Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f3e11ece-1c35-3761-b49c-62d31e8cae77.roa
File: f3e11ece-1c35-3761-b49c-62d31e8cae77.roa (raw, json)
Hash identifier: KaYYOR4P16R8FcU+8eBz+pniNFNBpVaKAjX4vNVdPe0=
Subject key identifier: 05:AE:AE:96:83:3E:F7:63:F8:6C:66:B0:F4:70:C5:08:B0:7C:1B:44
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DA8F51C56DFB7AA8F13288180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f3e11ece-1c35-3761-b49c-62d31e8cae77.roa
Signing time: Thu 21 Apr 2022 12:00:00 +0000
ROA not before: Thu 21 Apr 2022 12:00:00 +0000
ROA not after: Fri 27 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 140.145.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a8:f5:1c:56:df:b7:aa:8f:13:28:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 21 12:00:00 2022 GMT
Not After : May 27 04:00:00 2022 GMT
Subject: CN=3bff21b7-0d2c-4d2e-96d2-e93ba3d63554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:15:66:dc:04:03:4c:37:00:99:72:e3:c5:51:
83:52:ca:2f:53:49:6e:b5:ca:ef:42:b5:26:80:a9:
7e:de:d9:35:74:33:fd:0a:e5:c9:ce:6a:ea:33:54:
6c:f8:41:f8:95:ef:cc:cf:44:33:dd:9a:2a:9e:b0:
6e:eb:3e:bb:3e:73:6e:27:1b:0f:96:37:4f:3d:47:
5f:1c:c2:89:3a:35:35:28:34:0f:e2:5c:d3:15:34:
0e:d0:c8:f2:88:1c:76:b6:10:d2:7b:5e:b9:d1:65:
d4:5b:5b:ca:5a:00:8c:18:7f:2b:e2:b8:9c:c0:bb:
db:a1:7f:69:a8:54:8a:1f:d4:d0:4c:5d:78:6f:15:
d1:aa:a4:81:55:52:29:60:5d:c9:c2:31:db:62:36:
05:aa:fd:b4:0c:1d:e0:9e:4c:65:cb:06:eb:5c:da:
bd:5c:0c:ac:9d:01:bc:e7:e1:a9:3f:3a:43:63:97:
f7:bb:e2:84:ad:c3:ba:f2:14:14:ed:5e:27:b7:bf:
18:ec:3b:61:19:8d:7f:6d:e1:dd:8b:b7:19:8a:3b:
d8:43:98:3c:ba:bb:0f:99:e1:a7:87:15:8d:7f:da:
f1:35:bd:4d:2d:19:94:ce:62:cc:3e:15:b0:67:b7:
82:fa:bd:34:e2:82:6e:91:f2:40:f3:a5:0c:84:b5:
7b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AE:AE:96:83:3E:F7:63:F8:6C:66:B0:F4:70:C5:08:B0:7C:1B:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f3e11ece-1c35-3761-b49c-62d31e8cae77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
140.145.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:a0:98:67:25:2d:fe:ae:f0:43:5a:df:b1:62:aa:f2:a6:71:
90:ce:5b:7d:30:b5:d3:33:75:36:46:db:4c:99:12:63:1c:11:
89:99:9c:4f:fc:6d:2f:80:e2:ee:15:97:f4:cc:1d:5f:11:88:
06:e2:a3:e9:6d:ec:bd:58:4b:a1:20:5a:67:61:e5:db:87:e4:
88:4e:4a:81:57:ea:7f:e8:ff:95:08:34:91:46:27:a1:86:30:
bc:01:f2:e5:e2:27:46:01:b1:01:17:00:c6:22:dd:6f:bd:19:
2f:24:37:4b:25:93:54:4a:2c:3e:33:eb:15:da:2b:34:31:dd:
07:85:b8:d7:75:2c:62:09:72:f8:a4:50:d3:02:9a:28:b7:9f:
e5:06:41:da:02:7f:c7:c0:5b:af:47:4c:d1:f8:eb:38:64:5d:
8d:20:33:c3:ea:38:dd:7d:e5:6a:db:38:1f:ad:70:7c:97:ec:
b2:ed:c3:69:33:53:19:55:f5:d7:40:07:0f:80:b6:6a:70:43:
e3:df:28:ac:ca:d6:70:b3:15:23:cc:0d:15:e8:a5:38:0c:76:
75:52:62:61:4c:5b:a3:7e:b9:c5:0b:7b:32:a5:51:be:0e:39:
4e:4e:96:ef:18:5c:08:42:18:14:a8:80:f6:07:03:6f:cd:2e:
5d:aa:54:21
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2o9RxW37eqjxMogYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQyMTEyMDAwMFoXDTIyMDUyNzA0MDAwMFowLzEtMCsGA1UEAxMk
M2JmZjIxYjctMGQyYy00ZDJlLTk2ZDItZTkzYmEzZDYzNTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xVm3AQDTDcAmXLjxVGDUsovU0lutcrvQrUm
gKl+3tk1dDP9CuXJzmrqM1Rs+EH4le/Mz0Qz3ZoqnrBu6z67PnNuJxsPljdPPUdf
HMKJOjU1KDQP4lzTFTQO0MjyiBx2thDSe1650WXUW1vKWgCMGH8r4ricwLvboX9p
qFSKH9TQTF14bxXRqqSBVVIpYF3JwjHbYjYFqv20DB3gnkxlywbrXNq9XAysnQG8
5+GpPzpDY5f3u+KErcO68hQU7V4nt78Y7DthGY1/beHdi7cZijvYQ5g8ursPmeGn
hxWNf9rxNb1NLRmUzmLMPhWwZ7eC+r004oJukfJA86UMhLV7DwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAWurpaDPvdj+GxmsPRwxQiwfBtEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZjNlMTFlY2UtMWMzNS0z
NzYxLWI0OWMtNjJkMzFlOGNhZTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjJEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAd6CYZyUt/q7wQ1rfsWKq8qZxkM5bfTC10zN1NkbbTJkSYxwRiZmcT/xt
L4Di7hWX9MwdXxGIBuKj6W3svVhLoSBaZ2Hl24fkiE5KgVfqf+j/lQg0kUYnoYYw
vAHy5eInRgGxARcAxiLdb70ZLyQ3SyWTVEosPjPrFdorNDHdB4W413UsYgly+KRQ
0wKaKLef5QZB2gJ/x8Bbr0dM0fjrOGRdjSAzw+o43X3lats4H61wfJfssu3DaTNT
GVX110AHD4C2anBD498orMrWcLMVI8wNFeilOAx2dVJiYUxbo365xQt7MqVRvg45
Tk6W7xhcCEIYFKiA9gcDb80uXapUIQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:05:28 2025 by rpki-client