgQV0grJ
LeKdoF3jxwenf2J++fCOgIhEE1F/XolFWOcJCMFpiIgmgzguapva0r6RraXdTsrZ
+mUsrCegFZ3BbXD3+dRsmRhugYbj1HN3tgELwLqJhwrlkY2kOL2S74lwaixjcc7K
g7CV68tMnvfMJQqsveqwlYabP1qmvbzEz6BZTJ9o+hkYpjde6wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDejEYGv4lhw7sYBG8cV4M8/351TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYjc2MmRkM2EtNTRmMS0z
YTMxLWJlNjgtZDI4YTBjYTcyMzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMENqAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEArqzMrDu0EiMpK9G8Xh0tIH92NoteFJYNjj/y7OuHZmqGAA6EXa1HJVUM
YLqn5aexIPSX66ZiHFn3j/RVZ1sprzqUCxu5ZNKJEwGYQpNc/AVvfAXyJliWKXiC
Nc+Wb5Nk1HCtNQQh95oMByrijzB8heeVLIIwqOzGVNFeWgM9a8RVq5f8BP/kzz7V
lot069TKI1kJ9sS7U3xtnJa5V41hqLco8xpgBjkjGvj3nw9rCMJndy0dLwgH4XqJ
gnv5j/vFpPqPgxipvmqtHyaSlBoKF+WBli2O6uwl4KJRJZDe9s6Lwu6epGeD6xj7
DQBr3XqUjDjKfn+k/8ApOzOvI8fLnw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:19:32 2025 by rpki-client