Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/22e2c1ab-828d-3b61-aebd-ddc952e41110.roa
File: 22e2c1ab-828d-3b61-aebd-ddc952e41110.roa (raw, json)
Hash identifier: UvykG6UXo3DzHxWTQCojkTDdxyU9BbGZ6iw7DJnCIYM=
Subject key identifier: DC:6E:60:33:A5:4B:FB:BE:79:B2:85:4F:AD:13:6E:23:67:EA:E0:64
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F9C09849F56DB1C981C80E400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/22e2c1ab-828d-3b61-aebd-ddc952e41110.roa
Signing time: Mon 17 Oct 2022 12:00:00 +0000
ROA not before: Mon 17 Oct 2022 12:00:00 +0000
ROA not after: Tue 22 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 138.111.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:9c:09:84:9f:56:db:1c:98:1c:80:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 17 12:00:00 2022 GMT
Not After : Nov 22 05:00:00 2022 GMT
Subject: CN=4c57d861-e6ae-476d-bbe2-cc1c9ce3aad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a2:06:5a:ea:a5:b8:89:78:ee:5f:61:f7:af:
81:a7:d1:b4:a4:7b:40:3b:0e:4f:36:01:89:a8:bb:
45:6c:e0:f0:34:12:48:6b:6d:30:9d:ae:2a:6c:e3:
a6:e6:6d:78:de:82:66:e8:8c:84:55:e5:a0:91:b1:
92:86:7a:d1:f4:fd:9d:d7:0c:0e:69:a9:0b:33:6f:
c5:2d:c4:eb:f9:a2:63:95:9e:44:3b:df:7f:fd:d0:
5a:46:61:90:49:2f:30:c9:d4:74:6f:a4:f1:7a:30:
e9:ce:d6:54:14:a6:62:62:e6:ff:ae:3c:db:eb:dd:
01:43:87:56:f8:b7:f0:80:2c:34:e1:32:74:48:0e:
36:f0:7a:25:cb:68:13:7b:00:76:30:13:e7:15:bb:
7d:f4:d8:e1:24:9d:dd:57:b2:a1:17:41:97:77:4a:
9f:75:c2:ed:9a:31:cb:93:7a:98:73:80:f5:1f:99:
f4:4c:dd:97:a2:b8:c1:70:1f:59:f6:83:d3:e4:fc:
bc:6f:40:d4:9b:83:46:a7:1c:a7:b4:d1:55:8c:2e:
1d:4c:89:d6:1f:c7:0a:40:8a:0e:d4:98:a6:16:4c:
c6:38:17:fd:4e:64:8b:e5:97:c0:69:14:0b:1c:a0:
c7:ea:fd:5a:db:87:15:94:3b:7b:5e:98:bf:dc:61:
18:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6E:60:33:A5:4B:FB:BE:79:B2:85:4F:AD:13:6E:23:67:EA:E0:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/22e2c1ab-828d-3b61-aebd-ddc952e41110.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
138.111.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:e1:50:4d:4b:c4:f8:67:17:ab:1e:92:a9:84:41:b5:ba:ba:
fa:56:ae:25:4c:6e:8b:2d:fe:42:d7:96:81:9e:6b:34:8c:01:
6e:10:77:f5:b9:c8:98:4c:2b:cc:fa:e0:e4:f2:4e:a6:8b:3f:
87:09:7b:03:7e:25:47:4b:28:85:65:49:d3:e9:04:d6:df:05:
62:80:d0:b6:0c:19:e4:11:e2:c0:32:f5:00:db:0a:b3:f8:4f:
d6:28:89:ee:bc:df:ca:6c:30:02:2a:33:cd:19:fd:1b:be:d0:
3b:94:8a:37:e2:c7:cd:f6:0b:b7:f9:c2:e5:0d:06:07:50:23:
a8:45:99:8f:c0:a8:92:f0:a3:92:d6:b3:b2:fb:e1:7f:96:51:
9f:dd:8d:dc:07:cc:e1:bb:d0:7f:d1:c9:2d:77:9b:88:60:5b:
75:56:90:c1:b2:9a:fe:d8:fb:ac:c8:87:c9:39:17:83:7d:41:
ea:a0:b9:f0:02:c2:72:af:ab:fb:3b:9c:c8:27:12:19:eb:19:
dd:3f:af:9a:c1:af:b9:7a:eb:78:33:9a:21:f1:69:5e:42:71:
8c:37:c3:1a:63:4d:ba:ee:50:f0:7a:72:67:7c:ac:73:d8:58:
85:3d:42:54:43:d1:7d:dd:01:6b:ef:c0:84:7c:88:97:62:3b:
57:df:39:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:10:45 2025 by rpki-client