![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1e7abe9-45b8-4439-9659-7af5c83bc1cc/281bc04d-11b5-3c1e-bc74-5f46981220c8.roa
File: 281bc04d-11b5-3c1e-bc74-5f46981220c8.roa (raw, json)
Hash identifier: a3RHzJC76Zo50p4T5u24b4lkgBY6vebZ9A5l3uO8nMw=
Subject key identifier: B2:66:CB:21:B6:6C:A4:EB:D4:CC:2B:BD:C1:B6:C5:78:1D:4E:6B:28
Certificate issuer: /CN=d1e7abe9-45b8-4439-9659-7af5c83bc1cc
Certificate serial: 010D0C9F4328576D51CC73C042CFC16F6D0C09AA
Authority key identifier: B4:FF:D2:34:D3:A3:FD:4D:07:17:6D:82:B4:A8:61:0C:C6:04:4D:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1e7abe9-45b8-4439-9659-7af5c83bc1cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1e7abe9-45b8-4439-9659-7af5c83bc1cc/281bc04d-11b5-3c1e-bc74-5f46981220c8.roa
Signing time: Fri 03 Jan 2020 20:15:03 +0000
ROA not before: Fri 03 Jan 2020 05:00:00 +0000
ROA not after: Thu 03 Jan 2030 05:00:00 +0000
asID: 26695
IP address blocks: 23.138.208.0/24 maxlen: 24
142.202.252.0/22 maxlen: 24
2605:8bc0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:6d:0c:09:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e7abe9-45b8-4439-9659-7af5c83bc1cc
Validity
Not Before: Jan 3 05:00:00 2020 GMT
Not After : Jan 3 05:00:00 2030 GMT
Subject: CN=0b2cb1a4-d050-44de-991c-ea699cc79982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:b1:ed:69:a5:79:9e:55:e2:55:97:2a:3d:
aa:0d:0a:6a:30:f2:a3:16:25:19:c0:c5:25:9e:48:
6c:db:3e:8f:95:0c:9c:65:d9:8e:16:78:21:6e:ce:
3b:ae:24:12:9f:b3:21:30:3e:14:3e:3b:f3:15:55:
85:d5:84:81:b5:00:b4:7a:39:90:cd:d0:b1:fd:d1:
44:6b:c4:08:7f:d8:97:cb:88:27:6a:67:70:26:24:
cf:38:ef:08:1d:07:92:6c:d2:ef:16:bf:e5:eb:1c:
74:d7:07:d5:4b:36:82:34:06:46:52:94:39:2b:e1:
72:bd:60:15:f5:c7:bd:88:db:1e:cb:20:ac:13:9e:
b5:69:88:d7:d0:b5:fe:77:3f:73:cd:cd:bc:8f:9e:
51:fd:58:94:9a:d0:9f:42:e3:86:87:2e:d8:9c:8b:
80:b9:c4:c9:0a:0a:fb:e0:ab:c4:fd:f6:37:65:40:
51:ac:a5:d3:05:b3:c2:90:bf:2e:e6:dc:0f:e5:f2:
86:b4:8c:a2:c2:c3:c1:75:92:c5:f0:0b:d3:9b:77:
6e:9d:d2:55:31:f0:ac:e7:6d:9d:a8:ce:13:89:22:
58:a9:8b:6c:b3:55:b2:e7:23:6c:1a:1a:2f:a2:73:
cf:cd:7f:df:94:a2:ea:e1:99:50:81:d5:62:62:67:
b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:66:CB:21:B6:6C:A4:EB:D4:CC:2B:BD:C1:B6:C5:78:1D:4E:6B:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1e7abe9-45b8-4439-9659-7af5c83bc1cc/281bc04d-11b5-3c1e-bc74-5f46981220c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1e7abe9-45b8-4439-9659-7af5c83bc1cc/d1e7abe9-45b8-4439-9659-7af5c83bc1cc.crl
X509v3 Authority Key Identifier:
keyid:B4:FF:D2:34:D3:A3:FD:4D:07:17:6D:82:B4:A8:61:0C:C6:04:4D:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1e7abe9-45b8-4439-9659-7af5c83bc1cc.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.208.0/24
142.202.252.0/22
IPv6:
2605:8bc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:e2:3a:0d:66:4b:c3:8e:41:c3:76:25:90:53:8b:75:8b:01:
e1:3a:0c:11:87:d0:13:db:72:ef:74:72:b2:0a:66:3b:f0:4e:
de:90:c6:ad:99:03:cb:87:29:d6:bc:17:4a:72:5c:07:16:16:
53:e4:a5:07:f9:83:80:5a:cc:bb:e2:6b:02:dd:c5:23:f2:61:
8e:45:c2:77:a7:0b:31:b2:2c:46:77:90:a1:6b:f6:db:12:06:
bd:54:3f:b5:dd:cc:36:e5:90:2d:91:c5:e7:e5:d6:75:a7:fa:
37:84:cc:ef:1b:67:a3:2b:97:74:56:10:8f:1e:cf:9a:2a:05:
86:a3:56:65:3a:20:7e:01:de:cf:79:bf:56:a8:d6:33:f4:bd:
2f:a2:8d:f0:56:68:3b:95:33:19:68:b4:12:e7:d1:6a:7d:a7:
62:bf:a6:cf:2e:56:6b:f2:87:e9:17:8f:02:9c:55:d2:93:07:
49:9f:20:d6:f9:1f:39:76:b0:8d:c5:e5:47:c7:04:99:37:d5:
f0:6f:e4:71:2d:b3:b9:07:de:82:e6:6e:32:0f:a0:51:b8:16:
d1:53:78:77:6a:f6:e5:0c:80:ec:fd:2b:73:1f:f8:ac:8c:24:
6c:3c:b4:59:72:09:fc:fc:51:24:5d:2f:a7:0c:17:00:21:04:
f2:3c:81:dc
-----BEGIN CERTIFICATE-----
MIIGVDCCBT6gAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bb20MCaowCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGQxZTdhYmU5LTQ1YjgtNDQzOS05NjU5LTdhZjVjODNiYzFj
YzAeFw0yMDAxMDMwNTAwMDBaFw0zMDAxMDMwNTAwMDBaMC8xLTArBgNVBAMTJDBi
MmNiMWE0LWQwNTAtNDRkZS05OTFjLWVhNjk5Y2M3OTk4MjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMDvse1ppXmeVeJVlyo9qg0KajDyoxYlGcDFJZ5I
bNs+j5UMnGXZjhZ4IW7OO64kEp+zITA+FD478xVVhdWEgbUAtHo5kM3Qsf3RRGvE
CH/Yl8uIJ2pncCYkzzjvCB0HkmzS7xa/5escdNcH1Us2gjQGRlKUOSvhcr1gFfXH
vYjbHssgrBOetWmI19C1/nc/c83NvI+eUf1YlJrQn0Ljhocu2JyLgLnEyQoK++Cr
xP32N2VAUayl0wWzwpC/LubcD+XyhrSMosLDwXWSxfAL05t3bp3SVTHwrOdtnajO
E4kiWKmLbLNVsucjbBoaL6Jzz81/35Si6uGZUIHVYmJnt7cCAwEAAaOCA2owggNm
MB0GA1UdDgQWBBSyZsshtmyk69TMK73BtsV4HU5rKDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDFlN2Fi
ZTktNDViOC00NDM5LTk2NTktN2FmNWM4M2JjMWNjLzI4MWJjMDRkLTExYjUtM2Mx
ZS1iYzc0LTVmNDY5ODEyMjBjOC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2QxZTdhYmU5LTQ1YjgtNDQzOS05NjU5
LTdhZjVjODNiYzFjYy9kMWU3YWJlOS00NWI4LTQ0MzktOTY1OS03YWY1YzgzYmMx
Y2MuY3JsMB8GA1UdIwQYMBaAFLT/0jTTo/1NBxdtgrSoYQzGBE0JMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvZDFlN2FiZTktNDViOC00NDM5LTk2NTktN2FmNWM4
M2JjMWNjLmNlcjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEABeK0AMEAo7K
/DANBAIAAjAHAwUAJgWLwDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI
KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw
cy5odG1sMAsGCSqGSIb3DQEBCwOCAQEANeI6DWZLw45Bw3YlkFOLdYsB4ToMEYfQ
E9ty73RysgpmO/BO3pDGrZkDy4cp1rwXSnJcBxYWU+SlB/mDgFrMu+JrAt3FI/Jh
jkXCd6cLMbIsRneQoWv22xIGvVQ/td3MNuWQLZHF5+XWdaf6N4TM7xtnoyuXdFYQ
jx7PmioFhqNWZTogfgHez3m/VqjWM/S9L6KN8FZoO5UzGWi0EufRan2nYr+mzy5W
a/KH6RePApxV0pMHSZ8g1vkfOXawjcXlR8cEmTfV8G/kcS2zuQfeguZuMg+gUbgW
0VN4d2r25QyA7P0rcx/4rIwkbDy0WXIJ/PxRJF0vpwwXACEE8jyB3A==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:56 2025 by rpki-client