Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dcfcd6c6-34dd-35df-82da-a1131efc2ae2.roa
File: dcfcd6c6-34dd-35df-82da-a1131efc2ae2.roa (raw, json)
Hash identifier: STnmERMV2iLpyJjAdo+0kd2bkN1bXSCqH4Q8HPHa0So=
Subject key identifier: CE:AD:D9:CB:F4:1F:B8:E0:23:62:85:91:4A:33:EF:EE:7A:EA:D8:02
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D1EB55900DC5E050792247E3D
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dcfcd6c6-34dd-35df-82da-a1131efc2ae2.roa
Signing time: Fri 04 Mar 2022 05:00:00 +0000
ROA not before: Fri 04 Mar 2022 05:00:00 +0000
ROA not after: Fri 08 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 141.186.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:1e:b5:59:00:dc:5e:05:07:92:24:7e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 4 05:00:00 2022 GMT
Not After : Apr 8 04:00:00 2022 GMT
Subject: CN=8f393c01-173e-41fd-9845-1c4525e895c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:86:61:a2:4f:d2:c2:bd:73:2c:89:b0:c7:38:
c3:eb:d3:1b:b7:60:4b:85:24:0c:63:5c:94:e9:9d:
e4:10:d1:25:45:f7:64:41:ba:00:36:4b:8b:51:41:
f5:20:81:63:81:c0:e9:5b:e8:c1:5c:17:22:5e:ce:
cc:ea:ad:86:63:2b:e3:93:ee:f1:cb:83:a3:4a:8a:
6f:2d:c3:94:5a:79:f5:c7:37:d7:b3:92:69:94:71:
ab:e9:d6:87:f2:89:02:94:03:08:80:db:c4:f1:49:
82:65:09:cb:b5:50:04:34:fc:9e:57:ab:f2:9f:73:
62:7c:5d:3b:1e:ff:76:a0:16:de:06:4b:94:c0:c0:
fa:bc:2d:ae:91:5b:23:54:37:85:a0:68:36:4a:d0:
2b:a7:7d:28:4c:dc:b6:9f:c7:30:0b:ec:15:4b:c2:
6e:f8:4c:42:88:16:e3:18:81:23:7f:cc:cb:64:8c:
24:80:20:67:b4:ed:3c:6c:54:31:b0:36:13:c4:92:
e7:49:b4:68:c9:76:80:c7:ae:fd:5d:22:dc:24:9d:
50:ec:86:86:8c:ba:41:24:b8:d7:ae:ce:f1:10:cc:
81:e5:26:fe:37:4a:10:a1:88:99:96:77:1c:31:68:
f2:e1:7d:c7:7d:e8:2a:8b:e0:cf:30:df:ff:24:3e:
14:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AD:D9:CB:F4:1F:B8:E0:23:62:85:91:4A:33:EF:EE:7A:EA:D8:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dcfcd6c6-34dd-35df-82da-a1131efc2ae2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
141.186.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:39:97:11:b4:bc:0a:5b:76:01:4d:cd:da:eb:dc:80:82:6e:
90:35:1e:4f:f6:b6:60:bc:68:99:b9:5c:18:e4:2c:14:e3:9d:
d1:4a:09:3b:c9:09:c4:23:96:3d:56:11:1b:12:d4:8b:23:0e:
9e:73:67:15:96:1c:20:15:a9:75:47:e1:8a:b2:f3:a1:dc:46:
65:5d:f6:61:86:84:70:e7:ba:8d:98:2b:e9:fc:bb:4f:2f:4a:
1c:44:28:f1:5c:48:34:2d:ef:2c:25:2c:a1:17:53:ba:7f:f2:
4b:1e:33:72:09:ef:00:fd:93:89:60:a5:11:38:31:d7:07:67:
63:9d:ba:f1:07:80:be:a2:d2:40:5b:d2:d5:16:63:bf:98:1c:
79:40:88:33:11:71:de:bd:f4:ac:a1:e7:3d:87:b3:7e:4c:a0:
ca:69:0e:a2:85:12:f4:cf:f2:10:4f:7c:c4:04:42:25:f1:3e:
af:c1:55:0b:92:d8:a2:0b:45:3d:f9:13:9e:9e:ec:56:e0:ea:
28:ce:90:fd:a2:f7:e1:3d:3a:02:dd:cb:e7:39:fb:4c:18:f2:
e1:5c:f2:0d:7f:a1:38:df:e7:de:5f:2e:c9:01:82:90:b9:08:
21:d8:d6:2e:bc:85:76:66:ad:74:56:bb:81:ce:41:76:75:a8:
64:62:76:0c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0etVkA3F4FB5Ikfj0wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMwNDA1MDAwMFoXDTIyMDQwODA0MDAwMFowLzEtMCsGA1UEAxMk
OGYzOTNjMDEtMTczZS00MWZkLTk4NDUtMWM0NTI1ZTg5NWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYZhok/Swr1zLImwxzjD69Mbt2BLhSQMY1yU
6Z3kENElRfdkQboANkuLUUH1IIFjgcDpW+jBXBciXs7M6q2GYyvjk+7xy4OjSopv
LcOUWnn1xzfXs5JplHGr6daH8okClAMIgNvE8UmCZQnLtVAENPyeV6vyn3NifF07
Hv92oBbeBkuUwMD6vC2ukVsjVDeFoGg2StArp30oTNy2n8cwC+wVS8Ju+ExCiBbj
GIEjf8zLZIwkgCBntO08bFQxsDYTxJLnSbRoyXaAx679XSLcJJ1Q7IaGjLpBJLjX
rs7xEMyB5Sb+N0oQoYiZlnccMWjy4X3Hfegqi+DPMN//JD4UFQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFM6t2cv0H7jgI2KFkUoz7+566tgCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZGNmY2Q2YzYtMzRkZC0z
NWRmLTgyZGEtYTExMzFlZmMyYWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjbowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAhzmXEbS8Clt2AU3N2uvcgIJukDUeT/a2YLxomblcGOQsFOOd0UoJO8kJ
xCOWPVYRGxLUiyMOnnNnFZYcIBWpdUfhirLzodxGZV32YYaEcOe6jZgr6fy7Ty9K
HEQo8VxINC3vLCUsoRdTun/ySx4zcgnvAP2TiWClETgx1wdnY5268QeAvqLSQFvS
1RZjv5gceUCIMxFx3r30rKHnPYezfkygymkOooUS9M/yEE98xARCJfE+r8FVC5LY
ogtFPfkTnp7sVuDqKM6Q/aL34T06At3L5zn7TBjy4VzyDX+hON/n3l8uyQGCkLkI
IdjWLryFdmatdFa7gc5BdnWoZGJ2DA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:25:35 2025 by rpki-client