Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4115d1d4-e8bf-348d-a431-a2c8abf12c4f.roa
File: 4115d1d4-e8bf-348d-a431-a2c8abf12c4f.roa (raw, json)
Hash identifier: XMO7Eed9ArPizPsnMcF8AWX8NwGqe1abPCs1sTUK+JU=
Subject key identifier: 70:7F:47:65:BB:62:32:15:B2:85:E8:A5:4A:55:F6:C2:7B:BE:23:B7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E765A66886A16D10AD868C6C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4115d1d4-e8bf-348d-a431-a2c8abf12c4f.roa
Signing time: Mon 04 Jul 2022 12:00:00 +0000
ROA not before: Mon 04 Jul 2022 12:00:00 +0000
ROA not after: Tue 09 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 130.101.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:76:5a:66:88:6a:16:d1:0a:d8:68:c6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 4 12:00:00 2022 GMT
Not After : Aug 9 04:00:00 2022 GMT
Subject: CN=da8aa4a4-3b11-40c4-8a68-3f0d2a02fe65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:55:18:fb:ac:de:58:1a:81:61:f0:7a:23:
0b:47:eb:c9:4d:b9:ee:22:db:a2:7e:5d:b3:22:3f:
8c:62:d8:fc:62:9e:6f:c9:00:64:1c:b0:97:36:b2:
21:fa:67:3f:02:da:45:0f:2c:bc:a0:0f:f2:93:a3:
7d:26:66:48:e8:f2:29:6d:6f:6d:bd:7d:ff:d1:e5:
f8:c7:0b:0e:6f:3d:1c:63:69:f0:85:aa:49:60:a1:
05:c1:14:26:05:fb:24:86:9c:91:ff:bd:00:93:ef:
34:b9:9c:76:0f:f4:c6:43:62:05:18:33:8a:92:61:
6d:6e:65:ef:8c:e9:01:d7:47:a0:8d:ce:95:64:e6:
c4:47:46:53:eb:87:a8:fc:d1:1e:c7:cc:0a:de:e2:
e6:94:09:ee:9b:48:22:a3:69:b1:44:9f:1a:91:f0:
90:ae:4d:d9:16:1a:e8:eb:c0:74:3e:48:41:44:71:
9d:14:5b:89:83:cd:7e:23:96:fa:c4:db:aa:44:9a:
9f:ec:42:e7:89:4f:a8:5b:a6:b1:dd:25:3a:9a:91:
97:90:87:f2:c1:41:96:ac:1c:0f:c1:52:e3:3d:cf:
f9:aa:91:66:25:38:aa:69:d5:bd:6c:79:61:8c:75:
ea:2c:6d:05:a5:a9:41:cb:5d:27:91:5d:49:69:9e:
3e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7F:47:65:BB:62:32:15:B2:85:E8:A5:4A:55:F6:C2:7B:BE:23:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4115d1d4-e8bf-348d-a431-a2c8abf12c4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
130.101.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:5a:d0:f0:89:ba:77:f3:34:f7:99:88:a3:ed:0d:71:21:75:
86:e8:a5:ee:86:d9:0d:5e:18:84:ad:18:32:25:b9:8b:c5:bf:
41:21:fa:9f:06:63:aa:65:57:1b:2d:9a:72:69:45:28:74:28:
5e:63:fb:7e:6b:41:c8:4d:d1:a3:14:e3:7d:7c:ea:eb:53:64:
30:46:97:35:32:21:42:e5:06:12:8e:1b:4f:47:d3:d0:17:56:
89:1d:eb:9f:cb:54:e9:0b:2b:f4:01:7c:5d:7b:f4:37:1b:8e:
72:9c:9d:69:38:eb:02:54:ae:bb:b8:f7:ac:7d:4e:31:ff:ed:
13:74:a0:9e:b3:b3:32:00:2c:23:c1:08:e1:e2:db:db:a3:9f:
d0:e0:52:c8:e1:56:78:e5:40:53:a9:ab:be:51:c4:2d:7b:45:
86:69:d4:21:8c:00:43:5b:6e:79:a2:a5:0c:dd:ac:a8:47:e5:
15:fe:b1:79:8b:2c:e5:fd:6d:0c:c3:19:08:29:c5:48:2f:ab:
70:47:9d:9f:47:91:36:8d:72:c5:d6:4c:f5:c8:83:95:1b:f8:
d5:30:ba:d0:0f:33:fe:92:b6:00:4b:dc:1f:8d:af:02:89:8f:
b2:c7:13:99:55:e2:0b:0f:f1:bc:b6:d1:3b:ca:14:88:a5:a3:
ed:05:30:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:19:26 2025 by rpki-client