Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d578b3cd-2c87-3ac4-afcc-98e0ce9f81a6.roa
File: d578b3cd-2c87-3ac4-afcc-98e0ce9f81a6.roa (raw, json)
Hash identifier: tLerctSno2j+Htf3oOnlC9xxrGHMRq18cmeGpRb3P/A=
Subject key identifier: 8E:23:A1:4A:2D:96:D7:20:62:B3:06:63:8E:5E:EB:4F:DE:DF:0C:6B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C971B5AFE0FA0E286D5DD0680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d578b3cd-2c87-3ac4-afcc-98e0ce9f81a6.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 153.49.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:97:1b:5a:fe:0f:a0:e2:86:d5:dd:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=d5afb39b-bc96-42e0-927f-52554899096c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bb:d4:10:41:c7:f4:0e:f4:31:83:93:d0:f7:
73:a6:94:74:86:df:42:ff:52:aa:29:5e:85:e2:b5:
12:d6:d4:94:e4:bd:7f:0e:63:46:7e:2e:68:7c:86:
24:00:0a:80:ac:c3:73:6a:75:1b:91:5c:83:26:67:
37:3e:fc:86:79:c6:b2:6e:47:85:6e:0c:d0:b8:ff:
d4:7d:e5:2b:0a:7b:2f:5c:d9:ec:32:4c:71:7f:87:
d0:87:42:3e:34:e4:db:a5:bb:a4:21:8a:ad:ee:2f:
83:36:d2:24:1d:2b:c2:8d:09:c5:a3:04:79:a8:a1:
8e:71:6a:5c:01:d3:fd:64:1e:d3:bd:92:82:ff:c5:
93:b5:a6:b5:f5:f6:8c:93:81:c8:b7:f5:de:ec:e3:
1b:3c:96:25:24:17:b1:39:c7:19:a6:b2:67:4c:70:
6b:74:96:67:44:d1:98:27:0c:37:f3:ec:14:3b:e6:
92:e8:ac:c4:79:20:02:83:17:b9:e5:d7:27:f0:fa:
6f:bf:03:04:83:83:b5:b6:76:9c:19:87:d5:eb:f1:
ec:c9:e6:57:45:4e:7b:8a:a1:f4:f8:88:d4:81:41:
6c:0b:78:5d:7e:75:96:d7:c7:e7:81:de:3c:fa:33:
25:29:55:7b:62:57:6d:85:0e:2d:fa:47:24:d5:0e:
f9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:23:A1:4A:2D:96:D7:20:62:B3:06:63:8E:5E:EB:4F:DE:DF:0C:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d578b3cd-2c87-3ac4-afcc-98e0ce9f81a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
153.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:9f:3c:10:52:24:03:9d:4c:0a:c6:98:3a:34:25:22:8f:6a:
5f:0d:c0:a3:91:c4:2d:e1:ff:3c:c8:6d:8a:e1:e9:85:57:35:
3d:c6:26:08:10:9f:ec:7e:cb:5d:90:29:e3:26:fc:3e:2c:b7:
28:77:7b:0c:89:29:98:58:15:01:2f:26:e1:33:ec:fd:90:5f:
1c:82:43:28:03:da:75:9f:9e:14:b4:68:8e:ac:96:35:dd:50:
0b:c5:06:85:a8:cd:f5:34:f4:36:08:0f:42:c1:79:dc:74:50:
b4:7e:fd:e6:a9:0c:57:70:e3:8a:df:69:ca:53:7b:c9:56:b0:
f8:f5:09:65:23:84:30:f8:51:41:c8:2c:e8:ca:b4:4c:62:1a:
29:54:26:fb:30:c2:bd:e0:1b:c5:d8:10:63:46:0d:ff:76:71:
b0:f6:a9:a0:e7:26:fc:e8:1d:d2:06:1f:1c:85:12:21:7b:e8:
52:52:9e:c0:6b:4c:45:03:9d:e6:da:7f:45:2e:5d:ae:c4:81:
5c:4c:30:01:73:60:be:74:27:04:bc:c5:9d:24:dd:49:27:94:
8f:2a:72:b6:ce:5a:50:16:92:e1:0e:65:32:d8:b2:19:3a:e0:
46:dc:aa:7b:75:13:47:4f:9f:3d:03:8e:86:61:fd:5e:e3:cf:
8b:92:61:14
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDyXG1r+D6DihtXdBoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDExNDA1MDAwMFoXDTIyMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
ZDVhZmIzOWItYmM5Ni00MmUwLTkyN2YtNTI1NTQ4OTkwOTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bvUEEHH9A70MYOT0PdzppR0ht9C/1KqKV6F
4rUS1tSU5L1/DmNGfi5ofIYkAAqArMNzanUbkVyDJmc3PvyGecaybkeFbgzQuP/U
feUrCnsvXNnsMkxxf4fQh0I+NOTbpbukIYqt7i+DNtIkHSvCjQnFowR5qKGOcWpc
AdP9ZB7TvZKC/8WTtaa19faMk4HIt/Xe7OMbPJYlJBexOccZprJnTHBrdJZnRNGY
Jww38+wUO+aS6KzEeSACgxe55dcn8PpvvwMEg4O1tnacGYfV6/HsyeZXRU57iqH0
+IjUgUFsC3hdfnWW18fngd48+jMlKVV7YldthQ4t+kck1Q75+QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFI4joUotltcgYrMGY45e60/e3wxrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDU3OGIzY2QtMmM4Ny0z
YWM0LWFmY2MtOThlMGNlOWY4MWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmTEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAC588EFIkA51MCsaYOjQlIo9qXw3Ao5HELeH/PMhtiuHphVc1PcYmCBCf
7H7LXZAp4yb8Piy3KHd7DIkpmFgVAS8m4TPs/ZBfHIJDKAPadZ+eFLRojqyWNd1Q
C8UGhajN9TT0NggPQsF53HRQtH795qkMV3Djit9pylN7yVaw+PUJZSOEMPhRQcgs
6Mq0TGIaKVQm+zDCveAbxdgQY0YN/3ZxsPapoOcm/Ogd0gYfHIUSIXvoUlKewGtM
RQOd5tp/RS5drsSBXEwwAXNgvnQnBLzFnSTdSSeUjypyts5aUBaS4Q5lMtiyGTrg
Rtyqe3UTR0+fPQOOhmH9XuPPi5JhFA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:01:40 2025 by rpki-client