Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f8ede984-ec36-3eac-a630-d1feb1dee194.roa
File: f8ede984-ec36-3eac-a630-d1feb1dee194.roa (raw, json)
Hash identifier: Y79Kxlj77dDL1VwzdOYJhHV2MWfe7CSmemv8xBoeZxQ=
Subject key identifier: F5:00:12:11:35:CF:1B:70:92:6F:3B:93:06:92:F0:AA:A5:44:4A:B2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FEC80F9B91A70D7F3D501D380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f8ede984-ec36-3eac-a630-d1feb1dee194.roa
Signing time: Tue 15 Nov 2022 12:00:00 +0000
ROA not before: Tue 15 Nov 2022 12:00:00 +0000
ROA not after: Wed 21 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 3.192.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ec:80:f9:b9:1a:70:d7:f3:d5:01:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 15 12:00:00 2022 GMT
Not After : Dec 21 05:00:00 2022 GMT
Subject: CN=adce00be-9149-4e00-9c1e-e1a8ae5939a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9a:28:15:04:52:d4:df:f0:7a:ae:0d:f7:a7:
74:65:07:02:df:35:38:3b:34:1a:d0:b8:66:f0:db:
af:86:2f:99:e6:d6:68:21:b0:d5:de:e1:4d:52:f4:
2a:fe:40:9c:f1:fb:42:7c:39:15:28:02:68:8d:8e:
ad:61:de:be:0c:1a:23:f7:85:ed:5d:3d:7d:de:a8:
64:b0:e2:9c:53:68:d3:c5:ae:96:c0:05:65:f3:7d:
af:4d:2b:d3:d0:91:ab:5f:97:f1:fb:a3:6a:c3:1d:
a1:0d:f7:66:8e:b1:67:3a:4c:70:8a:31:e6:45:0b:
0d:c0:e6:8d:5b:29:54:9c:fa:22:f5:58:72:36:84:
b6:84:36:a6:16:d2:93:1c:ab:72:92:1c:23:41:64:
e9:a7:3c:11:be:2f:5c:1b:6c:9d:b7:fb:9f:19:d8:
f4:86:c6:68:99:d0:c8:92:fb:9e:aa:2e:34:c0:93:
29:28:17:10:12:38:ef:9b:63:d5:2c:09:7d:a5:d5:
43:d1:21:ca:2c:4e:69:32:2b:e9:cc:57:6e:39:c3:
62:d2:02:ab:a2:ed:1c:eb:71:c0:1a:7d:dc:2a:a0:
c0:d2:11:02:e6:c0:fa:9f:26:ff:3a:c6:85:58:c8:
dd:ab:d9:dc:fb:bc:e1:2f:24:15:ac:8a:aa:ec:13:
98:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:00:12:11:35:CF:1B:70:92:6F:3B:93:06:92:F0:AA:A5:44:4A:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f8ede984-ec36-3eac-a630-d1feb1dee194.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.192.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:73:9a:c6:2a:10:af:5b:33:9a:39:a0:36:51:0f:18:fc:81:
04:12:2a:1c:1f:88:02:01:07:41:0b:17:6f:c4:4b:0f:e1:24:
d0:fe:00:db:f8:93:7d:5b:51:dd:3b:4f:8d:6f:c2:33:21:0f:
d3:f7:19:98:58:1b:9f:af:3b:7e:e5:f5:54:30:83:b0:76:88:
59:08:c9:dd:90:a4:f7:5e:40:ea:df:8a:a6:c1:04:64:3d:10:
81:a5:39:44:ee:2d:57:db:52:ee:ba:1a:f6:4d:29:22:2e:b9:
36:79:20:6d:a2:ae:1a:dc:50:ce:1a:9c:df:53:a1:d3:ff:14:
64:53:0c:d5:ee:39:fc:e1:9c:a9:e3:43:cb:20:7f:93:53:db:
d6:28:cc:7e:df:82:ce:29:c9:f1:a7:03:5b:b9:c4:56:7e:93:
b5:77:37:24:e3:30:bd:9d:3c:53:91:72:4b:31:56:fb:25:14:
9c:16:69:c1:71:3f:ff:a0:e0:d4:ef:d4:69:94:d5:7e:9b:b9:
e0:e6:d6:93:86:04:25:5f:86:d1:ff:69:e2:82:a0:86:cd:c3:
e2:47:e9:ea:c9:d2:84:9a:a4:e8:e8:77:73:ed:8b:a3:06:30:
92:57:05:f7:b7:b3:5c:2c:90:eb:52:3a:db:38:e8:5d:51:2c:
6d:fb:11:e1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/sgPm5GnDX89UB04AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTExNTEyMDAwMFoXDTIyMTIyMTA1MDAwMFowLzEtMCsGA1UEAxMk
YWRjZTAwYmUtOTE0OS00ZTAwLTljMWUtZTFhOGFlNTkzOWExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5ooFQRS1N/weq4N96d0ZQcC3zU4OzQa0Lhm
8Nuvhi+Z5tZoIbDV3uFNUvQq/kCc8ftCfDkVKAJojY6tYd6+DBoj94XtXT193qhk
sOKcU2jTxa6WwAVl832vTSvT0JGrX5fx+6Nqwx2hDfdmjrFnOkxwijHmRQsNwOaN
WylUnPoi9VhyNoS2hDamFtKTHKtykhwjQWTppzwRvi9cG2ydt/ufGdj0hsZomdDI
kvueqi40wJMpKBcQEjjvm2PVLAl9pdVD0SHKLE5pMivpzFduOcNi0gKrou0c63HA
Gn3cKqDA0hEC5sD6nyb/OsaFWMjdq9nc+7zhLyQVrIqq7BOYmwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPUAEhE1zxtwkm87kwaS8KqlREqyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZjhlZGU5ODQtZWMzNi0z
ZWFjLWE2MzAtZDFmZWIxZGVlMTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMGA8AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAknOaxioQr1szmjmgNlEPGPyBBBIqHB+IAgEHQQsXb8RLD+Ek0P4A2/iT
fVtR3TtPjW/CMyEP0/cZmFgbn687fuX1VDCDsHaIWQjJ3ZCk915A6t+KpsEEZD0Q
gaU5RO4tV9tS7roa9k0pIi65NnkgbaKuGtxQzhqc31Oh0/8UZFMM1e45/OGcqeND
yyB/k1Pb1ijMft+CzinJ8acDW7nEVn6TtXc3JOMwvZ08U5FySzFW+yUUnBZpwXE/
/6Dg1O/UaZTVfpu54ObWk4YEJV+G0f9p4oKghs3D4kfp6snShJqk6Oh3c+2LowYw
klcF97ezXCyQ61I62zjoXVEsbfsR4Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:30:46 2025 by rpki-client