Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/161b4a62-1a27-3ece-8ce2-7f2ae9b11d0d.roa
File: 161b4a62-1a27-3ece-8ce2-7f2ae9b11d0d.roa (raw, json)
Hash identifier: St2bxPshVUDEUjvKYUsWtlp/BoRZQ12x50LOwou/R00=
Subject key identifier: 5C:25:04:47:A5:40:62:89:E1:1D:27:15:F4:FA:D3:F7:EE:2C:51:34
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D2C7EB51AA0EB8F5AEE7B5940
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/161b4a62-1a27-3ece-8ce2-7f2ae9b11d0d.roa
Signing time: Wed 09 Mar 2022 05:00:00 +0000
ROA not before: Wed 09 Mar 2022 05:00:00 +0000
ROA not after: Wed 13 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 3.64.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2c:7e:b5:1a:a0:eb:8f:5a:ee:7b:59:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 9 05:00:00 2022 GMT
Not After : Apr 13 04:00:00 2022 GMT
Subject: CN=ac545c5f-4038-4c76-80af-42b6f801ceeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4f:6d:ef:c9:da:fe:a3:9f:c2:d2:2b:dc:8b:
17:13:50:93:9a:e7:99:a7:01:65:52:77:32:bc:b1:
c8:d5:3d:96:33:4a:ef:da:91:ce:28:fb:c9:90:b3:
94:4c:67:2c:f3:ce:93:0d:e4:6d:5e:90:ff:9d:91:
7b:30:90:16:ab:75:c4:01:08:d9:be:27:aa:d9:05:
4c:dd:9c:12:2c:b6:f3:7a:f3:74:c4:89:98:8c:49:
6e:c0:2c:a1:58:f1:0e:41:69:89:a9:ed:a0:e0:5f:
09:bf:2f:7e:64:1d:14:48:ff:bf:85:5c:fc:d5:89:
c7:7e:c6:50:19:fc:2b:92:28:c5:29:a7:1c:2a:5d:
c2:d8:d8:ab:b4:c8:66:93:37:4d:2e:98:c3:96:60:
09:26:d3:f7:0f:3b:37:41:56:ec:8b:78:74:88:f5:
ae:6f:92:15:5c:09:18:29:14:65:93:ff:b3:af:59:
c8:32:b0:80:88:02:d6:eb:2f:b2:50:14:59:14:8c:
3a:3b:0e:47:31:1d:66:57:8f:84:12:a2:57:f0:15:
ea:6d:4d:fd:74:9e:93:1e:20:2a:18:c0:46:fe:b2:
67:23:9a:f7:65:b3:ba:b3:1c:35:23:33:57:ec:72:
cb:79:a6:93:44:a7:88:d6:41:b3:4c:1a:8e:8d:00:
55:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:25:04:47:A5:40:62:89:E1:1D:27:15:F4:FA:D3:F7:EE:2C:51:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/161b4a62-1a27-3ece-8ce2-7f2ae9b11d0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.64.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:33:de:c5:f8:86:d7:d5:5c:2b:ce:8c:33:9a:0c:a8:6e:eb:
03:fd:47:3a:24:89:8a:37:75:bd:19:2f:b5:19:01:35:81:80:
d1:aa:3c:e2:67:a1:4a:4c:1f:82:33:23:e5:6d:b4:53:0e:fc:
d7:22:ed:37:66:f7:df:4e:7c:a8:e8:ce:a3:15:4a:d2:7e:64:
17:01:6f:f2:52:19:af:e6:c3:e3:15:8a:5a:7a:b9:18:71:51:
a8:b2:8a:e8:70:b4:18:9f:4a:20:6c:d4:53:a2:3a:ac:75:c8:
40:6f:b7:d6:88:38:57:1e:11:5f:4f:ba:d3:6b:d1:f8:e0:56:
50:d1:92:a1:ba:83:57:3c:9e:a4:a7:4b:e1:89:c0:28:1e:59:
be:76:d3:3d:ea:97:b5:22:1c:a2:b2:9c:7d:36:ef:64:d8:77:
de:40:2c:c1:60:ae:d3:ac:1a:c2:c1:4d:19:be:6e:36:b0:ab:
11:15:2b:3d:4e:0a:92:cf:26:00:dd:47:35:33:8c:a9:2c:65:
b4:f6:98:d1:24:94:e7:27:4d:8f:ca:12:b7:61:42:af:b8:ed:
39:02:3b:21:0a:27:a7:18:ae:79:c1:83:e5:cd:2d:fc:ff:0c:
db:64:4e:bf:21:5c:dd:f5:84:1c:f3:84:b2:95:0c:d8:13:23:
13:3d:09:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:14:23 2025 by rpki-client