Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf178909-6bb8-3517-898d-b0f2cc554063.roa
File: cf178909-6bb8-3517-898d-b0f2cc554063.roa (raw, json)
Hash identifier: VMpxnIGlgiNv9GvxiRXAzrhXtljK7GzIoxTP812p3og=
Subject key identifier: FF:33:B5:6E:C8:DA:EF:EE:A0:DB:F3:1E:8E:E7:6A:25:0E:CC:71:C0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584024F305860C029DCA1C568C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf178909-6bb8-3517-898d-b0f2cc554063.roa
Signing time: Mon 05 Dec 2022 12:00:00 +0000
ROA not before: Mon 05 Dec 2022 12:00:00 +0000
ROA not after: Tue 10 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 136.128.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:24:f3:05:86:0c:02:9d:ca:1c:56:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 5 12:00:00 2022 GMT
Not After : Jan 10 05:00:00 2023 GMT
Subject: CN=a551637c-7cba-4696-bbdc-79d75bdde154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:69:28:33:c1:81:e6:36:0b:a9:6e:d1:a4:b2:
36:3e:f1:c3:34:11:18:f0:dd:0e:c3:b4:31:1c:02:
27:48:f3:a8:fe:76:2f:cd:4b:74:76:2a:18:1a:52:
bb:53:cb:8f:3e:83:15:06:09:77:9c:be:ec:6d:d4:
b9:a9:26:29:f0:6e:3d:34:6c:32:a9:bc:b3:c1:bd:
4d:7d:9d:ec:cc:59:19:c3:3f:6c:60:e7:9b:f8:75:
b8:17:c0:45:f6:6d:a4:48:03:2a:f7:c7:59:52:30:
9e:84:e6:3f:9b:b0:09:31:af:ad:73:01:04:37:47:
ee:9b:ec:a3:13:28:60:a6:13:c5:ac:c7:23:0c:71:
2e:d6:cd:6f:a0:44:e7:2b:ed:db:e9:bb:3a:9c:ff:
a2:da:56:3c:17:08:a2:f2:01:d9:c5:77:ba:6d:40:
95:a5:b8:ae:95:70:d4:b6:f1:44:24:95:b4:28:b3:
16:12:a6:ac:0b:2c:16:fa:a1:ef:cd:79:08:ce:99:
20:7a:bb:9f:b2:7b:f3:b0:85:52:da:e2:58:5f:25:
a5:fb:15:1e:86:a9:d1:e6:9f:74:dd:54:f5:86:5b:
82:cc:b6:c0:a1:c8:5d:2c:b5:12:b7:7d:2c:42:92:
cb:10:a0:1e:19:54:20:c0:5f:78:fe:7a:7e:50:dd:
ce:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:33:B5:6E:C8:DA:EF:EE:A0:DB:F3:1E:8E:E7:6A:25:0E:CC:71:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf178909-6bb8-3517-898d-b0f2cc554063.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.128.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:bc:5e:c1:b7:6d:05:73:41:79:4b:cb:45:16:9d:79:6a:e8:
5e:21:e0:3b:00:37:fb:16:5b:72:7a:cb:d9:2c:36:1d:90:37:
70:25:9d:38:fb:73:93:1b:ea:1d:9a:6f:79:f0:c2:43:77:e1:
d1:35:1c:1e:0b:15:c9:75:a0:8a:dc:57:9c:9b:2b:d4:3f:e2:
e8:21:2a:54:73:78:f2:ae:1f:bb:88:1c:c3:4e:81:d7:fc:07:
71:d4:f2:fc:f9:d3:1a:bb:19:0c:85:24:e4:f9:15:e2:c1:b8:
2c:6d:11:45:e9:ca:c9:31:fd:94:87:41:64:15:d7:69:37:85:
01:ec:5d:a8:cf:ca:42:7e:2f:d2:c2:cd:38:65:4c:00:c0:a4:
a5:a6:5f:a9:a8:11:87:3c:c8:ff:a2:31:a8:62:ce:b0:0a:b5:
94:72:c7:32:4a:f5:8c:33:84:40:57:3d:29:0b:9b:97:0e:a3:
0d:04:79:47:fc:ce:62:6f:bf:69:2d:88:2c:8b:36:f8:83:a8:
b4:76:83:e6:4f:a3:62:af:36:d6:47:b1:0d:49:ad:16:d9:39:
cb:fe:99:9a:ef:d3:52:e8:f0:72:74:79:d3:3d:f1:3a:c6:b9:
d6:e6:f9:d1:20:b5:3d:7e:82:54:26:09:98:84:3c:12:85:b4:
4f:fd:9a:03
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAk8wWGDAKdyhxWjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIwNTEyMDAwMFoXDTIzMDExMDA1MDAwMFowLzEtMCsGA1UEAxMk
YTU1MTYzN2MtN2NiYS00Njk2LWJiZGMtNzlkNzViZGRlMTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGkoM8GB5jYLqW7RpLI2PvHDNBEY8N0Ow7Qx
HAInSPOo/nYvzUt0dioYGlK7U8uPPoMVBgl3nL7sbdS5qSYp8G49NGwyqbyzwb1N
fZ3szFkZwz9sYOeb+HW4F8BF9m2kSAMq98dZUjCehOY/m7AJMa+tcwEEN0fum+yj
EyhgphPFrMcjDHEu1s1voETnK+3b6bs6nP+i2lY8Fwii8gHZxXe6bUCVpbiulXDU
tvFEJJW0KLMWEqasCywW+qHvzXkIzpkgerufsnvzsIVS2uJYXyWl+xUehqnR5p90
3VT1hluCzLbAochdLLUSt30sQpLLEKAeGVQgwF94/np+UN3O4QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFP8ztW7I2u/uoNvzHo7naiUOzHHAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvY2YxNzg5MDktNmJiOC0z
NTE3LTg5OGQtYjBmMmNjNTU0MDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBiIAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAqrxewbdtBXNBeUvLRRadeWroXiHgOwA3+xZbcnrL2Sw2HZA3cCWdOPtz
kxvqHZpvefDCQ3fh0TUcHgsVyXWgitxXnJsr1D/i6CEqVHN48q4fu4gcw06B1/wH
cdTy/PnTGrsZDIUk5PkV4sG4LG0RRenKyTH9lIdBZBXXaTeFAexdqM/KQn4v0sLN
OGVMAMCkpaZfqagRhzzI/6IxqGLOsAq1lHLHMkr1jDOEQFc9KQublw6jDQR5R/zO
Ym+/aS2ILIs2+IOotHaD5k+jYq821kexDUmtFtk5y/6Zmu/TUujwcnR50z3xOsa5
1ub50SC1PX6CVCYJmIQ8EoW0T/2aAw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:16:41 2025 by rpki-client