Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/571d5eb0-57af-331f-b12a-c486801c40bd.roa
File: 571d5eb0-57af-331f-b12a-c486801c40bd.roa (raw, json)
Hash identifier: Btg+jH8t0ns99LTHROsvsyyP0NFpc0BU0VN4gjtrBYg=
Subject key identifier: F3:E3:9D:20:BB:F6:E5:15:2C:12:95:95:A6:52:7C:4C:03:D3:7F:78
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B6A4878937FE28A95DC20280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/571d5eb0-57af-331f-b12a-c486801c40bd.roa
Signing time: Thu 26 Jan 2023 12:00:00 +0000
ROA not before: Thu 26 Jan 2023 12:00:00 +0000
ROA not after: Fri 03 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 144.207.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b6:a4:87:89:37:fe:28:a9:5d:c2:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 26 12:00:00 2023 GMT
Not After : Mar 3 05:00:00 2023 GMT
Subject: CN=c1e328e3-237e-486d-9962-93fa893a3187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:e7:83:62:56:36:e8:dc:06:90:67:9b:80:
11:73:ee:0d:ce:3a:02:de:17:56:6a:6d:36:14:c8:
6b:57:32:a8:7d:f4:24:62:44:15:b4:04:25:3d:38:
83:4c:23:63:9b:b9:8a:b7:5b:33:96:d2:56:aa:93:
55:26:1d:18:31:b6:7d:66:d7:0f:b6:77:27:0a:c4:
cd:76:bd:01:9a:73:1c:f0:78:3c:3c:6e:a7:fb:ea:
f3:14:2b:d9:73:e4:93:57:3a:06:9a:d1:74:e0:be:
df:6c:de:a8:07:19:1d:18:a9:12:29:33:2d:45:f8:
5e:20:fc:49:5a:9e:de:3c:31:2c:41:4a:7b:3d:40:
1f:a2:0b:d8:50:72:77:b1:29:96:c0:00:e4:9b:3e:
8f:c4:2d:26:19:a7:6c:32:39:28:5f:e1:fd:56:84:
7a:cf:99:6e:92:94:0b:ef:84:ce:ce:b8:9a:05:1e:
58:44:b7:e1:af:54:a7:07:c9:ed:1f:f6:df:97:9a:
d9:bf:9c:12:44:90:82:af:c3:36:d1:56:53:04:79:
ce:3c:2c:25:34:a4:c1:cf:b2:f5:84:f3:f6:b6:13:
43:0c:00:8d:25:35:b4:df:da:65:6c:7c:ad:e9:9c:
91:31:73:6a:f0:c8:4e:04:2e:02:8c:4e:c9:9b:7d:
24:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E3:9D:20:BB:F6:E5:15:2C:12:95:95:A6:52:7C:4C:03:D3:7F:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/571d5eb0-57af-331f-b12a-c486801c40bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
144.207.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:58:1c:b2:5d:4a:70:51:70:c4:48:99:bd:35:35:23:8d:50:
6a:a9:0c:aa:19:58:7f:8a:9c:e0:69:3a:57:8e:46:e1:9b:05:
3e:1f:31:67:7a:61:d4:a6:df:57:6b:2e:37:9c:8f:dd:8e:8b:
3c:70:18:03:4a:ca:53:d3:b1:28:30:d8:93:1f:a1:58:61:29:
2c:55:ac:27:f9:05:da:76:54:9e:f0:28:91:96:01:fb:59:36:
9d:65:d2:60:27:55:8c:dc:33:b5:84:3e:3b:22:b1:cd:b2:98:
32:73:1e:80:67:58:1f:d4:52:ac:a3:bf:60:b8:33:51:a2:a3:
fb:80:25:38:0c:b5:fa:cd:78:f2:d8:82:13:c2:ad:aa:16:ac:
0a:4d:fc:0b:5f:82:63:d8:f3:ed:66:d1:a9:df:1f:59:74:0a:
96:ec:0d:8d:04:0d:6d:da:52:b6:ad:d1:33:4c:a7:00:dc:6c:
44:87:4b:97:e5:db:9f:fd:a4:55:16:c3:a9:86:30:57:c6:31:
d7:e2:8d:3c:60:bc:c3:63:36:23:c5:c2:72:f7:61:19:2b:11:
e3:e9:71:f6:ba:51:d1:41:0a:e2:df:2e:23:63:40:13:b9:7e:
79:14:75:34:c3:2f:50:9e:7d:76:bf:4b:1f:2d:19:0c:70:ab:
e2:6f:09:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:58:15 2025 by rpki-client