Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b553066-7bb2-34e0-9e2b-c38632b4b773.roa
File: 1b553066-7bb2-34e0-9e2b-c38632b4b773.roa (raw, json)
Hash identifier: DMTKxAK1b9FFa4K182Q8o/Ftagte0/5wKQY2fol+iGY=
Subject key identifier: 4B:5A:8C:F6:7E:13:1A:0C:2D:E1:EB:B6:3E:91:37:B8:62:91:C7:B2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406811258B90CEEE1596F99880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b553066-7bb2-34e0-9e2b-c38632b4b773.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 192.39.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:68:11:25:8b:90:ce:ee:15:96:f9:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=96ec716e-de7a-4de4-8569-daa146bd9e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e8:92:84:21:55:43:9f:3d:94:ea:7a:bc:a7:
70:ac:dc:e3:2b:1e:6f:b2:94:46:4b:2d:0a:ee:b1:
c5:f7:7b:78:1d:b6:85:63:8c:8a:4b:43:b4:78:13:
6d:aa:0e:40:e0:3c:3b:77:5d:f9:f7:f2:39:f9:9e:
f4:64:7f:0f:9b:7d:48:e2:d7:85:e4:5c:2f:30:23:
46:79:a3:ec:f6:cd:3c:9c:7c:b2:57:59:27:27:84:
f9:c4:8a:8b:f7:c3:ac:27:78:1b:dc:4e:99:2f:b3:
11:74:d0:9f:90:70:e6:d4:dd:62:fe:40:e1:fd:4e:
8f:e0:c9:67:b1:7e:39:8d:1d:32:a7:4d:63:46:2c:
43:fb:f5:4b:8e:9c:ba:ae:77:81:d6:11:93:b1:a4:
b7:ea:27:0e:f8:0d:6e:f6:50:74:c7:ab:d5:3a:a9:
63:57:e1:77:af:da:5d:1d:c8:5c:64:9b:14:e8:f2:
0e:7a:21:5c:06:0a:10:ba:ec:e0:eb:89:63:d4:4d:
84:fc:cf:a8:96:f6:c5:02:e4:70:6f:46:1e:7f:27:
e3:6f:95:82:af:7d:d0:b7:a7:c9:8c:ba:5a:61:e1:
df:b2:c7:b5:8a:d0:a2:07:fb:ce:f4:f4:52:07:2d:
30:31:ac:fa:21:5f:07:82:c3:67:31:47:c4:80:80:
e0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5A:8C:F6:7E:13:1A:0C:2D:E1:EB:B6:3E:91:37:B8:62:91:C7:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b553066-7bb2-34e0-9e2b-c38632b4b773.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
192.39.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:b2:d9:d7:8c:ae:fe:b4:00:af:2e:9e:0e:f2:69:92:1d:42:
de:bb:c0:a4:28:75:63:82:de:f7:3f:44:4a:8d:b6:64:ae:a6:
c0:d5:37:1f:68:c2:54:8a:d4:2d:0b:48:29:75:c2:c1:29:95:
15:6d:de:e4:b5:69:f5:aa:bb:44:41:c2:7e:46:e0:33:6b:6e:
97:ec:3e:db:1e:b5:0f:04:70:1c:86:73:d0:c0:a7:9e:68:42:
75:6b:e5:3e:bd:72:56:dd:73:cf:66:43:b5:14:43:7c:a4:52:
a1:48:7f:03:71:33:28:07:1c:8c:29:e5:43:cb:05:f4:9f:5f:
a7:6d:cd:3b:05:20:24:6c:d3:d5:09:24:17:97:6c:3e:16:4b:
cf:3a:f4:ce:8e:51:00:1b:89:bf:cd:37:33:11:ab:ea:84:1e:
f6:5a:97:2d:2c:4a:47:29:01:2a:b6:a5:3a:73:20:64:7f:a5:
65:06:30:1b:45:65:87:b8:17:0b:bc:1f:0a:4d:0a:06:89:01:
f5:48:25:a6:df:d0:fa:c8:31:af:0f:45:4c:a7:e4:e7:ca:df:
39:ad:f7:7c:9c:36:7a:c8:04:9a:7c:c5:2e:92:4e:23:e6:fe:
31:66:ed:74:f6:cd:bc:ed:0d:37:ba:f3:4e:81:cb:0d:8a:0f:
ae:75:c3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:43:15 2025 by rpki-client