Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2a786865-14d8-394d-9acc-eaef368c6d9a.roa
File: 2a786865-14d8-394d-9acc-eaef368c6d9a.roa (raw, json)
Hash identifier: cmGUCwaOPN1OMd62FUxtZjE/HKL5WhGwSnXBPS5FGmY=
Subject key identifier: 7E:05:CC:F5:FC:8B:2A:FF:B6:2E:2B:E0:50:B3:0F:D0:F1:69:0F:A8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E453C59C61160BE9B69AC4500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2a786865-14d8-394d-9acc-eaef368c6d9a.roa
Signing time: Thu 16 Jun 2022 12:00:00 +0000
ROA not before: Thu 16 Jun 2022 12:00:00 +0000
ROA not after: Fri 22 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 192.39.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:45:3c:59:c6:11:60:be:9b:69:ac:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 16 12:00:00 2022 GMT
Not After : Jul 22 04:00:00 2022 GMT
Subject: CN=bdc85f8a-3697-465b-86cb-4ea4e0e4be40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2c:38:03:3e:7d:31:b4:d3:bb:f3:0f:08:8e:
ba:99:08:3a:9a:43:d0:49:83:e2:f0:ff:1f:dd:b7:
44:2d:f7:8b:62:80:a7:ff:c0:4f:b4:6e:c7:07:65:
9b:f1:3f:f8:c7:ed:fe:d7:e5:d7:db:20:22:ea:f6:
11:d2:9c:28:b0:6c:5a:b4:d4:80:46:3f:0c:6b:55:
b5:0b:2a:6b:af:f9:18:70:f6:a4:39:b5:e5:10:32:
a7:2d:80:38:35:c3:bb:f7:b1:ef:fc:d4:9e:42:cc:
88:75:10:73:d7:23:09:47:b2:d5:a9:7a:34:f5:5c:
c3:c7:e8:5d:17:83:d4:0e:e1:8d:d9:21:2c:49:fb:
69:24:24:9f:3e:77:2e:cb:b8:75:d8:12:17:bf:f3:
28:0f:5d:67:8a:99:97:5b:b5:e7:f1:7d:de:f8:50:
ef:c0:39:3a:f4:e2:c9:8f:52:6e:d4:a3:9b:a1:c2:
cc:9a:c0:49:76:50:40:48:53:24:74:2a:cc:7d:53:
21:6f:ea:fd:5c:48:2e:c3:7f:67:b0:8a:41:5b:17:
a1:ac:71:c9:12:c4:e3:be:aa:57:35:f1:42:47:cb:
c7:f5:58:2f:63:48:3a:ff:00:f1:ce:23:61:2c:26:
ba:df:d9:78:f1:3f:fb:ff:7b:e8:eb:e8:2b:11:44:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:05:CC:F5:FC:8B:2A:FF:B6:2E:2B:E0:50:B3:0F:D0:F1:69:0F:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2a786865-14d8-394d-9acc-eaef368c6d9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
192.39.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:b8:6b:a4:20:81:48:5b:44:20:bb:46:77:00:1d:f9:fd:24:
92:4d:5b:e5:28:0b:aa:a4:f7:73:5a:23:c4:95:6e:3a:59:b4:
a1:18:46:6b:ea:d6:30:8a:b5:63:41:73:1b:06:53:a5:96:73:
8d:48:93:dd:3e:f6:bd:35:c3:01:0f:a7:b0:2f:a3:fd:80:47:
7c:96:0d:80:b6:3e:53:2a:b6:9c:63:0b:35:91:10:22:04:dd:
fa:45:d6:55:d0:8d:66:13:33:23:c0:d0:d9:65:6a:26:5e:17:
3b:83:73:3f:8f:14:1b:b8:79:97:3a:5f:2b:84:f8:d1:94:74:
99:53:60:e9:3c:c8:77:42:33:48:1b:f0:00:d7:b8:20:33:0a:
1e:21:34:16:43:54:e9:1d:6d:47:68:26:13:50:cf:43:32:aa:
4d:04:cc:51:4a:c7:17:02:e7:04:78:93:21:53:4b:1e:cc:e0:
5b:e4:c2:b9:e7:a3:44:f8:e5:b5:2b:fd:46:2b:07:b3:b6:ba:
0c:8b:28:b4:3e:96:b3:1e:cd:4f:3c:3c:64:22:88:f5:c2:da:
2a:11:37:2e:90:73:4b:ed:22:56:4e:f4:ce:6b:02:79:bf:c3:
61:73:79:ed:9c:db:4a:53:12:67:05:cb:db:80:78:f3:f6:a4:
90:e2:24:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:33:50 2025 by rpki-client