Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/367daead-b2c1-3e41-88f3-d074ed1f24be.roa
File: 367daead-b2c1-3e41-88f3-d074ed1f24be.roa (raw, json)
Hash identifier: 9BHmvunXC2MYgPEHsbrkPZ2UaJkgEje1ydCZdtQT+dY=
Subject key identifier: BE:D0:62:7F:91:6C:DC:A3:7A:04:BD:72:51:8B:42:80:77:8F:7E:31
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401C323BA6CA9D82482A038180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/367daead-b2c1-3e41-88f3-d074ed1f24be.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 167.166.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:32:3b:a6:ca:9d:82:48:2a:03:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=381b7b14-7af2-4ee0-ad8d-c751e6d2af64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7a:61:40:41:a9:d9:2b:83:f4:84:fe:da:2e:
11:de:3f:7b:fe:c6:03:8c:52:38:52:ab:7e:23:aa:
dc:5b:40:b4:1d:73:80:43:2f:70:8e:14:d3:c7:5f:
b6:d1:3d:d6:9d:6f:ab:21:0a:55:e4:a9:60:33:75:
c7:34:dc:5f:59:7e:21:09:16:f1:c4:0c:ac:07:69:
7d:03:ed:1d:eb:89:08:a5:e5:32:c6:fc:8b:f7:4a:
42:11:3f:2f:73:b0:92:cb:94:c6:00:0c:80:ab:19:
10:2b:2c:29:11:df:b4:2c:77:f7:38:82:39:11:76:
43:16:af:dd:e1:fe:03:64:9d:16:c4:dd:c0:c9:e7:
ee:2d:5d:c9:f1:86:a6:47:f6:ed:80:fc:ef:2b:97:
7e:6b:e1:e9:54:3e:34:b5:2f:0d:e7:83:d3:76:1b:
30:9a:aa:19:16:36:79:60:af:91:f7:81:39:8b:12:
9e:c9:da:08:9b:e1:40:11:58:a0:6c:b1:3d:91:15:
bf:69:8f:33:23:8c:ad:07:89:5c:ff:d7:72:b8:25:
55:00:05:48:19:29:33:6b:d7:58:59:a1:e9:10:73:
18:0f:f3:75:d8:2b:70:1b:9c:67:f9:05:05:fb:0f:
59:01:31:b9:7c:ef:2f:cb:57:ce:d4:82:fc:a7:6a:
73:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D0:62:7F:91:6C:DC:A3:7A:04:BD:72:51:8B:42:80:77:8F:7E:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/367daead-b2c1-3e41-88f3-d074ed1f24be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
167.166.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:f5:61:dc:af:4c:ea:3c:ab:0e:6e:b3:2d:e5:33:06:b4:f7:
8e:a1:d5:12:3e:27:89:bb:96:05:5f:ef:31:cc:f4:3d:92:72:
c3:82:b4:5d:46:26:35:89:d8:bc:3b:1d:50:1d:f1:ce:39:72:
10:46:eb:64:18:74:71:6d:f6:03:92:5f:c2:99:b3:28:52:06:
8d:ff:69:05:57:65:68:5d:f5:44:94:4e:a5:18:a6:ff:3c:2d:
f6:69:d8:75:e2:2f:ba:50:52:7e:e1:64:bc:a9:78:de:75:34:
d0:86:84:cc:65:1f:23:4a:04:8b:a2:c0:d8:b4:d2:a4:e2:ab:
b6:3d:06:f7:98:81:7a:77:8b:19:e3:7d:55:e1:ca:d0:8c:41:
e9:6a:fa:b1:01:1f:38:71:8c:b0:f4:3b:9a:30:f7:bc:83:e7:
36:03:fb:32:51:c2:92:60:00:f8:d6:ee:f0:df:c1:5b:bf:c5:
1c:58:68:4d:d5:e1:06:e2:e0:bc:a4:c7:98:a0:9d:0a:53:a5:
70:ca:dd:60:b5:85:93:e7:cc:b8:38:0a:df:25:ea:5c:fd:39:
73:db:33:76:84:ea:57:1a:92:4b:31:70:44:3a:cc:7f:66:1a:
9e:74:b9:ca:9c:ae:ad:19:4f:24:4b:02:65:13:14:ef:91:3c:
8a:c1:59:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:03:37 2025 by rpki-client