Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/124508e8-7d6a-36be-880d-e0b2b35c0bc0.roa
File: 124508e8-7d6a-36be-880d-e0b2b35c0bc0.roa (raw, json)
Hash identifier: bGADaf0lwWefGQM7QEBYdn4IrPpd0IblA6GamajvX0k=
Subject key identifier: BB:38:09:76:2C:9A:C1:F1:4E:5B:C6:9A:0D:65:24:69:64:F1:55:9C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858405FBFD3136666A8918364B670
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/124508e8-7d6a-36be-880d-e0b2b35c0bc0.roa
Signing time: Mon 26 Dec 2022 12:00:00 +0000
ROA not before: Mon 26 Dec 2022 12:00:00 +0000
ROA not after: Tue 31 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 3.0.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5f:bf:d3:13:66:66:a8:91:83:64:b6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 26 12:00:00 2022 GMT
Not After : Jan 31 05:00:00 2023 GMT
Subject: CN=cec427f0-4bd9-48b5-aa93-dcb052ff4545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7f:20:58:3e:70:02:bf:09:2e:4f:b4:8b:ff:
64:68:6a:13:c2:fc:95:27:63:0c:1c:f0:e7:60:63:
c3:47:0d:9a:cc:89:b6:8e:55:0e:45:a8:07:64:56:
12:82:60:1b:64:5e:8b:71:43:29:93:77:79:60:8e:
c8:9b:9d:94:ec:8d:1e:4a:83:ae:c3:87:b9:5e:c6:
14:08:65:9a:0c:94:79:5f:cc:18:7f:4f:39:df:dc:
e8:16:31:1d:15:52:e8:c5:a7:b7:2e:2b:ae:50:10:
78:99:33:c6:ad:2c:3e:3a:7c:1b:5b:09:70:cf:16:
d1:ce:2b:ad:a0:fa:e6:cd:00:63:ca:ab:e1:e3:05:
d7:d3:3d:80:b1:46:a4:0b:ff:9f:65:5a:2c:4f:ad:
02:48:74:61:ff:5f:0b:71:a7:a3:9c:b3:4c:28:22:
99:9a:53:94:31:4b:f8:8a:e4:b3:3d:fd:d1:e7:c2:
a4:2b:65:eb:eb:b5:49:0c:4a:ac:bc:e4:21:b4:95:
6a:8c:94:87:a5:3d:d2:d6:38:74:9d:3a:ff:99:90:
c6:f1:a7:21:db:bf:e4:88:e8:0b:16:90:d0:44:08:
eb:b7:57:92:ae:6c:87:32:5a:fb:bf:48:c4:dc:ce:
76:07:74:52:f4:29:08:bb:65:c5:0e:c8:24:8a:ff:
89:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:38:09:76:2C:9A:C1:F1:4E:5B:C6:9A:0D:65:24:69:64:F1:55:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/124508e8-7d6a-36be-880d-e0b2b35c0bc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.0.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:4d:0f:7b:70:92:b0:68:0f:ea:4c:74:20:af:a7:9a:f7:5e:
e5:8a:b5:d0:cd:47:cc:02:c9:55:33:b4:b9:5c:95:df:a5:9a:
68:22:33:2f:7e:65:62:1c:84:d3:5d:6e:b5:38:11:34:d4:11:
c0:b2:df:8d:0c:cb:2e:1a:70:41:e1:1e:aa:ba:d8:50:e5:75:
57:a0:77:8a:31:77:ed:a6:94:0a:f8:ca:9f:b9:89:08:83:27:
4c:75:b9:74:cd:14:64:ff:97:16:71:25:aa:64:38:e6:d1:ee:
fd:3f:48:03:29:cb:db:15:31:aa:51:f5:4c:1a:46:a7:03:67:
0d:a1:ef:75:4f:f0:77:75:0a:a4:92:96:6a:8f:e3:46:05:36:
be:9c:3c:a5:ae:77:0d:da:51:fa:18:20:87:6c:68:3c:64:f4:
8c:0f:f8:2c:1b:e3:79:6e:57:c6:f1:31:b5:45:d4:ab:0c:71:
b1:73:01:d2:c1:1f:84:e0:80:dc:f0:cc:6c:4c:62:cc:b6:23:
64:6b:f0:1b:09:1f:f0:c8:c3:8e:58:f8:fb:a3:f5:cc:4e:54:
70:70:fd:90:78:b8:51:90:6d:7b:0d:21:5b:cb:6d:0f:48:8d:
bb:f2:03:bb:bd:06:50:d4:43:05:05:02:0a:36:4c:1a:96:e7:
80:48:77:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:27 2025 by rpki-client