Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02bd070b-1de4-3589-96f6-a31d9e3447ce.roa
File: 02bd070b-1de4-3589-96f6-a31d9e3447ce.roa (raw, json)
Hash identifier: ExZKLm2Fdyr7fWiO5h8rSeJVkCxLDyvHgjI2HXw0EwQ=
Subject key identifier: 5F:09:4B:D8:05:24:36:A5:47:DD:D8:B7:3B:7E:8D:4C:06:82:09:73
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B72A595740F4B911FEBB45C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02bd070b-1de4-3589-96f6-a31d9e3447ce.roa
Signing time: Thu 26 Jan 2023 12:00:00 +0000
ROA not before: Thu 26 Jan 2023 12:00:00 +0000
ROA not after: Fri 03 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 152.25.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b7:2a:59:57:40:f4:b9:11:fe:bb:45:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 26 12:00:00 2023 GMT
Not After : Mar 3 05:00:00 2023 GMT
Subject: CN=a905bdad-dd82-4279-b61f-d428728ad631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:48:2a:26:e2:08:19:15:5c:47:65:78:49:7d:
f1:ab:ac:ab:0b:c9:2f:32:3c:5b:7b:9d:dc:6b:73:
14:c9:08:a2:0d:ec:e3:c2:7b:fa:9d:d2:0b:dd:e5:
8c:31:fe:3b:86:9f:20:2d:53:15:92:c1:00:96:f8:
be:e8:64:00:28:5f:a5:65:fb:63:9a:eb:67:cf:b5:
e8:58:95:2b:e5:bd:c5:bd:d6:3a:18:d9:93:27:60:
f4:d5:27:4b:c9:05:27:96:37:1a:b4:45:f4:c0:cc:
a6:48:86:5c:50:8f:5f:ce:c5:0d:12:68:ab:88:ca:
44:a7:7f:fd:17:e9:a9:7d:be:04:5d:aa:9c:52:a8:
76:e3:d7:c4:95:1f:1b:c1:bb:81:51:83:da:69:85:
ca:fc:2c:31:9c:be:46:73:b3:23:12:49:dc:bf:b6:
4e:5e:a6:33:ba:62:64:9c:7d:5c:a2:f0:2a:fe:ca:
c7:43:9f:91:9a:7c:84:c7:62:e6:b9:4c:5f:97:e4:
4c:c5:46:c0:2a:dd:85:16:6f:67:05:86:7e:0b:f2:
74:d0:83:fe:00:0c:f0:3a:66:ed:3f:c0:5d:09:8a:
c5:d7:bd:2c:4f:2e:a1:ea:89:c7:4a:b3:ab:75:c3:
0a:22:69:a4:c5:5b:f4:02:25:a1:c7:23:3b:f6:d2:
a2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:09:4B:D8:05:24:36:A5:47:DD:D8:B7:3B:7E:8D:4C:06:82:09:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02bd070b-1de4-3589-96f6-a31d9e3447ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
152.25.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:b8:3f:8f:00:ff:09:53:a0:7f:0a:1e:21:40:f3:68:d3:32:
94:95:c5:06:6a:aa:ef:80:65:5d:c3:56:da:13:f1:1a:b3:ee:
86:bf:ae:c4:26:07:e0:0d:98:d8:38:49:3a:37:c7:92:20:05:
83:5b:41:42:d9:23:18:c4:60:0a:45:5e:d8:62:11:3e:58:4a:
63:5f:4d:68:09:d5:cb:d0:1e:74:f3:e1:01:96:c2:27:ee:f6:
16:de:ac:9a:71:1a:aa:80:56:b7:3c:00:18:f9:24:a6:e2:d4:
6c:7b:2e:34:ff:0c:3c:5f:7f:99:01:1a:96:49:e2:10:87:3c:
3e:40:c2:2f:4b:61:39:24:76:a6:bd:a8:31:d3:47:f0:f7:d2:
ba:8b:b0:1f:32:fc:88:c1:9d:bf:52:b2:89:bd:f4:ee:f0:09:
4e:84:79:51:47:e6:6d:72:4e:4e:74:6e:9c:cb:43:cf:17:56:
6e:80:04:9b:fb:15:a8:7c:78:2a:b3:24:6b:46:bd:3c:d9:0f:
a0:9b:d7:74:f0:a1:47:13:8c:d4:d5:fe:27:a7:0b:6d:59:d4:
8e:a5:e6:c8:c5:cf:b6:a3:34:58:15:c2:cf:fd:53:66:fa:37:
dd:44:e6:87:f9:4a:63:0d:b7:c9:08:b6:44:32:a4:cf:23:2a:
ab:15:ee:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:37:49 2025 by rpki-client