Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/576fc380-1315-3acb-bc26-b29c10837bcf.roa
File: 576fc380-1315-3acb-bc26-b29c10837bcf.roa (raw, json)
Hash identifier: rN7bzdew+khMSnADhHeVev7xtWTKxSOMBgtI7v8IJdc=
Subject key identifier: D1:65:CB:02:8D:E8:68:7D:2A:1E:72:83:27:31:13:E4:AA:40:A6:2E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCBABFFD54A2445638DD3A000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/576fc380-1315-3acb-bc26-b29c10837bcf.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 192.39.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cb:ab:ff:d5:4a:24:45:63:8d:d3:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=29e40179-3afa-4d9f-b244-8125c911ef52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:50:a1:28:d4:3f:93:49:1e:46:d9:21:35:99:
ea:cc:d8:83:94:a0:bb:5d:fa:13:36:55:d8:cc:b5:
dc:ba:5f:11:1e:81:53:5a:d2:14:eb:79:c9:a2:98:
6b:d7:26:29:d8:d8:ee:ac:03:c9:a2:fc:6e:3a:b5:
00:a8:4e:fe:1c:ef:e0:03:ce:6d:d2:db:3f:61:02:
40:44:7f:d5:3f:d7:0e:2f:10:ee:4c:f1:03:dc:1d:
96:f8:f1:c1:01:b8:9c:29:5c:1e:87:70:5f:32:91:
41:e7:86:09:61:6d:fc:82:56:7c:a2:cc:95:9b:af:
79:d0:15:e6:7f:9c:44:3a:75:4d:51:ef:9d:9f:f8:
c4:df:03:bd:3d:e1:77:12:fd:fe:07:24:61:be:ea:
2f:6b:7f:3b:c7:a4:86:0f:61:fb:01:1b:32:7b:b2:
e4:41:28:0f:80:5b:aa:39:cc:9f:f9:97:4a:f9:01:
12:9c:ed:b0:46:06:9a:09:04:49:bb:50:c3:c9:79:
c5:8e:42:ca:6b:83:23:fb:bc:64:dc:94:7c:4c:8f:
b7:be:0d:12:39:32:63:8f:3d:37:e7:d7:2e:1c:5e:
ea:38:e9:10:c7:07:d0:45:8f:c6:c9:ef:bd:8f:c6:
c3:b6:51:6e:7e:b0:03:6e:d0:71:6f:0c:6d:ea:b9:
01:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:65:CB:02:8D:E8:68:7D:2A:1E:72:83:27:31:13:E4:AA:40:A6:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/576fc380-1315-3acb-bc26-b29c10837bcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
192.39.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:43:26:a4:6b:99:c3:7b:38:d6:ba:0b:0a:82:e9:23:57:d5:
63:f2:29:2a:63:1b:7c:44:24:ef:39:80:2a:d8:c1:52:72:e8:
fb:d4:ca:4c:f6:0b:f8:1c:26:34:f8:03:ff:87:dc:80:e0:af:
4a:cf:f7:5c:22:b4:79:f6:35:7a:0a:ec:4c:60:ec:a5:26:b0:
9f:2f:e4:ae:03:94:1b:50:2f:2f:75:f8:d7:eb:77:c5:4e:dc:
f5:17:dd:ab:e3:2d:18:87:dd:a3:11:e9:73:fc:13:47:03:fb:
e8:cf:02:d6:c1:a0:d2:8f:d1:b9:34:11:98:ff:38:e2:8e:32:
0b:7b:51:d8:94:6f:4f:e2:fb:31:b0:10:29:9e:50:16:9f:63:
86:6a:ae:63:1f:11:56:a2:c7:f3:84:f4:56:48:bf:20:53:a2:
47:1c:d9:96:54:53:5f:e0:aa:99:d5:86:67:9e:a2:f6:b7:60:
d7:8f:6a:da:9b:5d:15:55:50:62:59:ad:b2:87:c0:0f:74:f5:
6c:79:6c:88:0c:4d:ea:11:b1:97:f4:90:2d:ec:75:0d:c9:b0:
e2:59:11:71:c2:69:e1:94:56:08:fd:cf:3d:f6:08:81:c0:d0:
3f:ed:30:db:9a:d0:0c:ed:39:f3:9f:59:a6:3a:f0:38:11:2e:
7f:ed:b5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:58:51 2025 by rpki-client