Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eee26f6d-6b03-3cac-ae4c-037ddd28968e.roa
File: eee26f6d-6b03-3cac-ae4c-037ddd28968e.roa (raw, json)
Hash identifier: bEvbsETMcLJuvEwGxkQfsWYdH4xCsjNtGLaqapchgNY=
Subject key identifier: 26:82:E0:82:FA:B5:D1:3D:03:27:45:13:58:C8:DD:5A:1D:6B:39:93
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CB490719225DB27AFBCAE2DC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eee26f6d-6b03-3cac-ae4c-037ddd28968e.roa
Signing time: Tue 25 Jan 2022 05:00:00 +0000
ROA not before: Tue 25 Jan 2022 05:00:00 +0000
ROA not after: Tue 01 Mar 2022 05:00:00 +0000
asID: 14618
IP address blocks: 3.0.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:b4:90:71:92:25:db:27:af:bc:ae:2d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 25 05:00:00 2022 GMT
Not After : Mar 1 05:00:00 2022 GMT
Subject: CN=9f4c3ea2-e99d-463a-86f8-673afa00d7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a9:7a:45:10:a1:cf:9f:85:c8:1b:78:ac:17:
33:63:1d:5e:f3:fe:52:45:b7:d2:38:86:d6:67:8b:
95:f3:4f:55:91:b1:ac:48:d3:3b:76:da:74:d6:c8:
a1:f6:81:09:f6:08:14:55:c9:10:d7:e3:1a:11:94:
e5:c7:55:ee:3b:70:35:01:06:eb:ba:91:74:04:f7:
6c:8a:fa:22:a3:57:29:5f:f5:d7:9f:0e:69:8e:85:
91:80:be:c8:34:69:26:46:1b:e1:5d:f5:a0:6c:1c:
92:53:66:25:af:68:fd:bd:f8:75:64:81:fd:c0:00:
8e:44:e7:27:72:8c:53:ce:94:64:7c:b8:28:39:c2:
52:c1:29:e5:b3:c4:f7:73:05:12:5b:5e:ef:f3:ba:
69:cf:18:c7:72:8b:03:90:23:c4:b6:40:95:7b:d3:
b5:47:8f:bd:0a:0d:7d:60:bc:ee:4f:36:70:1a:e5:
ca:19:49:02:70:f7:fd:ee:9e:6d:54:8e:1a:02:a7:
c2:05:a0:1f:0d:87:a5:c5:98:b1:a6:8b:32:e9:36:
b5:87:3d:de:23:01:a2:e2:78:19:b5:09:90:ef:a9:
bf:b9:43:1f:32:81:c6:f9:8e:2e:1c:45:2c:58:ff:
ee:db:b9:29:61:f4:ed:8d:62:e8:40:e6:67:98:6d:
56:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:82:E0:82:FA:B5:D1:3D:03:27:45:13:58:C8:DD:5A:1D:6B:39:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eee26f6d-6b03-3cac-ae4c-037ddd28968e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.0.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:22:85:51:8d:ee:1d:8b:da:b7:0a:42:d5:fe:f4:49:2c:da:
da:99:f2:96:26:28:81:c5:5b:2d:d0:f4:a6:ac:20:9f:27:95:
d8:b6:56:24:a0:27:4e:76:7d:e8:4b:ed:d3:b0:f8:52:6d:da:
bb:a2:e4:b4:12:b9:2e:bf:86:fb:d8:62:a8:4d:e9:4b:be:e6:
80:75:62:9d:c0:83:1e:36:f7:ea:cb:a7:ba:bf:1a:ea:fb:b9:
e5:fc:a6:dc:e5:3f:ab:ba:6c:0b:52:9d:0f:77:08:80:d5:5a:
ec:fb:09:d2:bf:15:2e:81:65:69:7d:ee:e2:ff:36:40:84:e2:
f7:5c:e0:9f:b4:56:81:3c:eb:23:fe:01:92:1a:d3:36:16:b6:
39:44:2e:85:ac:4a:49:2b:a8:0b:67:68:fc:62:3b:59:b8:45:
79:ff:14:2c:6e:34:32:72:3a:db:a9:f3:a1:97:c2:a8:65:11:
a9:a0:e2:ac:42:74:42:2b:0c:a2:ae:70:d2:a4:bf:cc:6a:61:
4f:22:8c:3a:cf:59:bf:85:ef:c8:92:5c:17:ee:3b:8e:4e:10:
cd:58:5b:8f:5c:ea:ca:c1:08:02:36:da:ca:a4:0a:8a:19:57:
a7:62:d2:06:9b:26:43:d9:07:ee:07:30:8c:bb:ae:c3:ba:5d:
29:0e:53:6b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDy0kHGSJdsnr7yuLcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDEyNTA1MDAwMFoXDTIyMDMwMTA1MDAwMFowLzEtMCsGA1UEAxMk
OWY0YzNlYTItZTk5ZC00NjNhLTg2ZjgtNjczYWZhMDBkN2Q2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKl6RRChz5+FyBt4rBczYx1e8/5SRbfSOIbW
Z4uV809VkbGsSNM7dtp01sih9oEJ9ggUVckQ1+MaEZTlx1XuO3A1AQbrupF0BPds
ivoio1cpX/XXnw5pjoWRgL7INGkmRhvhXfWgbBySU2Ylr2j9vfh1ZIH9wACOROcn
coxTzpRkfLgoOcJSwSnls8T3cwUSW17v87ppzxjHcosDkCPEtkCVe9O1R4+9Cg19
YLzuTzZwGuXKGUkCcPf97p5tVI4aAqfCBaAfDYelxZixposy6Ta1hz3eIwGi4ngZ
tQmQ76m/uUMfMoHG+Y4uHEUsWP/u27kpYfTtjWLoQOZnmG1WJQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCaC4IL6tdE9AydFE1jI3VodazmTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZWVlMjZmNmQtNmIwMy0z
Y2FjLWFlNGMtMDM3ZGRkMjg5NjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMGAwAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAiyKFUY3uHYvatwpC1f70SSza2pnyliYogcVbLdD0pqwgnyeV2LZWJKAn
TnZ96Evt07D4Um3au6LktBK5Lr+G+9hiqE3pS77mgHVincCDHjb36sunur8a6vu5
5fym3OU/q7psC1KdD3cIgNVa7PsJ0r8VLoFlaX3u4v82QITi91zgn7RWgTzrI/4B
khrTNha2OUQuhaxKSSuoC2do/GI7WbhFef8ULG40MnI626nzoZfCqGURqaDirEJ0
QisMoq5w0qS/zGphTyKMOs9Zv4XvyJJcF+47jk4QzVhbj1zqysEIAjbayqQKihlX
p2LSBpsmQ9kH7gcwjLuuw7pdKQ5Taw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:41:37 2025 by rpki-client