Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/356753ca-8db4-36bd-b301-239bc87283b4.roa
File: 356753ca-8db4-36bd-b301-239bc87283b4.roa (raw, json)
Hash identifier: veYGGnrP8CND6z6Wu+mQioZ5zyUaY6ztAbi2b3mM6ZM=
Subject key identifier: 69:54:28:44:1D:0A:8D:BF:1F:C2:8F:1A:11:FD:D8:48:CD:41:19:81
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FFDB82F3375769999F6B0F600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/356753ca-8db4-36bd-b301-239bc87283b4.roa
Signing time: Mon 21 Nov 2022 12:00:00 +0000
ROA not before: Mon 21 Nov 2022 12:00:00 +0000
ROA not after: Tue 27 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 130.101.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:fd:b8:2f:33:75:76:99:99:f6:b0:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 21 12:00:00 2022 GMT
Not After : Dec 27 05:00:00 2022 GMT
Subject: CN=95cd8397-cd3d-4c67-b362-13d3608238a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6f:e1:c1:f5:41:09:81:e3:e5:4b:7f:60:d7:
f0:53:a5:e6:f6:da:19:1a:f8:81:51:97:8f:1d:50:
d8:8b:a0:a9:51:ed:39:44:4a:30:c4:4f:70:02:b2:
db:d3:da:18:59:cf:70:03:6b:5d:0e:f3:f7:f7:59:
a2:e4:28:e5:64:0c:cd:27:8c:0f:0a:d5:25:2d:65:
54:c8:eb:e9:11:7e:05:f5:e6:b8:dc:23:03:8f:a9:
4b:12:f5:4d:81:24:ab:33:8c:65:08:10:8d:8e:e8:
31:0f:33:10:86:9d:71:ad:e8:f2:3d:c1:74:de:ca:
b8:15:15:d6:e5:49:e9:6a:74:f5:bf:77:09:9a:79:
8b:25:e3:d8:2a:d5:d1:30:7c:b5:47:ab:f0:cb:8b:
a2:d4:29:d2:a4:45:bc:0b:99:3d:c5:2c:5f:ef:cf:
08:d6:10:91:29:94:26:86:f3:13:8a:57:5f:1a:08:
26:c4:66:21:5d:21:cf:f3:50:dc:d7:d5:02:20:5d:
d9:f1:23:be:fb:18:cc:90:5d:3a:41:37:a0:c6:cd:
78:f4:e2:c0:d4:10:62:d9:ce:9e:c3:3d:4f:70:21:
88:6d:37:db:7d:38:a2:3d:a3:fc:03:57:46:0c:0c:
e1:33:56:28:db:16:07:d5:95:7d:af:a1:98:fd:e6:
f1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:54:28:44:1D:0A:8D:BF:1F:C2:8F:1A:11:FD:D8:48:CD:41:19:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/356753ca-8db4-36bd-b301-239bc87283b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
130.101.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:9a:5c:23:06:81:ba:a0:e0:20:64:06:d7:43:b6:1a:26:7e:
f8:5a:3c:04:2a:08:f1:8f:53:d7:c8:56:78:7e:cd:f6:f8:95:
1f:70:c3:80:c3:bf:1f:81:fb:ab:3b:85:f2:1a:8d:16:8a:33:
76:c1:b5:67:06:a6:12:de:72:ed:cc:4a:fa:cd:6d:0e:8b:82:
20:92:7a:e6:ee:b8:3d:28:3b:30:a1:b6:32:61:10:dd:cc:81:
40:b0:0c:21:d3:b7:42:27:2b:65:42:6f:e4:dd:67:ed:58:b5:
4b:66:53:ac:dd:75:34:f8:67:08:15:9f:79:79:5b:13:7e:70:
a2:80:30:c3:25:7a:7b:2f:89:bd:84:89:4d:86:19:87:71:af:
db:b6:a9:61:4a:80:7a:9f:86:b7:96:ff:bf:58:1f:5d:62:3d:
31:12:74:bf:ae:dc:f3:01:7d:db:1c:be:13:13:ec:3f:7a:4a:
c7:dc:42:4a:12:5b:a9:88:42:78:0d:64:b6:78:3e:f7:cd:8e:
28:8b:3f:35:e5:00:8f:96:c3:89:b3:ba:67:54:ef:ba:20:2b:
e6:17:4f:0e:56:97:20:bb:08:ad:1a:7a:9a:c9:8d:99:0b:d6:
94:b6:40:a4:46:4e:cb:b6:7f:d6:0e:76:a0:d9:99:d0:c3:0c:
69:67:0b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:07:58 2025 by rpki-client