Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/76cb4d9b-b4ca-3c58-8a4d-2302fa2cf32b.roa
File: 76cb4d9b-b4ca-3c58-8a4d-2302fa2cf32b.roa (raw, json)
Hash identifier: hr2sG27NMWL+cRhN2ehBDmEvQpZ3+oCbAQWuMboyeI0=
Subject key identifier: 54:9A:33:38:22:14:6C:E7:9C:9B:5B:12:83:89:14:16:23:85:ED:7D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840BC57C115D59093ABE156E900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/76cb4d9b-b4ca-3c58-8a4d-2302fa2cf32b.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.220.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bc:57:c1:15:d5:90:93:ab:e1:56:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=f5fde934-ce89-49fc-9c9d-f749de2d3ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:98:e9:78:40:e0:0c:98:26:b5:2d:ef:10:45:
94:1a:6d:d2:b7:a6:af:0d:56:ef:cd:f5:d1:42:33:
ff:69:e0:52:06:e5:2e:87:65:84:8f:89:82:25:8e:
69:49:81:ca:9c:a2:2f:d7:1d:3a:2e:ab:39:2d:7a:
79:e2:59:f8:17:00:8e:8e:b2:b9:ca:b9:5b:fb:e4:
03:0f:0e:da:b9:06:38:95:91:5d:de:03:9f:27:7e:
a0:ce:3e:7b:d3:b0:21:28:46:55:6d:ac:0d:00:de:
37:51:f3:61:db:cb:9f:3e:05:b6:0f:fb:8d:b8:53:
8c:79:31:0c:c9:42:83:ac:4a:22:55:9b:84:aa:ec:
03:85:32:5b:ff:18:7a:55:56:46:58:84:b6:57:4e:
ba:80:d9:9c:dc:59:f9:1c:c8:c3:c1:2c:f9:95:e0:
d2:a5:41:82:46:c2:e0:6d:e7:74:7d:b9:f4:f2:e7:
41:30:d1:1f:2a:88:45:44:be:8a:44:46:60:2f:94:
0d:d1:40:16:6c:f1:90:b8:61:66:fe:e4:4c:35:2f:
14:e1:f2:60:dd:ed:c7:34:46:f8:ab:04:9a:47:bd:
22:e2:48:73:31:b9:eb:b8:dc:42:e5:74:7c:73:c7:
8b:70:6f:96:00:1d:02:bf:8c:55:ef:54:25:52:0d:
d6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9A:33:38:22:14:6C:E7:9C:9B:5B:12:83:89:14:16:23:85:ED:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/76cb4d9b-b4ca-3c58-8a4d-2302fa2cf32b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.220.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:e9:43:b6:23:27:b1:1b:00:ca:53:cd:65:66:ad:74:c5:5d:
b2:8c:a4:96:e8:18:5b:84:92:ab:30:92:2d:87:6c:51:8f:13:
b2:57:fd:80:3d:f7:2e:ca:66:e7:b7:42:8a:91:68:f2:cc:8f:
58:fd:01:42:d4:f3:02:a8:bf:88:cd:cc:e6:f0:91:f4:ae:65:
2c:f4:3b:00:3c:e8:1b:f5:ef:1e:c5:4c:78:91:ac:ca:53:4f:
7b:34:d9:d2:fe:2e:f3:31:3b:a6:10:c3:0f:3a:4f:4c:ab:23:
2b:0f:f5:a3:93:09:39:58:30:d1:e0:fb:35:18:66:4b:d6:69:
d9:e2:6c:56:7b:80:04:e3:85:d8:ca:31:0e:28:6a:18:5e:99:
49:f1:6c:c1:b3:e0:db:b5:cf:cc:9e:9c:51:05:95:c0:3e:38:
4e:7e:b0:e9:fe:8d:10:40:df:1c:50:4d:80:aa:1a:1d:78:86:
b4:d9:07:cb:31:6b:ed:22:e0:83:cb:93:59:3e:ea:10:fb:11:
6a:ea:bb:b9:42:20:50:83:92:37:cc:73:be:61:ff:8d:eb:27:
96:81:dd:03:d0:a9:17:8a:2b:2d:6f:db:54:5e:52:e3:ca:80:
7e:51:6f:de:17:9f:ca:e4:ec:f1:91:23:f5:5e:86:ea:de:2d:
cd:60:5c:36
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEC8V8EV1ZCTq+FW6QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEyODEyMDAwMFoXDTIzMDMwNTA1MDAwMFowLzEtMCsGA1UEAxMk
ZjVmZGU5MzQtY2U4OS00OWZjLTljOWQtZjc0OWRlMmQzY2UzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZjpeEDgDJgmtS3vEEWUGm3St6avDVbvzfXR
QjP/aeBSBuUuh2WEj4mCJY5pSYHKnKIv1x06Lqs5LXp54ln4FwCOjrK5yrlb++QD
Dw7auQY4lZFd3gOfJ36gzj5707AhKEZVbawNAN43UfNh28ufPgW2D/uNuFOMeTEM
yUKDrEoiVZuEquwDhTJb/xh6VVZGWIS2V066gNmc3Fn5HMjDwSz5leDSpUGCRsLg
bed0fbn08udBMNEfKohFRL6KREZgL5QN0UAWbPGQuGFm/uRMNS8U4fJg3e3HNEb4
qwSaR70i4khzMbnruNxC5XR8c8eLcG+WAB0Cv4xV71QlUg3WTQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFSaMzgiFGznnJtbEoOJFBYjhe19MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNzZjYjRkOWItYjRjYS0z
YzU4LThhNGQtMjMwMmZhMmNmMzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBNtwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAC+lDtiMnsRsAylPNZWatdMVdsoyklugYW4SSqzCSLYdsUY8Tslf9gD33
Lspm57dCipFo8syPWP0BQtTzAqi/iM3M5vCR9K5lLPQ7ADzoG/XvHsVMeJGsylNP
ezTZ0v4u8zE7phDDDzpPTKsjKw/1o5MJOVgw0eD7NRhmS9Zp2eJsVnuABOOF2Mox
DihqGF6ZSfFswbPg27XPzJ6cUQWVwD44Tn6w6f6NEEDfHFBNgKoaHXiGtNkHyzFr
7SLgg8uTWT7qEPsRauq7uUIgUIOSN8xzvmH/jesnloHdA9CpF4orLW/bVF5S48qA
flFv3hefyuTs8ZEj9V6G6t4tzWBcNg==
-----END CERTIFICATE-----
Generated at Fri Mar 14 14:53:08 2025 by rpki-client