Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f120b1f8-1e64-3aee-a3a2-edb8c4297708.roa
File: f120b1f8-1e64-3aee-a3a2-edb8c4297708.roa (raw, json)
Hash identifier: 7H0r5cYb4jcqHrSPTgIZnAF+M7FUizhLtjzf6NrKAjY=
Subject key identifier: F0:F5:ED:A2:3C:88:64:75:5D:01:9A:56:A9:7B:FC:2A:B4:35:8D:9C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD8CE409AF7CA58DC5DEAA80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f120b1f8-1e64-3aee-a3a2-edb8c4297708.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 54.80.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:8c:e4:09:af:7c:a5:8d:c5:de:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=3cf6b58f-edf4-4464-93f7-4b4779d55e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a5:28:42:9d:b9:a5:57:94:78:da:e0:34:df:
b7:ed:a4:97:3b:9f:4e:b6:fd:cc:54:db:e0:10:8f:
42:0f:78:18:04:ae:d9:e6:67:c0:e6:12:c5:be:78:
83:31:85:62:64:a7:b4:dc:f9:ab:d9:26:df:49:cf:
fc:14:30:54:5f:c5:9c:2d:6e:5b:e4:d2:2b:1a:17:
cb:ae:d9:f3:36:75:ba:1d:3d:ad:1f:90:b3:bc:8f:
04:7b:48:d8:15:da:46:4d:6f:c0:3b:97:1d:62:8e:
7e:bb:66:25:d4:ef:99:40:db:b2:54:27:02:e6:d9:
9f:b9:48:fe:e9:fb:e2:20:5f:2d:3f:77:0b:9c:1e:
97:b0:d5:69:04:34:6b:61:aa:ef:ca:3f:dc:ed:96:
23:7c:f8:30:be:29:5d:d2:7b:11:52:2f:f7:fe:b3:
81:05:27:f6:40:ab:b5:5d:80:9b:02:25:a1:1d:96:
59:37:2f:73:27:50:62:05:9a:fc:39:78:77:0b:ff:
c2:81:36:fd:37:de:0a:a9:14:d1:35:4c:87:25:1a:
8d:dc:b5:b5:ba:ef:f7:5a:19:1d:8e:1d:fe:52:a6:
e8:b3:73:70:a4:35:ce:2c:84:d3:8b:68:7d:0e:12:
c2:2b:57:a4:f6:0d:8e:53:a0:1e:db:b9:2d:3a:df:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F5:ED:A2:3C:88:64:75:5D:01:9A:56:A9:7B:FC:2A:B4:35:8D:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f120b1f8-1e64-3aee-a3a2-edb8c4297708.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.80.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:ec:c5:c4:bc:da:5c:f3:f2:6a:93:4c:a6:3f:74:27:80:2b:
22:94:31:00:1c:51:42:16:40:55:8b:2b:e8:b7:46:f4:71:b7:
28:53:e5:7f:cc:d4:89:91:67:8a:85:31:6a:c6:07:5c:ff:2f:
e4:f8:7b:2b:04:33:0b:66:0c:e7:cb:44:a8:e5:4d:a1:a7:9d:
40:98:84:d1:c4:7e:94:71:49:f7:d2:02:b4:6e:14:77:c3:e9:
79:8b:ae:fc:d5:e7:9d:97:38:28:7c:a1:e4:5f:df:24:f0:cb:
d1:09:0a:1a:03:95:06:d8:5f:fd:25:16:36:3a:ff:5c:11:cd:
30:d1:e4:ec:e7:13:a2:a7:98:c0:44:58:8a:ff:ef:2b:c8:de:
56:b8:a5:44:17:0e:7e:aa:38:a1:ed:bb:08:6b:c7:39:a4:64:
07:fd:b7:e6:63:0c:d3:6f:96:28:6b:fd:2d:a1:5a:b1:e0:34:
94:e1:d4:32:4b:87:e5:4a:d6:6a:68:91:07:e6:12:1b:d7:df:
17:31:5b:f7:88:f2:88:38:23:f6:bd:70:08:5a:f4:30:1e:bd:
e3:73:f4:cf:e6:fa:58:b2:36:b7:02:e9:d6:69:b9:b9:80:2d:
43:83:f0:a6:06:a2:49:84:f3:5a:e2:1e:b7:09:59:74:71:42:
61:2d:64:24
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDy9jOQJr3yljcXeqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDEyODA1MDAwMFoXDTIyMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
M2NmNmI1OGYtZWRmNC00NDY0LTkzZjctNGI0Nzc5ZDU1ZTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqUoQp25pVeUeNrgNN+37aSXO59Otv3MVNvg
EI9CD3gYBK7Z5mfA5hLFvniDMYViZKe03Pmr2SbfSc/8FDBUX8WcLW5b5NIrGhfL
rtnzNnW6HT2tH5CzvI8Ee0jYFdpGTW/AO5cdYo5+u2Yl1O+ZQNuyVCcC5tmfuUj+
6fviIF8tP3cLnB6XsNVpBDRrYarvyj/c7ZYjfPgwvild0nsRUi/3/rOBBSf2QKu1
XYCbAiWhHZZZNy9zJ1BiBZr8OXh3C//CgTb9N94KqRTRNUyHJRqN3LW1uu/3Whkd
jh3+Uqbos3NwpDXOLITTi2h9DhLCK1ek9g2OU6Ae27ktOt9MCQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPD17aI8iGR1XQGaVql7/Cq0NY2cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZjEyMGIxZjgtMWU2NC0z
YWVlLWEzYTItZWRiOGM0Mjk3NzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMENlAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKOzFxLzaXPPyapNMpj90J4ArIpQxABxRQhZAVYsr6LdG9HG3KFPlf8zU
iZFnioUxasYHXP8v5Ph7KwQzC2YM58tEqOVNoaedQJiE0cR+lHFJ99ICtG4Ud8Pp
eYuu/NXnnZc4KHyh5F/fJPDL0QkKGgOVBthf/SUWNjr/XBHNMNHk7OcToqeYwERY
iv/vK8jeVrilRBcOfqo4oe27CGvHOaRkB/235mMM02+WKGv9LaFaseA0lOHUMkuH
5UrWamiRB+YSG9ffFzFb94jyiDgj9r1wCFr0MB6943P0z+b6WLI2twLp1mm5uYAt
Q4PwpgaiSYTzWuIetwlZdHFCYS1kJA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:34:22 2025 by rpki-client