Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/58bc838e-308c-3a3b-a3b6-4a7a85b339fe.roa
File: 58bc838e-308c-3a3b-a3b6-4a7a85b339fe.roa (raw, json)
Hash identifier: f1K3T2KD335DSysxUWn/6pm8PpdCWICTHOPW2vIGLkE=
Subject key identifier: 60:4E:FE:9F:2B:C8:39:EE:41:42:91:AC:79:0D:43:C7:06:9C:4D:5B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E010369AD310194C0BB6D31C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/58bc838e-308c-3a3b-a3b6-4a7a85b339fe.roa
Signing time: Mon 23 May 2022 12:00:00 +0000
ROA not before: Mon 23 May 2022 12:00:00 +0000
ROA not after: Tue 28 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 130.101.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:01:03:69:ad:31:01:94:c0:bb:6d:31:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 23 12:00:00 2022 GMT
Not After : Jun 28 04:00:00 2022 GMT
Subject: CN=3b03db1f-7c09-4812-af55-1e7554c8cfee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:4f:f3:ba:e4:e7:63:cf:1f:1f:22:e0:f8:
20:8a:b2:72:3b:bf:cf:d6:d8:f1:57:65:e3:68:df:
d9:aa:33:d1:a2:4f:df:87:ec:8d:2d:89:3f:f1:9b:
2c:55:a9:68:5f:f8:07:0f:e9:8a:5b:9f:cc:f8:51:
01:dd:1d:5e:41:8c:07:89:3a:91:49:20:1e:bf:af:
36:96:f0:22:91:0b:e8:66:0a:f8:41:ed:e7:da:a2:
db:db:9e:42:c1:eb:10:7e:75:2d:fb:c3:bd:d3:cf:
f3:9e:96:60:ea:cb:e0:3f:7d:b7:33:47:dc:01:1c:
3f:00:9a:15:e4:15:38:24:88:fb:1b:b0:fc:60:5c:
e2:1c:cc:96:7f:a3:85:d6:e7:6a:18:f2:c8:0d:56:
37:24:22:ce:ee:50:75:ca:9f:cd:ac:e6:3e:db:a9:
ff:7a:8f:c4:92:38:15:f4:4f:02:4c:73:93:d7:62:
9f:50:91:8d:78:bd:47:19:10:69:69:df:19:39:93:
a8:5d:4b:36:fc:4f:e8:a4:86:08:ee:33:55:03:eb:
a4:bb:35:28:14:7e:ef:cf:ba:47:2d:4e:08:4d:ed:
c1:8d:bb:f5:54:93:66:07:0f:13:b7:cc:28:72:62:
81:a4:a7:a8:18:00:d1:4b:45:72:41:37:f7:64:02:
ef:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4E:FE:9F:2B:C8:39:EE:41:42:91:AC:79:0D:43:C7:06:9C:4D:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/58bc838e-308c-3a3b-a3b6-4a7a85b339fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
130.101.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:91:09:b2:c0:50:cb:87:77:c8:d3:40:38:8e:ee:46:10:e8:
da:41:c5:8e:82:62:ce:88:2d:8c:a5:06:3a:49:29:85:71:57:
7b:4f:cf:27:66:ec:66:14:bd:c7:fa:4a:4a:44:e0:bf:b9:62:
d1:cc:73:e0:dc:27:dd:a9:b0:a1:b1:1e:e2:65:f5:9c:ed:e0:
ad:2f:fc:58:9e:86:d7:d0:46:ff:25:a0:1d:43:e0:1f:ac:87:
cf:52:41:6e:15:85:8c:21:68:fb:3f:a6:57:ce:2f:dc:dd:26:
d0:30:d9:61:a4:f7:9f:b8:00:c0:dd:56:55:5f:32:54:92:ea:
40:68:b7:d3:b5:ba:b3:ae:7d:c3:17:e2:ea:7a:8c:a2:c0:f9:
09:ec:04:9b:ff:23:b4:79:7a:8f:20:c4:72:b0:7b:f3:a5:fb:
4d:3e:87:6c:ba:e8:06:dc:8f:43:3a:f9:be:19:ae:f5:2e:0d:
d5:5a:26:ab:fa:71:35:91:81:37:23:e4:d5:89:77:7e:44:17:
47:ff:00:5f:1a:67:c0:f4:fe:37:bd:8e:3e:ed:18:37:01:78:
6e:c2:d8:64:1d:94:b7:ac:84:26:eb:b1:62:b2:2d:6b:e4:11:
e6:3c:18:12:0a:84:f1:94:56:02:6e:23:41:fb:b0:19:06:8a:
9c:8b:7c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:30:41 2025 by rpki-client