Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3da4d030-1147-358c-88fc-0b07cc10fdf5.roa
File: 3da4d030-1147-358c-88fc-0b07cc10fdf5.roa (raw, json)
Hash identifier: Xge/cw7hY3eDW7TX2Vgr3f0LKN1Ga7OYo6mm+o1tcPM=
Subject key identifier: 86:BA:7A:F7:0F:15:C6:F2:20:38:0B:07:16:B3:E7:FC:8A:47:16:A4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F31143FCD712DC68A17891E40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3da4d030-1147-358c-88fc-0b07cc10fdf5.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 162.137.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:31:14:3f:cd:71:2d:c6:8a:17:89:1e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=91c7b8c7-aa09-4d77-b24c-6252cacfe3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:63:31:1e:4e:8d:b1:95:99:35:7f:d8:fe:
91:82:bb:40:6b:1f:b8:9c:2c:84:96:8e:42:a6:d5:
f9:59:58:7a:83:df:85:a2:32:92:b0:e3:f9:90:c6:
5c:a2:83:cc:11:03:d0:39:26:a2:f4:26:8d:90:87:
bd:59:81:06:36:91:2e:8d:75:51:bc:43:b7:27:af:
38:d4:23:50:96:a4:36:d6:f4:19:10:b3:27:20:f7:
d6:79:bf:8f:77:c8:99:2b:e3:99:2a:41:81:a1:2b:
d4:a6:e5:6c:9a:f2:66:e1:45:d4:1a:e3:df:b3:3a:
a6:cc:e5:28:71:35:09:55:1a:01:d7:6a:6c:b4:cd:
b6:41:6e:2b:af:c8:01:a6:9e:dc:a5:df:cd:07:48:
5f:64:46:cd:d9:8e:df:ef:87:3b:61:0d:d1:e7:69:
ff:68:ae:b9:c4:56:8c:6d:df:d6:67:a7:ca:15:09:
08:14:49:cc:db:42:c6:32:a6:d1:b9:c3:5b:51:0a:
35:16:60:ea:13:fa:4b:7d:b8:82:75:ee:58:79:f2:
ce:1d:77:98:a7:34:50:45:f7:5d:4e:f7:c8:fa:59:
22:3b:98:7f:1c:e8:c6:a3:78:6d:59:2c:0c:6c:1c:
5a:9c:05:d8:be:5b:3b:ab:68:90:2c:3b:aa:84:18:
e8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BA:7A:F7:0F:15:C6:F2:20:38:0B:07:16:B3:E7:FC:8A:47:16:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3da4d030-1147-358c-88fc-0b07cc10fdf5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
162.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:b1:53:e1:9f:32:a9:1c:6f:03:c8:f6:07:b1:ca:bc:71:ef:
d0:f2:6d:06:06:ea:a4:7c:4b:93:00:fe:02:10:d4:d5:11:5d:
6e:11:35:4d:cf:94:53:cc:8f:aa:e7:f5:13:ac:52:3a:df:46:
0d:65:16:06:21:d4:0e:ce:56:06:d9:f7:49:9e:77:e2:11:c5:
40:6a:af:bf:f1:83:f0:14:d5:f1:08:59:f1:d4:6a:cc:8a:76:
67:ee:9d:e7:ba:ee:00:ff:89:3d:b2:f0:33:62:6b:0e:e7:72:
22:59:e6:21:1d:d5:82:7b:6f:65:15:f1:8f:f6:4e:ec:ff:b0:
8c:eb:32:af:0a:90:75:6d:fe:31:15:21:03:b9:39:ed:01:47:
0f:14:b2:00:08:8b:e9:44:01:24:ea:2b:2e:fe:85:d8:5d:94:
e6:34:cc:d2:cc:19:84:c3:c1:cf:8c:8f:01:2d:db:be:6a:35:
43:13:b5:e7:3b:f1:fc:22:9a:9e:28:ee:b6:d1:21:b8:d3:91:
82:3f:14:76:e1:7c:51:41:8f:58:08:47:5e:f4:fa:32:be:78:
02:ae:e7:da:5c:4b:7c:f8:84:82:3f:4b:c0:5f:61:db:34:c2:
74:a3:07:31:98:a3:93:e4:97:61:f4:1f:22:4b:68:8c:52:f7:
06:6f:64:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:21:25 2025 by rpki-client