Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07c91344-16b9-35c8-8ab0-9eca9a9deca4.roa
File: 07c91344-16b9-35c8-8ab0-9eca9a9deca4.roa (raw, json)
Hash identifier: y6L8Fnwa3aoaq7tYsdO9E6i1lH8btNihdBcd4Vj15Is=
Subject key identifier: F0:5D:5E:24:B1:8B:D5:0E:FD:6A:FE:D8:ED:01:3D:80:AB:64:37:D1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858409CA523F111805CA6DBBC3540
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07c91344-16b9-35c8-8ab0-9eca9a9deca4.roa
Signing time: Tue 17 Jan 2023 12:00:00 +0000
ROA not before: Tue 17 Jan 2023 12:00:00 +0000
ROA not after: Wed 22 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 158.141.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9c:a5:23:f1:11:80:5c:a6:db:bc:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 17 12:00:00 2023 GMT
Not After : Feb 22 05:00:00 2023 GMT
Subject: CN=609bf6c1-bb41-459d-83ac-c28e5dff64b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5d:10:d5:c8:a9:18:22:3e:01:3b:b8:c9:6a:
80:d7:79:58:41:3a:72:8e:87:95:e4:2b:8c:7b:21:
5a:57:cc:dd:a2:b2:f2:98:30:77:c7:ed:28:d4:fc:
2e:be:26:2f:ec:37:aa:09:f7:2e:d2:fd:f2:63:aa:
56:55:9f:ff:80:79:1a:c2:56:dd:59:d0:1b:33:fb:
09:e0:82:cd:4d:11:01:37:39:8a:c2:d4:38:60:26:
f0:6c:b8:a5:b6:f3:66:2e:28:88:d7:a8:ac:0f:e3:
b8:b6:a7:7d:b5:b4:76:ea:02:cd:f3:3c:bb:77:8a:
18:9a:ec:d5:66:12:31:b3:8a:f4:06:30:1d:95:39:
11:2d:3b:c6:af:be:22:a0:3f:aa:b2:5e:01:1d:b5:
5d:db:fc:34:f7:57:fd:22:f3:ec:02:29:e9:3a:16:
49:47:3e:11:86:e6:66:dc:2d:3f:7f:f5:e6:ed:e1:
b9:1f:58:d5:ae:c8:6a:c3:32:f6:09:db:1a:86:f7:
92:aa:c0:81:3c:96:3c:88:99:40:c8:6c:c4:42:40:
2e:ec:81:47:dc:2a:71:3a:17:84:87:da:cc:68:10:
42:8e:39:14:9b:57:86:85:70:bb:1d:9c:0f:6a:e9:
de:c2:86:3d:ed:f6:fe:af:e7:b9:a5:93:ad:c2:c9:
7e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5D:5E:24:B1:8B:D5:0E:FD:6A:FE:D8:ED:01:3D:80:AB:64:37:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07c91344-16b9-35c8-8ab0-9eca9a9deca4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
158.141.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:ea:f7:0f:dc:a0:d7:56:16:ac:1f:50:d1:32:48:be:b1:a0:
4d:83:86:b8:46:0c:7e:34:5a:65:4c:e9:b6:4f:8c:84:22:6c:
a6:82:f3:15:62:f7:65:a5:11:6a:a8:49:80:ad:85:a5:02:ab:
a1:ce:a0:1c:48:08:82:f0:56:1b:4c:ae:74:c2:9e:64:53:8d:
2f:e5:12:12:43:c4:ef:ee:ca:3c:c1:80:7e:c3:7e:a8:db:bc:
9c:4e:48:8c:55:d6:b6:b5:a3:a3:ec:3d:02:94:55:2b:21:72:
ca:b3:26:e9:57:bf:4c:89:c0:cc:31:ab:d5:f0:10:f0:e2:de:
f0:0e:ac:3f:1d:14:73:b0:1a:88:df:94:35:81:e3:06:d2:dd:
b1:be:a4:a8:c6:a6:19:bc:5e:e4:f1:d9:cc:e1:91:c3:96:08:
e5:00:eb:92:ce:08:dc:5d:22:e6:de:a6:eb:10:bc:39:b7:ca:
9a:e2:9d:54:cd:32:b9:50:69:92:8d:25:8a:d3:75:64:e1:f9:
e9:7f:9d:9a:e1:03:c1:92:06:aa:2d:8b:25:41:d7:c6:12:e9:
1c:e7:fa:14:4f:bb:99:03:10:f5:9d:fc:82:05:34:86:1c:f5:
eb:f1:d2:14:8e:25:4b:55:6d:fe:40:75:6d:d9:60:d4:65:34:
c6:b4:08:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:49:20 2025 by rpki-client