Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/338007a0-c6ff-36a5-ba9b-9881d4a6cfb3.roa
File: 338007a0-c6ff-36a5-ba9b-9881d4a6cfb3.roa (raw, json)
Hash identifier: gNdfvpAaWWYLnFHHpUpdimfNDUfoQR+Vo7KWmlp7Yks=
Subject key identifier: D4:58:66:3B:3E:17:76:0E:3A:04:9B:D7:9D:67:CF:4C:EF:0B:57:9F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401C324868F18AA254B1910640
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/338007a0-c6ff-36a5-ba9b-9881d4a6cfb3.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 167.166.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:32:48:68:f1:8a:a2:54:b1:91:06:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=9756349b-7163-4d33-b88f-ce96a7d52a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:87:fc:56:e8:84:3d:f9:d3:3b:36:9a:ad:4f:
44:a2:ae:c2:f2:06:3e:aa:5c:62:da:e6:8d:ef:96:
64:b8:ca:02:e6:0a:8d:cf:c9:24:7a:1c:73:40:91:
06:4d:6f:71:ce:5b:9d:9b:13:66:b2:ad:d6:60:48:
51:b7:80:a8:bf:43:67:59:aa:28:7a:1f:4b:1b:8d:
d5:e7:80:c9:b4:31:26:3d:09:cc:30:e1:7e:84:b2:
65:61:38:b8:ec:ba:2a:2d:4a:cb:f9:cc:0f:78:a8:
f0:45:0b:cb:91:65:45:0d:76:45:0e:3f:31:78:1b:
a9:b0:1f:02:6c:e8:ba:d1:d6:47:18:0d:ae:fc:20:
31:ad:81:41:85:a5:cb:4f:5a:d4:c5:5b:c0:6e:5b:
a8:56:a6:b3:88:41:18:ff:a2:26:7a:af:f8:3a:70:
f8:11:af:45:a8:23:9c:02:1b:2b:61:0d:0c:d8:d3:
84:17:42:1e:85:73:80:bf:ee:e5:73:5d:9e:f3:3d:
16:bd:76:57:98:24:01:52:da:86:6c:21:4d:e5:f8:
90:5d:33:c3:d9:42:40:f3:2f:12:1e:d2:93:9a:07:
84:14:4b:ef:72:76:03:7b:2e:b4:b7:65:3b:f3:c7:
ce:a6:62:51:14:00:56:eb:38:86:81:81:e5:3e:0c:
94:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:58:66:3B:3E:17:76:0E:3A:04:9B:D7:9D:67:CF:4C:EF:0B:57:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/338007a0-c6ff-36a5-ba9b-9881d4a6cfb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
167.166.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:76:1c:f1:79:a8:d4:16:c6:2d:f0:4c:f0:59:cf:e3:cd:3b:
4c:a8:60:bf:9b:33:d5:9d:8c:03:18:de:b7:52:27:c5:d3:19:
81:28:1e:51:33:2c:77:4c:ae:e7:a8:b5:57:ec:0d:34:fb:ee:
78:1e:c8:27:84:75:27:cc:6d:4f:e2:cd:96:6d:db:8f:d3:5a:
d5:e8:8b:f8:52:c7:fe:0f:95:fb:b1:f3:a0:f7:9a:3b:8f:46:
fe:c8:3b:3f:d9:99:11:36:42:71:c8:1e:6f:b8:a2:51:17:1b:
13:83:ef:49:2f:0a:c7:5f:28:04:46:2c:f8:d3:4f:28:e2:b6:
63:29:42:9a:6a:2b:8f:46:eb:04:00:f8:8d:d8:1d:7c:61:fd:
40:c2:75:bd:9c:b6:15:bb:01:48:c6:75:fe:0b:6b:fd:2a:6b:
52:bd:f9:1d:a6:8e:4f:34:8c:ab:ca:07:97:a9:4f:19:df:e1:
fd:14:93:b3:98:d3:67:55:a2:12:71:14:12:9b:1b:c1:2b:0b:
a9:9e:70:88:42:38:4b:de:51:99:52:6e:a9:4e:ac:05:2b:b0:
e4:e9:ca:42:f3:4a:15:86:c3:53:8b:68:0d:7c:6e:ec:ad:40:
57:a4:e5:f8:9f:b4:37:49:e8:a1:14:6c:a9:bc:e5:ad:93:20:
7a:c0:07:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:23:12 2025 by rpki-client