Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/43e74083-624f-307c-aba0-3c9632e83977.roa
File: 43e74083-624f-307c-aba0-3c9632e83977.roa (raw, json)
Hash identifier: zp5V9D3rSv0UJmBe5UGMm6N0HCJBa8UEZmx1GbUWqi4=
Subject key identifier: 4A:73:F9:FE:BB:DC:7A:9F:6D:59:3A:89:B0:23:BA:EC:D3:78:74:2C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C96BB16D6F62DBBA3D5B6CC50
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/43e74083-624f-307c-aba0-3c9632e83977.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 129.160.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:bb:16:d6:f6:2d:bb:a3:d5:b6:cc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=871950ff-4daa-48ae-bd31-481408e4ee5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:73:94:b8:02:2f:04:e4:d3:b1:87:ce:80:b3:
de:e2:c5:4a:6a:ab:e3:b5:b3:e2:52:20:e0:63:95:
a5:78:03:1a:f9:77:af:61:30:55:a8:e3:fe:e3:46:
c9:0a:24:d5:c3:86:49:22:00:39:1d:8c:2d:53:20:
eb:47:65:b9:a2:5c:3e:c9:90:97:af:f5:97:b0:b4:
72:11:57:e9:d0:bd:74:e7:3a:cf:c3:c1:9e:3d:35:
ac:11:35:95:c5:84:66:27:53:88:25:84:92:22:3c:
ed:85:35:f3:cc:46:dd:c5:e7:03:d9:76:be:82:83:
e1:47:76:a7:ca:ce:c4:3f:3f:4d:bd:87:50:ab:93:
0f:d3:23:a3:cb:0a:cc:cd:56:cd:b5:b2:bf:d5:18:
dd:9d:fb:eb:0c:dc:f8:f6:9e:86:ef:7b:e6:38:f6:
2e:7f:cd:cb:61:a7:77:66:05:14:42:67:c5:82:b1:
65:43:b2:b9:eb:81:9e:c1:fc:13:60:89:33:83:b8:
e4:04:f7:c1:9c:52:4e:3d:ef:94:96:c0:b6:ac:2a:
41:93:1d:2c:58:ef:57:23:e8:4f:08:af:63:bd:55:
03:1f:86:9d:84:fc:0d:11:ec:11:1b:18:2f:a5:18:
74:cc:f6:3f:d8:f1:36:c4:7f:fe:ca:0c:19:41:14:
3d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:73:F9:FE:BB:DC:7A:9F:6D:59:3A:89:B0:23:BA:EC:D3:78:74:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/43e74083-624f-307c-aba0-3c9632e83977.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
129.160.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:5d:fe:cc:bc:a0:44:f1:4c:13:4c:af:bc:0d:83:12:81:2b:
1e:3e:5a:61:18:31:be:1c:c0:48:2a:8f:1b:9f:57:38:9b:ed:
b1:c3:80:3f:30:c4:45:17:e3:e1:e5:fc:c8:5a:28:b1:91:04:
da:7a:5e:e2:d1:a9:82:ea:11:ca:76:3b:3b:29:28:a3:fe:a2:
62:94:f8:e9:5d:cd:2f:00:ce:01:39:a9:d0:40:db:51:55:b4:
95:fb:a9:ce:40:c6:f3:a5:e9:09:bc:9c:14:71:61:01:44:99:
10:12:73:ef:03:77:ff:d6:67:33:1d:4b:0c:44:0c:ba:cd:c9:
86:0b:c0:45:a5:ab:07:88:f4:c5:63:c4:6f:fd:fe:14:24:49:
b5:3f:12:4a:2e:cc:15:a0:83:96:da:b2:23:be:8e:13:6b:27:
d8:2d:1e:d5:b3:ae:cf:ec:eb:8c:d7:bc:8b:fd:1d:0b:56:00:
ae:de:f2:c7:cb:0b:4b:1a:60:9c:a1:07:b7:be:9a:c3:13:cf:
88:81:8a:2f:e6:3d:dd:2c:20:41:be:d7:d1:8e:92:2b:27:b0:
18:e8:70:4f:1e:2e:26:4e:ae:64:3e:fe:66:be:03:92:5a:b0:
d7:ba:fc:60:65:19:04:af:3c:64:4f:0d:a4:ae:29:2b:cf:f8:
8f:16:e4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:42:59 2025 by rpki-client