Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/354cecd9-5977-35a7-8162-68538d6a637f.roa
File: 354cecd9-5977-35a7-8162-68538d6a637f.roa (raw, json)
Hash identifier: mvyiFzmOGXBw71w9xSpM98tgNG32cSOB49lm15hRhJU=
Subject key identifier: EB:8F:E3:54:7C:3D:3C:69:0F:CF:53:AC:1C:C3:79:E9:84:C1:CB:57
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD04D6E41407D9ABB6729A900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/354cecd9-5977-35a7-8162-68538d6a637f.roa
Signing time: Thu 05 May 2022 12:00:00 +0000
ROA not before: Thu 05 May 2022 12:00:00 +0000
ROA not after: Fri 10 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 146.207.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d0:4d:6e:41:40:7d:9a:bb:67:29:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 5 12:00:00 2022 GMT
Not After : Jun 10 04:00:00 2022 GMT
Subject: CN=99ad1852-06b8-406a-9c71-6dc3f33adecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d6:b1:67:c5:81:5d:e8:8f:37:79:a2:9e:d4:
41:bd:2a:a3:b4:b1:2c:68:d9:74:7d:db:8f:0b:3a:
1d:88:c5:c0:e6:d8:2e:88:d5:fb:76:0d:ea:40:fd:
0f:11:a8:fd:f0:28:27:ba:ab:90:e4:f3:8a:b5:71:
e7:8f:24:16:e5:7e:72:9b:13:f5:56:12:7b:40:7c:
33:82:30:1b:f0:ec:c3:75:36:22:e1:77:71:48:8d:
9a:fc:99:2f:c4:62:3d:46:51:a7:f9:dc:91:08:a8:
7e:5e:78:f3:ed:c4:90:ee:11:0e:05:07:d1:bf:23:
e7:3d:49:9d:f6:f0:de:76:10:bc:78:28:d0:5a:bb:
79:23:82:6c:5a:ea:39:a7:a5:06:1d:25:fc:f7:6e:
bb:78:a4:34:f3:6a:e7:86:15:45:9d:a6:90:f5:81:
39:0a:b6:01:eb:ec:c0:6e:96:35:60:90:b3:2c:66:
db:3e:9c:b3:06:f6:d0:8c:d9:ae:7c:72:14:e0:53:
2b:54:0c:36:da:5d:bf:04:a4:cd:1b:38:93:4b:59:
5b:67:6c:20:03:4f:03:23:7d:04:92:a7:9a:35:65:
ff:ce:fd:75:a1:09:df:39:53:cc:e8:8d:55:e2:fa:
e9:1b:de:ed:65:3a:47:74:a0:cb:cf:da:1b:44:08:
0d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8F:E3:54:7C:3D:3C:69:0F:CF:53:AC:1C:C3:79:E9:84:C1:CB:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/354cecd9-5977-35a7-8162-68538d6a637f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
146.207.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:eb:69:c7:13:ad:b4:57:e4:19:8e:b0:0f:ff:da:65:66:47:
06:3a:42:7f:c6:f9:8e:ed:75:32:1b:da:43:25:b7:1a:82:d4:
63:b5:06:6a:b2:5b:a4:bf:ab:03:12:2c:dc:8c:20:3a:3b:42:
0b:2d:65:38:c5:12:d5:36:a4:4d:8d:6f:aa:28:14:37:ee:8e:
cd:f2:13:91:f2:09:e2:41:82:8f:a8:f2:8d:cc:f1:73:ab:61:
40:0b:92:80:be:5b:8d:15:de:92:ea:eb:1b:8e:dc:05:a8:21:
f3:40:19:86:0c:79:5f:ef:d6:61:2c:06:3e:94:ab:e5:2d:23:
0f:f5:3f:2c:07:9d:0e:6c:b7:93:76:3f:cf:40:eb:4c:cf:69:
4f:f3:76:79:85:b1:48:b0:b1:09:dc:9d:b1:5e:15:5b:c9:0b:
a4:08:a5:33:4e:ce:d0:e9:40:da:6d:49:ec:56:10:a0:85:51:
a3:7b:91:c4:70:29:16:29:16:6f:98:d8:a4:7c:88:e0:e4:ae:
39:67:d6:cf:ec:f2:71:67:e7:bc:28:41:df:90:fc:ba:a1:48:
12:9b:9f:3d:2a:af:84:c2:15:fd:7d:9d:27:b2:49:c2:a4:87:
16:c2:a3:67:77:f3:3f:55:f0:4c:8e:da:fc:aa:37:55:cf:7f:
a7:ae:bd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:58:34 2025 by rpki-client