Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c432f0e5-e502-3498-bb80-ae79cdebe9a3.roa
File: c432f0e5-e502-3498-bb80-ae79cdebe9a3.roa (raw, json)
Hash identifier: 1WqFRDeg9Z7y/95UXPvfqFQe/uV1tRfKfgOF1LLWgqA=
Subject key identifier: 96:C2:0C:0A:AE:F1:11:B0:BE:4E:BD:D5:73:D5:71:9C:48:46:49:6F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840A1D9A70ECC19613A39BFDA40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c432f0e5-e502-3498-bb80-ae79cdebe9a3.roa
Signing time: Thu 19 Jan 2023 12:00:00 +0000
ROA not before: Thu 19 Jan 2023 12:00:00 +0000
ROA not after: Fri 24 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 141.186.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:a1:d9:a7:0e:cc:19:61:3a:39:bf:da:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 19 12:00:00 2023 GMT
Not After : Feb 24 05:00:00 2023 GMT
Subject: CN=9fb6e112-e7bd-43d7-a0bc-e2411acd7e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:9c:ab:b6:11:8f:78:a4:70:9c:5d:7f:b4:
64:b4:20:95:c6:32:62:e1:b9:5e:e0:86:a1:89:00:
ce:f3:72:1f:34:7a:23:47:7c:66:3c:b0:91:7e:a6:
61:31:8e:18:37:cf:a1:28:11:9c:49:00:f6:d9:46:
4a:d0:09:0e:9b:cb:5a:5e:b3:71:ab:4e:48:f1:82:
6b:a9:44:0f:e8:f9:2c:b0:08:85:52:0a:19:47:16:
91:f9:98:4d:db:2a:ce:9a:4d:e9:ba:73:97:92:46:
3f:4e:59:c8:7f:9b:06:a7:ab:68:c4:87:b5:88:5f:
fc:77:5a:f4:61:cc:14:06:f0:c6:b2:92:a1:94:34:
dc:91:36:76:cb:59:16:ee:d1:59:f7:77:d4:89:86:
39:c2:19:8e:f7:80:7c:8a:76:8a:ac:9d:d5:c9:d5:
af:0e:48:19:7f:6c:a7:b8:3c:a2:21:fa:ea:22:b3:
c3:09:ff:17:4f:cb:11:86:ef:45:69:bb:d7:8e:d4:
2e:bf:34:46:7b:a7:67:e6:5c:2c:67:67:8c:05:e6:
e2:d5:a6:98:5b:64:0c:0f:1f:0e:ce:db:d4:c6:b5:
d1:8a:c7:5c:82:64:91:6c:c6:1a:18:00:0c:81:39:
c9:76:72:c9:3d:16:1f:31:c0:67:15:7e:4d:fc:78:
31:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C2:0C:0A:AE:F1:11:B0:BE:4E:BD:D5:73:D5:71:9C:48:46:49:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c432f0e5-e502-3498-bb80-ae79cdebe9a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.186.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:e0:1b:c3:62:cc:99:43:9d:a9:44:34:af:8c:c5:f1:00:22:
cd:5e:f6:70:7f:d1:15:57:90:9c:31:54:43:4e:dd:a3:f6:ee:
1e:3e:50:f7:b1:9b:f4:dd:99:be:f6:61:39:17:7e:16:7d:e2:
82:9f:48:7b:8b:c9:3b:f6:72:92:d1:ed:d4:17:48:d4:db:2e:
48:98:fa:46:b4:d2:26:a3:7d:82:cc:c4:66:1b:93:35:de:3c:
b9:7e:90:ae:af:2a:bc:e9:45:cd:6c:97:d8:af:44:7f:65:d1:
24:db:9e:a6:72:ff:ab:79:d7:41:60:cc:61:8b:41:a9:5e:67:
20:56:81:aa:01:22:e5:ca:cf:27:91:b6:26:da:d6:09:7c:f0:
85:6b:04:58:0f:1c:7c:66:23:03:56:76:7d:19:12:e9:cc:8d:
45:0a:77:58:f1:cc:b1:38:2a:40:47:b6:22:8e:7c:eb:6d:fc:
bf:64:99:ee:65:07:8a:3d:35:ad:50:94:05:36:b0:58:30:2e:
7a:83:4e:0d:66:29:d4:ad:44:c9:a9:f9:d8:0b:a8:a8:c5:ee:
6f:6c:18:0e:10:20:e8:7d:2b:d1:4e:7f:8c:8a:5a:ad:d3:75:
3b:fe:d3:a7:a5:f8:d6:af:72:0a:1e:c0:64:de:f0:b2:47:6c:
59:eb:4d:50
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECh2acOzBlhOjm/2kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExOTEyMDAwMFoXDTIzMDIyNDA1MDAwMFowLzEtMCsGA1UEAxMk
OWZiNmUxMTItZTdiZC00M2Q3LWEwYmMtZTI0MTFhY2Q3ZTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3icq7YRj3ikcJxdf7RktCCVxjJi4ble4Iah
iQDO83IfNHojR3xmPLCRfqZhMY4YN8+hKBGcSQD22UZK0AkOm8taXrNxq05I8YJr
qUQP6PkssAiFUgoZRxaR+ZhN2yrOmk3punOXkkY/TlnIf5sGp6toxIe1iF/8d1r0
YcwUBvDGspKhlDTckTZ2y1kW7tFZ93fUiYY5whmO94B8inaKrJ3VydWvDkgZf2yn
uDyiIfrqIrPDCf8XT8sRhu9FabvXjtQuvzRGe6dn5lwsZ2eMBebi1aaYW2QMDx8O
ztvUxrXRisdcgmSRbMYaGAAMgTnJdnLJPRYfMcBnFX5N/Hgx3wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJbCDAqu8RGwvk691XPVcZxIRklvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYzQzMmYwZTUtZTUwMi0z
NDk4LWJiODAtYWU3OWNkZWJlOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjbowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAlOAbw2LMmUOdqUQ0r4zF8QAizV72cH/RFVeQnDFUQ07do/buHj5Q97Gb
9N2ZvvZhORd+Fn3igp9Ie4vJO/ZyktHt1BdI1NsuSJj6RrTSJqN9gszEZhuTNd48
uX6Qrq8qvOlFzWyX2K9Ef2XRJNuepnL/q3nXQWDMYYtBqV5nIFaBqgEi5crPJ5G2
JtrWCXzwhWsEWA8cfGYjA1Z2fRkS6cyNRQp3WPHMsTgqQEe2Io586238v2SZ7mUH
ij01rVCUBTawWDAueoNODWYp1K1Eyan52AuoqMXub2wYDhAg6H0r0U5/jIpardN1
O/7Tp6X41q9yCh7AZN7wskdsWetNUA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:22:39 2025 by rpki-client