Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0eafcbb2-d58f-3f91-9f59-2375530e5e68.roa
File: 0eafcbb2-d58f-3f91-9f59-2375530e5e68.roa (raw, json)
Hash identifier: mk+oDEbYza1r0IQLkLVyjUqWPvRxCfFtb8kO74xGE5Q=
Subject key identifier: CD:D7:0D:D8:22:78:EF:06:70:2F:DF:D0:1C:C4:83:73:02:36:E7:75
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF22CAA08C3A3F7F711799200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0eafcbb2-d58f-3f91-9f59-2375530e5e68.roa
Signing time: Thu 17 Nov 2022 12:00:00 +0000
ROA not before: Thu 17 Nov 2022 12:00:00 +0000
ROA not after: Fri 23 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 128.181.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f2:2c:aa:08:c3:a3:f7:f7:11:79:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 17 12:00:00 2022 GMT
Not After : Dec 23 05:00:00 2022 GMT
Subject: CN=bb1bda30-bec0-4d42-b782-9cf730558a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9f:d0:2e:12:1a:da:f8:fb:88:f9:44:65:49:
10:7a:c0:44:20:ab:ef:92:23:b9:8c:13:a3:19:13:
42:2c:d6:82:d2:d2:48:29:2b:dd:83:91:f0:b7:27:
e4:13:ca:95:5f:08:69:9c:0a:db:27:44:67:f0:37:
d5:49:3c:a9:70:17:b7:f3:f1:86:33:dc:aa:73:17:
6f:2b:44:53:33:5d:96:a5:f0:2b:6a:b0:bc:f2:b6:
cb:24:17:5e:3a:4a:92:05:1f:44:7c:a4:74:0d:df:
f4:39:f1:0c:99:49:63:10:05:f9:e6:38:69:a9:8e:
fb:91:4a:7a:d0:89:19:93:77:84:6c:9a:3a:0e:90:
d3:50:59:00:1e:b6:ca:58:4b:eb:bd:7a:9b:13:5b:
93:66:64:6d:3e:7b:a5:9c:ca:c9:1a:ef:60:6f:57:
74:50:8b:ee:9a:2b:89:2c:60:87:8e:81:a6:5e:62:
1b:0f:72:47:a8:6d:ca:11:74:12:66:da:25:97:e5:
93:5f:52:ab:4c:10:53:67:67:a7:b4:2e:12:42:11:
33:ea:c1:ae:2a:9d:6e:06:bb:ed:46:79:c5:98:35:
92:cc:19:d1:cd:ac:cd:ce:26:20:e3:6c:64:fe:15:
44:c8:e8:ee:b9:02:70:e0:3f:58:5b:f6:93:1a:fe:
56:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D7:0D:D8:22:78:EF:06:70:2F:DF:D0:1C:C4:83:73:02:36:E7:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0eafcbb2-d58f-3f91-9f59-2375530e5e68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
128.181.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:28:f1:74:5b:47:00:9b:e6:23:05:9c:38:85:23:98:9c:64:
36:8b:53:4a:6f:d5:4a:da:78:ad:ff:bc:97:bb:ce:49:47:52:
7a:0d:9f:76:03:2b:a5:a1:f4:59:f2:c6:ae:7e:47:47:85:a9:
6d:46:85:f6:11:6e:60:28:f8:8e:47:92:2e:72:9a:0c:ea:30:
6a:11:76:08:57:b9:e1:4c:40:37:76:a8:39:b2:bc:21:48:ad:
52:c8:1f:f5:28:ce:bc:e9:5f:f0:04:0d:73:2a:72:45:12:f8:
ff:5f:b2:8a:69:56:63:8e:09:8c:c2:ee:00:69:25:73:05:74:
bb:9c:d9:b6:5a:71:6d:6e:99:25:64:78:53:48:63:a7:55:55:
cb:07:35:0b:b6:f4:63:8e:ec:34:2a:84:37:0e:d2:c0:62:30:
ae:09:05:4a:c4:51:55:dd:d7:57:9d:08:d8:36:d5:14:bb:b7:
51:f4:d1:32:72:12:0c:b1:36:cb:6b:13:74:b7:67:19:2b:1b:
c2:bd:e4:56:36:4f:69:1d:1b:2d:1c:56:1f:3b:b5:b7:88:e1:
ac:46:ce:7e:a7:3d:b6:9b:8b:09:ce:cd:37:c8:4a:54:1b:67:
59:f7:4c:86:8b:eb:c9:5d:d7:d9:37:58:64:96:ab:fd:31:23:
cd:3e:14:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:25 2025 by rpki-client