Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/584bfa68-a093-3657-b03b-f1dd9781125a.roa
File: 584bfa68-a093-3657-b03b-f1dd9781125a.roa (raw, json)
Hash identifier: sExudgFJNuD9E2t0yWOfaJ7PzPgNHMrdXKzDxjRLyaY=
Subject key identifier: CC:D3:D5:F8:69:FA:0B:60:F4:8F:81:54:DB:ED:0E:5F:E6:4F:B7:F4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FE12224F993795F37D7118F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/584bfa68-a093-3657-b03b-f1dd9781125a.roa
Signing time: Fri 11 Nov 2022 12:00:00 +0000
ROA not before: Fri 11 Nov 2022 12:00:00 +0000
ROA not after: Sat 17 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 157.241.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:e1:22:24:f9:93:79:5f:37:d7:11:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 11 12:00:00 2022 GMT
Not After : Dec 17 05:00:00 2022 GMT
Subject: CN=a28eb391-f359-427f-b8da-66e04fd624ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:07:47:6e:0f:35:89:5d:fa:59:81:5f:25:
5c:b2:29:99:44:00:4a:af:38:32:f1:77:f3:62:da:
1c:a6:35:01:e2:a7:ef:fe:5e:41:d2:62:28:dc:91:
f1:e7:f6:05:e4:f1:cc:7d:30:7d:03:ce:1f:a9:c8:
6a:ae:56:e0:13:3b:68:02:bd:88:6b:e9:c1:4d:6f:
0b:73:4d:0f:eb:d6:62:47:1e:36:60:27:65:20:c1:
81:8a:3f:fd:34:15:27:7d:a8:2b:ec:ad:4e:6e:82:
df:3a:79:1e:75:b3:3b:d2:2f:38:97:aa:21:10:c4:
95:9a:36:fc:fc:f8:77:7f:07:eb:7a:a2:5f:ef:d4:
ff:0d:fe:22:e2:60:86:3c:33:6a:e9:88:9f:7b:06:
fb:47:75:ff:b4:f9:f9:06:b9:73:7b:df:fb:b5:5a:
19:ae:58:7b:25:4a:03:74:3a:c2:c0:a6:ca:35:ed:
74:a1:50:d2:ee:97:fc:13:d7:97:99:a6:db:eb:b4:
e4:8b:71:f9:83:07:3c:94:c5:fd:04:3f:62:24:34:
88:c8:14:2a:2f:53:4a:24:23:33:ee:b7:79:96:34:
23:b1:b6:63:4c:e6:2d:2f:e6:c1:8d:79:d2:11:c5:
61:ba:15:d4:30:ee:7c:33:10:19:e0:cb:71:ad:3f:
71:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D3:D5:F8:69:FA:0B:60:F4:8F:81:54:DB:ED:0E:5F:E6:4F:B7:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/584bfa68-a093-3657-b03b-f1dd9781125a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
157.241.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:30:a9:ad:8f:c0:0b:8c:c2:e7:b9:07:8e:3e:a3:db:e7:52:
ad:69:e5:93:f0:84:f8:52:38:8b:06:89:08:3c:a0:3f:ad:ed:
db:8d:fa:72:40:a6:6b:fd:cf:71:5a:b0:a8:9d:0c:30:2e:b5:
ba:6e:0a:e8:8b:77:1d:12:e7:ad:47:10:e0:b9:48:c0:82:6f:
4a:e6:e2:0b:d9:7a:44:c1:f4:f1:b9:73:87:a8:f8:96:14:2e:
a3:14:45:c9:e0:fe:cf:b2:98:84:2c:3b:c2:e5:73:fb:30:38:
6f:bc:cf:2a:e9:0a:3a:eb:49:09:d8:06:56:66:8b:5c:9a:86:
59:45:27:7f:01:da:d8:84:fe:97:2a:65:d6:78:08:81:7d:8b:
d2:35:64:2a:ee:1b:b9:4a:b1:ec:56:a1:19:eb:17:82:2d:52:
c9:6e:8a:76:af:51:51:2e:10:22:8d:fb:f0:fd:7a:d0:fa:7a:
3e:ea:e8:0e:75:53:11:14:35:68:dd:e3:c6:d8:6c:4e:8e:22:
fc:ca:c7:1d:eb:68:73:5a:0b:e5:64:0d:9d:e0:e8:d7:52:d6:
69:fe:2d:4b:06:df:0f:22:a4:31:a0:82:4e:82:62:ea:32:24:
29:15:92:af:83:8b:b1:92:be:e3:d5:74:57:2b:02:34:cc:52:
c1:42:fa:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:50:04 2025 by rpki-client