Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/320831d1-fd42-3712-8a13-bd894157c352.roa
File: 320831d1-fd42-3712-8a13-bd894157c352.roa (raw, json)
Hash identifier: oEZp+LuRodU+bGIr2DKsdGaiDTrYkHiwS7IqoV0twFM=
Subject key identifier: 4B:91:60:0D:F4:4A:8D:34:44:60:A3:45:8A:98:D6:CC:44:3E:4B:49
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF3D515ED75EAA99748F0A980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/320831d1-fd42-3712-8a13-bd894157c352.roa
Signing time: Thu 17 Nov 2022 12:00:00 +0000
ROA not before: Thu 17 Nov 2022 12:00:00 +0000
ROA not after: Fri 23 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 140.145.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f3:d5:15:ed:75:ea:a9:97:48:f0:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 17 12:00:00 2022 GMT
Not After : Dec 23 05:00:00 2022 GMT
Subject: CN=ecee2c37-8394-4d2d-a4a0-b7e54cfcd3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7d:f6:a1:5e:8f:05:1e:75:c6:e5:1b:fd:6e:
e8:cf:da:de:43:77:07:2b:38:ae:bd:af:14:3a:dd:
e9:47:6b:cf:3e:a4:80:7b:91:9d:94:12:f1:a4:d1:
0c:11:0e:fd:49:1a:be:e6:82:41:3b:e3:8b:d8:27:
c7:8c:bd:1e:f2:48:6d:7e:f1:d4:83:f6:d2:23:c7:
6b:cd:f0:26:b2:cb:0d:84:a5:83:84:63:ec:64:f7:
61:ee:fd:14:ac:98:fa:81:4e:19:cc:e6:4c:1f:fc:
ac:13:f3:56:5c:4f:50:a9:e7:05:5d:d9:5c:41:7b:
63:07:af:63:b1:12:17:64:0a:25:cb:86:44:ec:ba:
75:7a:5b:af:73:f2:72:58:2f:f9:b7:99:67:91:87:
36:4b:c6:6e:dd:44:79:7e:34:b3:74:b6:13:2d:be:
b6:2b:cc:42:d5:12:4c:10:02:a5:22:15:2c:14:e3:
43:82:72:f5:eb:11:06:48:e4:f9:dd:17:ff:31:2b:
db:9f:2e:51:94:ef:b9:a4:5a:23:a2:4c:59:66:8b:
9d:d5:9d:e7:d4:4a:ca:69:ec:fc:ce:92:7c:ab:6c:
65:dc:2e:75:83:4f:4a:2f:83:ea:a9:b2:7e:2e:05:
d0:b5:82:21:bd:00:e1:a8:8f:d6:74:61:5e:d6:84:
37:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:91:60:0D:F4:4A:8D:34:44:60:A3:45:8A:98:D6:CC:44:3E:4B:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/320831d1-fd42-3712-8a13-bd894157c352.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
140.145.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:12:d0:35:b6:24:e5:c3:16:d7:79:c4:34:f6:99:e6:63:87:
73:f1:22:64:1f:1e:c6:66:e4:de:3a:b0:c2:20:30:7b:b7:95:
04:d9:56:bf:4b:c1:42:58:e9:1a:8b:b8:9b:ae:fa:a6:8a:23:
2c:91:71:88:53:bd:ae:c1:21:35:36:ec:27:a6:2b:13:c3:f2:
b7:c2:d9:07:c2:6f:22:fe:de:e5:b7:f1:6f:48:e1:dd:56:6d:
93:6b:2e:bb:63:9e:c4:df:f8:b9:48:2d:c7:e9:a9:0b:d5:a9:
fb:37:8f:81:a0:dd:98:b0:45:c6:50:3c:a9:93:99:97:4e:f4:
b6:ea:0a:f3:2b:2c:58:c4:de:bd:d9:dc:d2:4b:74:9f:69:bc:
22:df:cf:5d:57:47:3b:32:7a:7f:81:e9:4b:0d:24:1d:1e:af:
f6:59:fe:df:41:c7:41:fa:51:54:76:49:5e:be:c5:be:46:61:
3a:55:e2:f7:d6:f5:95:39:73:39:5a:b6:83:1c:37:0b:36:bd:
5a:78:1a:25:f7:0a:89:01:17:60:6a:99:77:8a:25:50:56:f1:
2f:3c:0b:ff:f5:5c:87:3c:c0:67:31:5f:dc:b0:86:9d:70:b1:
4a:04:32:e8:3b:1e:b3:f7:dd:5d:6f:95:2a:fb:8f:60:9a:55:
48:d4:b7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:04:43 2025 by rpki-client