Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5b38f259-cd71-3f74-9ad4-81d56b7f1d2a.roa
File: 5b38f259-cd71-3f74-9ad4-81d56b7f1d2a.roa (raw, json)
Hash identifier: ceAV0jC528tuF1G2TN97xH6jgRNSUcBk9Te+0TrFwj8=
Subject key identifier: D8:C1:04:29:9C:3B:A7:AE:0C:38:69:37:DB:89:F8:5B:E1:DB:1F:9C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858407DB40670E8D1FAA0C834AAC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5b38f259-cd71-3f74-9ad4-81d56b7f1d2a.roa
Signing time: Fri 06 Jan 2023 12:00:00 +0000
ROA not before: Fri 06 Jan 2023 12:00:00 +0000
ROA not after: Sat 11 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 159.209.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:7d:b4:06:70:e8:d1:fa:a0:c8:34:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 6 12:00:00 2023 GMT
Not After : Feb 11 05:00:00 2023 GMT
Subject: CN=61684359-00ac-4454-b019-ecd8ed5539c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:91:20:c5:03:8f:4d:f0:82:9b:60:d5:38:ac:
7e:b3:50:2f:44:df:4f:68:67:0d:6b:df:39:79:99:
de:2e:39:c7:7e:b4:12:fa:2c:ef:d0:a4:5c:f1:50:
8d:ba:18:5c:54:56:99:b3:b3:40:fa:6f:5c:3c:be:
26:12:00:db:9b:e2:c5:02:7e:b3:e6:17:8b:f6:ec:
67:e4:72:ea:fc:c0:c6:88:96:37:dd:15:91:8f:83:
20:79:6d:a6:7a:44:24:fb:63:3f:99:08:ef:38:af:
4c:c6:73:a3:6a:d6:b0:85:5f:35:4f:f2:08:c8:83:
40:08:2f:88:a5:71:f7:e6:6b:38:29:15:a6:6b:62:
8c:55:f1:ba:66:da:92:02:47:21:f9:8c:65:78:c5:
11:a0:e9:e0:ed:4b:ed:90:84:77:0c:5f:39:21:76:
5e:72:1d:c7:90:5e:68:fc:64:ed:b9:d5:e4:18:af:
42:09:39:c0:52:b1:9a:0a:0c:bf:b8:98:8a:2f:96:
92:75:13:6d:bb:88:13:36:3a:9e:74:97:b9:8d:3d:
b6:22:92:c6:00:51:ec:a8:b1:19:0b:a8:3c:15:2a:
28:9e:b8:a6:f7:7f:a6:20:4c:9e:e7:b8:87:75:a9:
5d:4c:f1:db:0e:95:f9:d5:11:6a:e5:ad:9c:46:57:
a7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C1:04:29:9C:3B:A7:AE:0C:38:69:37:DB:89:F8:5B:E1:DB:1F:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5b38f259-cd71-3f74-9ad4-81d56b7f1d2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
159.209.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:18:86:04:8c:3f:62:7c:8f:10:c1:b6:d4:30:21:0a:3b:a1:
de:e3:2a:1f:00:74:28:25:27:c1:47:1f:0f:94:ea:b1:30:bf:
d6:14:28:0a:3a:1d:39:4d:c1:7b:52:67:6a:17:47:f6:35:67:
3b:db:45:96:38:b5:aa:27:78:1b:f9:14:71:31:58:79:e3:e0:
6a:af:d7:46:f5:4f:7e:4c:f9:cb:91:31:97:98:99:4a:d4:a5:
89:79:dc:74:e0:97:8f:4f:ba:78:8f:af:ca:cc:39:fd:89:54:
a2:20:9a:91:ab:2d:fd:25:b8:95:e2:03:37:1f:c1:05:4e:80:
48:cd:c2:0d:cf:4d:4d:d9:ee:23:b7:cd:a4:d2:de:7d:d0:2c:
57:91:d0:ee:5d:40:f8:8b:49:95:17:83:2c:16:e9:17:0a:45:
e7:58:e0:1f:90:fd:f2:28:87:3d:04:5f:ce:f4:98:26:a5:f2:
97:ac:93:81:7d:e5:8d:ef:1b:0d:82:9a:cb:77:f2:ae:58:9e:
48:ae:6c:96:c5:b2:21:e7:12:ab:6c:fd:77:dd:7a:86:21:e2:
5d:8f:08:24:ef:22:8e:42:26:d3:f7:e5:05:c6:e3:96:cf:b7:
b9:a9:3f:bf:1c:85:84:76:8a:80:ef:15:55:59:4f:66:52:83:
d1:24:39:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:56:22 2025 by rpki-client