Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f25693c-63a4-32ca-8490-96dd469b4d0a.roa
File: 3f25693c-63a4-32ca-8490-96dd469b4d0a.roa (raw, json)
Hash identifier: 88c/Ds27iMwD2TSkI7F3jSr3lFlomdXSYajWH9rT60g=
Subject key identifier: 91:36:E9:87:39:7D:23:C0:46:69:0B:A2:E1:0C:88:43:1C:D2:58:03
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F89C63D47C5CB70C535041440
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f25693c-63a4-32ca-8490-96dd469b4d0a.roa
Signing time: Mon 10 Oct 2022 12:00:00 +0000
ROA not before: Mon 10 Oct 2022 12:00:00 +0000
ROA not after: Tue 15 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 130.101.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:89:c6:3d:47:c5:cb:70:c5:35:04:14:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 12:00:00 2022 GMT
Not After : Nov 15 05:00:00 2022 GMT
Subject: CN=cda103cc-b54b-4149-a592-ee3badacd287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:c0:8d:3b:2d:0d:2e:47:9c:df:c9:f1:08:
94:b5:82:54:36:5a:76:8b:ea:8a:65:e3:cd:25:a1:
35:ea:2a:8c:f0:ad:fc:16:5d:29:3a:7a:6d:36:2a:
0f:b8:e6:ba:35:dc:b7:7c:0f:42:c3:83:ce:bb:00:
b8:45:54:fc:f4:ff:c2:fc:8a:cf:2e:97:bc:9b:24:
51:25:fc:a1:20:60:46:35:78:2f:95:1c:a8:4b:6d:
b4:e7:9a:07:4c:e3:ed:ac:ed:8e:aa:35:d1:5f:7f:
a1:6e:42:0b:f3:f4:36:6f:3f:93:a3:ca:d6:49:53:
3f:f7:a4:f4:7f:c7:3e:0f:e3:54:de:a9:6e:e1:ae:
04:25:b3:d8:8d:8d:07:11:d7:3b:a3:54:76:0d:df:
27:ba:f7:f1:a0:17:e7:7c:51:47:d1:93:47:f8:49:
7b:01:b7:5f:c8:dc:76:1d:fb:da:df:3a:fd:a1:f1:
1e:6a:72:0f:18:1b:42:9f:39:99:8d:d5:e6:90:5d:
58:2b:f4:26:32:ce:74:59:ef:69:32:fd:57:73:32:
e7:a4:d1:9f:ea:1f:96:e4:69:2f:8f:65:3f:7e:bd:
5d:da:c4:7b:d7:94:e5:25:6b:c1:63:af:d1:a9:f8:
ea:25:32:9c:9f:c7:d8:ef:85:b8:9e:d7:5f:be:89:
6d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:36:E9:87:39:7D:23:C0:46:69:0B:A2:E1:0C:88:43:1C:D2:58:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f25693c-63a4-32ca-8490-96dd469b4d0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
130.101.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:c8:dc:ef:af:8b:cf:b5:de:64:42:ad:08:c5:55:b8:8b:24:
fa:f4:35:0b:5a:05:34:f6:df:5e:a2:09:99:cc:18:62:4b:eb:
23:92:6c:11:f5:f8:38:a8:e8:3f:4e:6a:62:44:ae:45:4b:dc:
e1:89:5e:09:bd:02:7c:8a:f3:92:37:29:73:58:23:49:34:1e:
74:dc:ce:f4:69:3f:9b:61:67:3c:4f:ef:e2:2c:67:ad:81:34:
43:90:2e:07:cb:00:1b:c5:a4:c7:cb:6d:d0:1b:a4:15:6b:e3:
e1:aa:1f:ee:a1:0f:a1:a5:26:c9:f3:44:08:2e:6c:4e:f9:95:
57:ab:e2:c0:cf:55:2d:ff:21:fd:86:1d:c0:bd:c3:da:28:50:
c7:e4:63:af:54:84:da:e2:89:27:3c:ec:d5:a1:4b:8e:97:5f:
a0:be:d8:ea:c4:92:a9:7a:92:65:a2:6a:0e:ed:18:03:18:a6:
f7:e3:70:16:6c:80:0d:9f:97:ef:68:65:b1:21:69:c3:54:3c:
d6:32:9e:2d:d0:b9:65:3a:c4:be:0d:e8:c6:29:a2:53:b4:3d:
19:70:d2:11:e1:00:97:81:ff:6e:87:89:56:0b:21:5a:9a:b2:
3a:dd:3d:60:d1:85:02:fc:25:fa:bd:1c:6a:48:13:da:b9:8c:
12:91:f8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:58:03 2025 by rpki-client