Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ae0504f-32ee-361f-aa3f-0aaf1ace4d23.roa
File: 3ae0504f-32ee-361f-aa3f-0aaf1ace4d23.roa (raw, json)
Hash identifier: i6JxOsAxiuM2W3GwQHTFT3SarCICwX0eLWu7rqk/OJ0=
Subject key identifier: 0F:82:2D:EF:BB:F3:77:68:F8:C9:58:88:05:7E:DA:07:08:D4:05:76
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F316D91E0526392547B85FD00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ae0504f-32ee-361f-aa3f-0aaf1ace4d23.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 167.166.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:31:6d:91:e0:52:63:92:54:7b:85:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=b281b5df-ca7d-4d37-83d9-f8fc69790441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:7a:8f:a8:7c:1a:f3:bf:7f:f9:a9:18:67:
fa:9a:6f:f2:48:a0:1e:c4:d2:82:2a:af:7c:f7:ba:
96:05:8c:c8:6b:c0:1d:77:44:0f:15:10:b2:43:fb:
7a:c3:7f:28:13:2f:a3:84:f6:85:5e:01:d8:c8:b8:
cd:7d:16:7b:36:0d:1c:1c:55:71:68:06:72:09:93:
13:03:50:38:a3:80:08:6f:0e:ea:4c:3e:fc:8e:72:
be:7c:29:e3:27:6f:db:46:44:6a:70:e3:84:a6:82:
94:2a:32:b2:b8:c4:2a:fd:e0:3e:9b:a3:75:37:ac:
67:1a:0f:53:25:fd:04:8f:45:2c:30:18:00:06:4e:
f4:58:61:f3:f9:86:f8:29:40:2b:17:1a:75:55:2b:
cc:24:e2:f1:83:e4:a3:bb:05:b8:64:54:07:64:d9:
57:6d:fa:da:2a:f6:89:70:2a:2a:ed:8e:0f:9f:43:
4d:e3:06:15:d2:07:1e:15:10:68:c4:75:5e:a4:49:
ea:24:02:5c:8a:fd:6f:7d:7c:de:9b:40:f8:78:27:
63:65:8e:d6:07:8f:55:8c:c7:ea:97:2f:d6:25:cf:
01:72:9d:15:98:71:8f:e2:af:85:5d:e3:1e:35:a1:
b6:89:f1:89:20:91:28:c4:6b:a4:8a:26:25:c7:c0:
e4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:82:2D:EF:BB:F3:77:68:F8:C9:58:88:05:7E:DA:07:08:D4:05:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ae0504f-32ee-361f-aa3f-0aaf1ace4d23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
167.166.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:30:00:ac:fd:8c:5c:a4:74:2b:f0:11:db:5d:a2:d0:da:d4:
27:57:08:ff:ac:09:b7:37:b1:c5:43:ea:09:32:92:fe:73:0f:
39:1d:82:44:e0:e9:08:2d:fc:e9:53:b6:98:5d:0d:b1:57:12:
74:bc:eb:bc:61:70:4b:ea:9d:96:e9:a2:d5:1a:30:07:ae:86:
34:b1:3a:69:5d:76:a4:f6:c6:d8:bd:8d:55:ff:1f:94:dc:d4:
e1:e4:b5:d8:e1:30:f3:3c:2e:8d:45:3a:5e:0c:df:96:96:26:
72:d8:16:ab:3e:bd:e3:4f:da:59:d9:ff:25:62:c2:af:2e:c8:
8c:87:7a:0c:0c:cc:10:24:d5:6f:4d:53:bb:d7:f6:fa:5b:fb:
be:f6:cb:2d:79:9f:62:d2:48:cd:a9:84:cb:75:96:b5:b2:b7:
ae:24:e6:bd:81:3f:55:5e:59:eb:41:4e:6d:f9:61:37:d7:c4:
d2:99:58:1f:5c:c8:2d:e2:5f:54:d8:bf:e5:32:1a:76:6c:52:
c1:6f:08:b5:32:3c:5f:0f:bb:de:83:4b:65:a9:66:35:de:31:
7d:34:2d:4b:4e:08:b8:48:5e:42:a2:20:a9:68:27:1a:53:11:
08:b5:e2:7f:81:15:d0:ba:2a:97:cd:a7:dd:20:f9:20:41:f2:
34:6b:fd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:53:33 2025 by rpki-client