Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ff479a6-2ee9-3818-ac68-ccfa0d23ead3.roa
File: 3ff479a6-2ee9-3818-ac68-ccfa0d23ead3.roa (raw, json)
Hash identifier: g8ahDF9Lj141o7DhdcLWKPuKD/ED2mplbUL8/ze4MJ0=
Subject key identifier: C5:B4:FB:BD:C0:C8:AD:18:B1:81:93:20:4C:1F:C3:51:FB:87:F0:5F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401D9EC33AE1BFC5D1669EB160
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ff479a6-2ee9-3818-ac68-ccfa0d23ead3.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 169.205.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1d:9e:c3:3a:e1:bf:c5:d1:66:9e:b1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=9422d0a0-951f-406d-a080-7685bedcc819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e4:d1:2a:1e:f6:86:0e:6a:71:ef:d8:cb:91:
ce:14:6f:24:ec:64:3b:6c:6e:58:38:aa:e1:cc:b5:
21:46:7b:c6:c9:2e:6e:62:5e:ad:cb:8a:0e:5c:66:
42:04:ab:c3:6e:47:1a:06:b1:b6:e5:f0:1a:6d:6f:
cb:71:73:45:6d:71:10:cb:2e:9e:83:ef:f8:eb:b8:
d0:6c:55:6c:03:48:d9:ce:35:69:a0:af:4f:65:6c:
5c:b9:1a:c8:70:17:38:f5:82:0e:e7:1a:b9:a9:8c:
b5:b2:b7:74:a4:5b:99:2e:14:11:8d:42:78:3e:b2:
a0:e3:11:aa:63:6b:a9:19:eb:9b:12:c8:71:3b:fd:
bf:0d:c5:6f:a5:b4:ab:8b:c9:52:dc:4e:bc:74:2c:
68:22:53:53:71:80:9f:7e:f2:40:2a:39:8f:fd:08:
90:58:25:03:f5:69:45:b9:8c:02:c4:d8:05:a3:f6:
56:21:2d:29:5f:32:34:f0:d9:b1:d4:e2:ad:6e:83:
26:71:7c:25:c3:b4:56:55:ff:6d:70:13:e7:44:c5:
60:6c:30:df:02:79:27:61:82:9a:46:a2:42:a6:d6:
7e:05:63:fa:34:c6:79:3e:41:63:65:52:40:1a:5e:
04:19:b2:25:2c:5c:b6:0a:50:7d:d0:f3:5f:47:e8:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B4:FB:BD:C0:C8:AD:18:B1:81:93:20:4C:1F:C3:51:FB:87:F0:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ff479a6-2ee9-3818-ac68-ccfa0d23ead3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
169.205.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:ad:ea:00:4e:79:ff:98:9b:08:6d:76:0d:29:d7:2f:53:85:
50:5c:ba:30:bc:34:11:b8:67:60:1b:a6:6d:37:d7:ab:53:69:
d0:7b:50:b1:8a:a9:94:8d:bc:ce:f0:9c:e2:81:cf:73:3f:47:
b4:6c:a6:36:57:37:36:8b:63:b1:e2:91:2c:30:08:5a:a9:33:
c1:9f:2d:de:40:d9:ed:31:86:a3:0c:a3:0a:20:d7:99:b4:2d:
af:cf:1b:a5:dd:81:24:f1:4e:d9:68:2e:57:87:f3:73:52:2a:
f6:32:af:99:6e:62:e6:a8:25:6d:6f:3f:e8:1c:e1:e6:da:2b:
5c:41:62:bf:71:85:38:d3:90:b7:62:2d:2d:06:92:3d:3b:9b:
74:95:55:d2:8e:5b:9f:ad:13:a4:5d:6e:33:2e:49:45:bb:46:
06:8a:7d:29:8c:ed:17:05:75:ea:3d:92:7e:af:9b:d9:e4:06:
6e:e0:98:a0:57:0d:83:da:b0:55:89:ac:0f:91:f0:85:44:f8:
3c:fd:02:66:b8:b3:88:12:1c:74:f0:ce:5e:fc:4e:05:0c:d4:
de:0b:20:c9:0e:f0:82:05:2a:56:13:c8:bc:da:bf:ee:8f:49:
93:a3:b8:af:56:2a:bb:b9:1f:e8:e2:22:53:95:a5:96:97:74:
3b:59:0d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:08:08 2025 by rpki-client