Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eb793126-d3ff-308f-83d9-5561e0b6a3b6.roa
File: eb793126-d3ff-308f-83d9-5561e0b6a3b6.roa (raw, json)
Hash identifier: ktlLxXTvpEiwtKGjGWB9AbvbedexuJrbYYzl73ST/Y4=
Subject key identifier: BE:A8:69:7B:BB:BB:61:0B:8C:43:A5:BA:F3:B1:D0:87:9E:A6:8A:02
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D68320C1E0BF35109A917B000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eb793126-d3ff-308f-83d9-5561e0b6a3b6.roa
Signing time: Wed 30 Mar 2022 04:00:00 +0000
ROA not before: Wed 30 Mar 2022 04:00:00 +0000
ROA not after: Wed 04 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 158.141.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:68:32:0c:1e:0b:f3:51:09:a9:17:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 30 04:00:00 2022 GMT
Not After : May 4 04:00:00 2022 GMT
Subject: CN=4034a083-9e05-4815-b02d-353febaad4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:85:d9:ee:4f:f6:3d:e4:52:15:9c:a0:3c:a2:
57:d1:d2:96:d8:7f:60:d7:c4:19:b7:cc:56:a2:ea:
6b:71:8d:73:ec:00:ad:58:14:89:81:b6:0c:7d:20:
a9:fb:f2:68:8f:2b:b6:7d:67:25:58:c8:73:34:fa:
66:b4:2a:01:57:63:84:9d:41:b8:f9:17:81:a7:cc:
f2:42:39:ed:39:9b:92:96:94:1e:39:26:89:8b:00:
f7:2a:6d:58:94:44:d1:54:6c:48:75:3a:2c:ae:72:
2e:22:b2:c8:27:66:18:1d:b9:37:cc:29:3b:ff:73:
ad:a6:70:2a:90:c4:c5:f9:2a:40:c2:f3:5c:1c:99:
ef:54:3b:49:ec:c7:3c:28:ef:0c:ec:27:70:74:41:
3e:25:7c:84:fa:ce:60:91:57:c4:8c:ae:c9:a1:fb:
58:7f:1f:f2:0f:d4:1f:c8:5c:24:0f:ad:5e:56:7e:
5b:e7:b4:f6:d7:9b:30:e2:d6:52:6d:d4:2b:d8:ae:
0d:b8:89:ed:82:b9:d5:b2:93:81:c9:55:56:6c:34:
41:7a:d9:fe:e4:40:c5:24:5c:d0:3c:c4:5c:14:a0:
74:65:40:cd:00:da:9c:63:fe:d5:8a:24:43:15:b8:
54:6a:0c:6d:3e:4b:cb:d8:0e:5d:c7:47:3b:ca:a3:
ff:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A8:69:7B:BB:BB:61:0B:8C:43:A5:BA:F3:B1:D0:87:9E:A6:8A:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eb793126-d3ff-308f-83d9-5561e0b6a3b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
158.141.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:c0:d5:fa:b1:21:96:22:26:04:09:02:ea:ff:ab:11:c6:a3:
6a:31:6e:6f:98:f7:03:c0:4d:dc:da:8a:45:88:53:a2:34:45:
34:50:0a:5a:a9:67:e0:70:b8:35:92:c8:60:3c:2d:be:9b:37:
8d:2d:50:0e:d2:10:d8:15:c4:70:6f:70:f7:51:bb:dc:a3:3d:
70:fb:be:59:63:27:31:e2:56:25:c1:fa:76:95:6e:19:6d:6a:
f8:d3:ac:a9:de:e7:9a:19:98:01:eb:2c:ba:69:21:51:d9:a4:
b3:f4:f9:b5:88:ba:8e:43:ec:a5:f8:47:26:7b:12:e3:be:f4:
90:99:fe:fb:09:3d:0d:f1:ac:17:99:58:2e:cd:34:60:16:9f:
0e:05:c0:f6:ae:d0:bd:ba:63:4c:a8:32:d3:e0:0c:9e:78:cc:
35:e8:36:5f:1e:a8:b4:ad:3b:93:99:07:f5:13:a1:03:a7:9b:
7d:f9:dd:6d:7a:d2:90:e9:61:b9:02:c1:74:51:da:36:d6:26:
53:01:83:8c:0c:20:c1:c9:46:bb:80:89:ba:78:5c:0a:60:f9:
10:c4:c8:1c:34:56:fb:84:70:04:43:9d:e7:bb:f4:fe:b9:5b:
ba:c7:d8:14:c9:f4:9d:fe:55:1b:46:64:bd:2b:be:ea:04:2a:
1e:0e:9f:37
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1oMgweC/NRCakXsAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMzMDA0MDAwMFoXDTIyMDUwNDA0MDAwMFowLzEtMCsGA1UEAxMk
NDAzNGEwODMtOWUwNS00ODE1LWIwMmQtMzUzZmViYWFkNGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44XZ7k/2PeRSFZygPKJX0dKW2H9g18QZt8xW
ouprcY1z7ACtWBSJgbYMfSCp+/Jojyu2fWclWMhzNPpmtCoBV2OEnUG4+ReBp8zy
QjntOZuSlpQeOSaJiwD3Km1YlETRVGxIdTosrnIuIrLIJ2YYHbk3zCk7/3OtpnAq
kMTF+SpAwvNcHJnvVDtJ7Mc8KO8M7CdwdEE+JXyE+s5gkVfEjK7JoftYfx/yD9Qf
yFwkD61eVn5b57T215sw4tZSbdQr2K4NuIntgrnVspOByVVWbDRBetn+5EDFJFzQ
PMRcFKB0ZUDNANqcY/7ViiRDFbhUagxtPkvL2A5dx0c7yqP/TQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFL6oaXu7u2ELjEOluvOx0IeepooCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZWI3OTMxMjYtZDNmZi0z
MDhmLTgzZDktNTU2MWUwYjZhM2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAno0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgcDV+rEhliImBAkC6v+rEcajajFub5j3A8BN3NqKRYhTojRFNFAKWqln
4HC4NZLIYDwtvps3jS1QDtIQ2BXEcG9w91G73KM9cPu+WWMnMeJWJcH6dpVuGW1q
+NOsqd7nmhmYAessumkhUdmks/T5tYi6jkPspfhHJnsS4770kJn++wk9DfGsF5lY
Ls00YBafDgXA9q7QvbpjTKgy0+AMnnjMNeg2Xx6otK07k5kH9ROhA6ebffndbXrS
kOlhuQLBdFHaNtYmUwGDjAwgwclGu4CJunhcCmD5EMTIHDRW+4RwBEOd57v0/rlb
usfYFMn0nf5VG0ZkvSu+6gQqHg6fNw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 18:49:14 2025 by rpki-client