Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0ca0a46e-88d2-3eb0-bca5-c7804a907f63.roa
File: 0ca0a46e-88d2-3eb0-bca5-c7804a907f63.roa (raw, json)
Hash identifier: Hx1r7P04Cmt2qaTqsvh4hMa1TsF3uN9EuvobdJmT0HQ=
Subject key identifier: 5B:F5:0C:56:16:18:E2:DE:F2:54:A6:D9:BA:1C:0E:BE:77:97:82:98
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C70066B4A522FDBFCBE56E840
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0ca0a46e-88d2-3eb0-bca5-c7804a907f63.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 146.9.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:70:06:6b:4a:52:2f:db:fc:be:56:e8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=ff7e180f-29d6-4391-8631-13ed7ea46ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:66:3f:e2:cf:e5:10:94:0b:f4:c7:dc:55:68:
f1:4b:10:72:3b:5d:1d:fb:61:40:f7:95:06:d1:6b:
fb:b4:f8:18:fc:fd:21:69:3f:67:b2:12:78:e4:66:
94:d1:8f:e3:7f:53:be:16:4d:69:01:69:7d:3b:b1:
9b:06:f6:c6:9e:66:45:1a:5b:83:43:49:15:e8:45:
8e:8b:cd:bd:65:3d:84:6f:c9:cf:4a:ad:a3:7f:65:
c9:91:c9:69:7e:6d:1b:c5:54:08:6d:bb:ba:8a:f4:
01:1d:47:9c:a2:95:cb:44:72:7e:2a:2b:aa:a8:c5:
77:9d:fa:7b:07:a3:eb:41:a4:c3:4d:86:31:5c:a9:
35:2a:c5:5a:9c:39:1f:e0:40:ae:a5:c4:77:1c:0c:
9e:52:4c:67:fd:59:6b:4b:9d:26:4a:44:97:81:ae:
58:9e:40:02:8f:5c:57:57:48:ac:65:d4:4c:88:ba:
d4:63:41:72:44:c4:20:1b:37:86:69:41:85:1d:be:
22:c9:4a:f7:bc:c0:35:b4:f3:af:dc:a3:44:a4:1a:
32:5c:c2:cf:eb:90:ba:c9:ac:bd:b7:ec:78:17:a5:
d2:6b:77:d8:13:ef:69:fa:3c:be:4e:65:53:9c:bb:
a7:31:a6:0f:0c:6f:32:0d:87:f1:98:b2:3b:1f:41:
4d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F5:0C:56:16:18:E2:DE:F2:54:A6:D9:BA:1C:0E:BE:77:97:82:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0ca0a46e-88d2-3eb0-bca5-c7804a907f63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
146.9.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:c9:6b:c5:63:2d:01:62:e4:19:63:d9:0e:37:fa:1f:3d:ed:
bd:70:64:f5:ff:ed:01:c9:b7:8c:86:ae:45:89:c8:33:32:75:
79:6c:60:7e:63:eb:e3:02:a3:b9:ff:70:ef:62:00:70:8d:19:
40:a3:b9:17:9f:fc:06:eb:16:b9:86:3a:8e:a9:f8:f4:9e:38:
4f:e6:e0:28:db:83:40:64:18:2b:b2:00:55:a5:6f:07:bd:16:
bd:e6:db:57:47:03:e3:d4:39:40:0f:cc:e1:e9:37:7c:2c:74:
a6:6c:11:91:3f:40:54:60:83:d9:87:23:e3:6a:f0:04:12:c5:
3c:37:4b:67:f9:35:9d:24:c8:67:da:78:37:42:b9:22:23:c9:
38:ef:70:ef:8e:e8:7d:16:41:37:e8:34:76:e2:a5:ff:a5:dc:
3f:cf:83:5a:11:13:9b:fb:28:cd:ba:9f:8b:18:29:eb:84:6f:
d4:46:df:09:b6:cf:7e:3f:f5:5f:e9:94:42:45:ad:2b:9d:0f:
e0:57:4e:1b:fa:6f:94:21:c5:13:68:a9:39:48:6e:58:4d:3f:
d6:37:59:d1:c6:cf:1d:ce:3a:56:2f:52:d6:c7:6b:6c:f1:99:
fd:43:e6:e4:db:9d:af:7e:06:3b:41:85:b4:fc:2b:84:e6:da:
95:22:dc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:26:08 2025 by rpki-client