Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1889eefc-e1d2-3b1d-bc77-6e1ef59e3a83.roa
File: 1889eefc-e1d2-3b1d-bc77-6e1ef59e3a83.roa (raw, json)
Hash identifier: ZCPglel5E0/73ERqX+S778xfOJIRY0p200oEnwiMSfI=
Subject key identifier: A3:44:4C:CC:9D:4E:FD:8E:A0:5D:CD:56:1D:0F:7E:54:26:BF:69:BA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C96FD6883992BD9086BDD8A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1889eefc-e1d2-3b1d-bc77-6e1ef59e3a83.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 192.39.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:fd:68:83:99:2b:d9:08:6b:dd:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=21cb6e53-7768-43ba-937f-fa799a0faa1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d8:37:94:58:95:3a:df:ed:6b:ca:98:b5:fc:
0f:84:b1:f2:15:d1:10:6c:c4:3e:f8:63:48:ee:31:
98:96:5b:38:db:9a:ae:78:90:e2:d3:2a:b5:8a:e2:
5f:d7:2b:c5:8b:c5:68:d9:96:8b:76:71:29:5e:91:
c0:c1:df:7d:4a:3f:3c:18:2e:74:0a:61:7c:d1:74:
b9:e5:8d:45:9c:b0:2a:8d:2a:ed:41:3f:ec:f5:e0:
81:a6:95:92:50:58:9d:3e:bd:f5:78:50:66:26:9a:
55:00:bf:06:19:52:cb:44:90:e0:66:31:cc:8d:a0:
5a:57:8c:d5:a8:3e:e6:73:37:7e:43:60:90:68:db:
c0:79:2b:41:0f:6d:65:1c:66:f2:2a:8c:68:a5:7b:
0d:c5:19:2a:52:6d:a0:5f:1c:42:3a:6c:c6:cb:c8:
2b:da:f2:ba:b7:90:71:a3:03:83:cd:82:af:89:09:
9f:83:8a:f5:21:8c:41:0a:c7:66:f8:d4:95:fa:b1:
e5:f4:02:d2:96:e9:63:77:11:8a:05:83:c7:28:cb:
7c:36:ed:26:48:99:d2:12:f8:2a:7e:7b:83:80:87:
e5:c9:36:ef:7f:f8:61:c5:83:d7:b8:be:9e:09:62:
6a:65:a4:16:a0:86:18:0c:6a:a5:ef:98:8f:95:eb:
9b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:44:4C:CC:9D:4E:FD:8E:A0:5D:CD:56:1D:0F:7E:54:26:BF:69:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1889eefc-e1d2-3b1d-bc77-6e1ef59e3a83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
192.39.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:84:6e:f7:15:0c:21:12:11:fb:d7:ae:5d:76:39:77:83:04:
f3:3f:d7:c9:eb:67:d1:e3:61:e0:3c:d0:bb:43:e0:5b:20:46:
7f:53:f0:e5:ac:94:29:37:74:22:cd:b4:5f:69:4d:ca:b3:7a:
e3:7d:4e:83:4e:f8:31:41:1e:d8:d6:e1:56:de:ed:de:4b:1b:
91:19:b4:65:43:ed:4a:56:0d:44:83:cc:62:a9:22:e2:a8:58:
40:05:f6:55:0e:20:0b:a5:c7:ef:af:36:6c:8c:3b:f0:58:f6:
3f:1c:b3:8f:0a:d4:9e:3b:ff:2d:99:7c:b1:52:3f:32:b4:a1:
76:0f:b9:30:a0:c5:73:da:01:d3:da:92:40:b2:6b:1d:ea:b8:
81:87:f7:2b:22:de:b4:16:c9:22:90:6f:f5:5a:be:58:8a:46:
da:3b:e0:cc:3e:fe:d7:03:7c:4b:8b:cd:08:e1:d8:57:95:92:
c0:78:b2:c0:65:63:1c:e0:0f:3c:ed:eb:17:d2:53:93:b9:42:
ac:c5:81:9c:54:e2:fa:13:67:97:77:81:d5:b9:f6:da:c3:e9:
bf:d1:da:20:dd:fc:e0:a5:01:10:15:b2:07:49:3c:96:10:e6:
19:e5:fa:d5:0a:44:06:23:2b:10:66:a5:ec:5f:a6:d7:9d:0d:
70:23:15:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:24:50 2025 by rpki-client