Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e78bf3c8-20aa-3418-bdd2-45e7a676cd66.roa
File: e78bf3c8-20aa-3418-bdd2-45e7a676cd66.roa (raw, json)
Hash identifier: IxeoSWLwqElGD8yCE35iY60EzgY1hxJnM7C0tFJ+Ovo=
Subject key identifier: 7D:E4:AF:0D:66:70:2A:D3:8E:22:AF:32:74:36:4B:06:AE:7B:21:F4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FAA84EF0597A479B4E7C0D600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e78bf3c8-20aa-3418-bdd2-45e7a676cd66.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 52.220.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:aa:84:ef:05:97:a4:79:b4:e7:c0:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=ac29f770-9ef6-471d-9d45-b04ccf0981bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:53:2b:b7:ce:3d:d5:41:8b:7b:a7:66:f0:
f4:f9:54:7d:29:ad:55:eb:a1:1b:05:aa:fb:e0:05:
98:43:c8:e7:6e:69:63:ce:f7:7e:11:23:b6:c3:b2:
09:d1:de:f8:f0:1e:c3:2e:67:d1:13:57:f2:da:d6:
82:f1:b5:3a:cf:77:79:41:1d:a4:e2:98:76:18:2d:
64:fc:66:d6:fb:09:63:9f:e7:fd:96:8b:45:33:76:
31:5f:9d:9b:1d:5a:12:a3:e2:e6:65:53:42:09:cc:
6a:f4:f3:ab:97:07:c3:3b:3d:4f:97:ea:56:a5:f5:
e7:55:cc:0d:5a:6f:8e:7d:3a:87:da:1c:02:af:21:
58:a4:42:3d:73:1c:bf:06:d0:ad:28:64:20:a1:b5:
1f:7a:9d:9a:73:f9:82:3b:0d:24:1a:85:6a:4d:5f:
c7:22:31:42:a3:55:ef:e0:2a:79:fb:ee:c1:19:e4:
72:bd:d2:0c:89:69:7f:d3:ca:9d:df:0f:dc:06:fa:
d0:e5:b8:1f:5c:4c:bf:a7:7f:73:93:a4:8b:99:5a:
89:bf:2c:fb:51:05:27:d0:ae:34:16:01:17:ee:81:
83:ef:3c:33:1a:8c:e5:c6:89:87:87:2b:cb:44:1f:
2b:02:4a:b4:48:0e:35:98:eb:52:a8:ab:a0:d5:05:
cc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E4:AF:0D:66:70:2A:D3:8E:22:AF:32:74:36:4B:06:AE:7B:21:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e78bf3c8-20aa-3418-bdd2-45e7a676cd66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.220.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:f0:7f:cb:88:c8:b7:41:c4:3a:c0:bc:91:e7:b2:8a:2d:cb:
9b:63:02:a5:0f:59:14:f0:dd:8d:7f:19:eb:21:89:16:d4:e5:
2b:05:37:fc:8a:0b:2b:89:0f:4b:a1:d4:83:be:a9:f6:41:32:
b0:83:26:93:3d:74:73:4e:a2:4b:9a:bd:07:13:e0:78:03:e3:
bf:d5:5a:38:4d:37:7c:34:a5:e3:a6:53:d1:b9:bc:2f:69:03:
1d:b4:81:34:c1:50:b9:ab:b8:c6:13:b6:7c:e7:ca:84:03:29:
f1:b2:d6:be:c7:68:c8:45:4a:ee:2d:3f:16:39:50:5c:b1:69:
21:0b:8f:2b:8e:aa:3d:ab:0f:ad:31:dd:87:25:1f:4b:ae:48:
ab:83:5c:a9:d2:16:be:43:7c:3a:db:6b:07:02:7e:4e:98:2f:
73:ee:21:8f:73:24:6f:53:35:f8:ba:e3:ed:73:2e:7c:ee:c3:
43:12:5b:10:7c:54:b7:a4:38:a5:ba:cc:1e:14:2c:73:11:d1:
e6:32:18:1e:51:7e:1f:86:6c:79:32:6e:96:df:d2:12:d3:95:
d4:3f:a8:62:85:06:c1:79:74:71:15:8d:15:9a:40:fc:e1:34:
a2:43:d7:18:94:b2:b5:27:b9:10:cc:67:68:d4:cb:ee:2a:2c:
80:ba:08:e7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+qhO8Fl6R5tOfA1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAyMjEyMDAwMFoXDTIyMTEyNzA1MDAwMFowLzEtMCsGA1UEAxMk
YWMyOWY3NzAtOWVmNi00NzFkLTlkNDUtYjA0Y2NmMDk4MWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2VTK7fOPdVBi3unZvD0+VR9Ka1V66EbBar7
4AWYQ8jnbmljzvd+ESO2w7IJ0d748B7DLmfRE1fy2taC8bU6z3d5QR2k4ph2GC1k
/GbW+wljn+f9lotFM3YxX52bHVoSo+LmZVNCCcxq9POrlwfDOz1Pl+pWpfXnVcwN
Wm+OfTqH2hwCryFYpEI9cxy/BtCtKGQgobUfep2ac/mCOw0kGoVqTV/HIjFCo1Xv
4Cp5++7BGeRyvdIMiWl/08qd3w/cBvrQ5bgfXEy/p39zk6SLmVqJvyz7UQUn0K40
FgEX7oGD7zwzGozlxomHhyvLRB8rAkq0SA41mOtSqKug1QXMcQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFH3krw1mcCrTjiKvMnQ2SwaueyH0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZTc4YmYzYzgtMjBhYS0z
NDE4LWJkZDItNDVlN2E2NzZjZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBNNwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFPB/y4jIt0HEOsC8keeyii3Lm2MCpQ9ZFPDdjX8Z6yGJFtTlKwU3/IoL
K4kPS6HUg76p9kEysIMmkz10c06iS5q9BxPgeAPjv9VaOE03fDSl46ZT0bm8L2kD
HbSBNMFQuau4xhO2fOfKhAMp8bLWvsdoyEVK7i0/FjlQXLFpIQuPK46qPasPrTHd
hyUfS65Iq4NcqdIWvkN8OttrBwJ+Tpgvc+4hj3Mkb1M1+Lrj7XMufO7DQxJbEHxU
t6Q4pbrMHhQscxHR5jIYHlF+H4ZseTJult/SEtOV1D+oYoUGwXl0cRWNFZpA/OE0
okPXGJSytSe5EMxnaNTL7iosgLoI5w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:47:48 2025 by rpki-client